59d7a089a42", 0x4f}], 0x2, 0x0) 22:15:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) [ 673.005907] binder: BINDER_SET_CONTEXT_MGR already set [ 673.011281] binder: 14901:14902 ioctl 40046207 0 returned -16 22:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000600000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000400000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 673.209444] binder: BINDER_SET_CONTEXT_MGR already set 22:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0xaaaaaaaaaaaaba7, 0x0, &(0x7f0000000240), 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7b, 0x418000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0x7}) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000001200000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 673.242940] binder: 14928:14929 ioctl 40046207 0 returned -16 22:15:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x500000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000001800000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000500000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20}}, 0x6, 0x4}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={r2, 0x7, 0x5}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x702, 0x1, 0x4, 0x8001, 0x0, 0x0, 0x10001}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x42, &(0x7f0000000040)=[@cstype0={0x4, 0x5}, @cr0={0x0, 0x9}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$addseals(r0, 0x409, 0x1) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 673.539507] binder: BINDER_SET_CONTEXT_MGR already set [ 673.556585] binder: 14968:14969 ioctl 40046207 0 returned -16 22:15:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}) 22:15:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000006000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x600000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000003f00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 673.792707] binder: BINDER_SET_CONTEXT_MGR already set 22:15:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000003f000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 673.822415] binder: 15005:15010 ioctl 40046207 0 returned -16 22:15:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 22:15:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xfffffffffffffffd, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000004800000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 674.050369] binder: BINDER_SET_CONTEXT_MGR already set 22:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) [ 674.096726] binder: 15039:15042 ioctl 40046207 0 returned -16 22:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000004c000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000006000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) [ 674.248914] binder: BINDER_SET_CONTEXT_MGR already set [ 674.260824] binder: 15059:15060 ioctl 40046207 0 returned -16 22:15:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000005000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000006800000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}) 22:15:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 674.732028] binder_transaction: 50 callbacks suppressed [ 674.732047] binder: 15081:15083 transaction failed 29189/-22, size 24-0 line 2855 [ 674.779776] binder_transaction: 7 callbacks suppressed [ 674.779786] binder: 15085:15087 got transaction with invalid data ptr [ 674.803557] binder: 15085:15087 transaction failed 29201/-14, size 24-0 line 2989 [ 674.834244] binder_alloc_mmap_handler: 26 callbacks suppressed [ 674.834269] binder_alloc: binder_alloc_mmap_handler: 15081 20001000-20004000 already mapped failed -16 [ 674.862349] binder_alloc: binder_alloc_mmap_handler: 15085 20001000-20004000 already mapped failed -16 22:15:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}) [ 674.880079] binder_release_work: 50 callbacks suppressed [ 674.880086] binder: undelivered TRANSACTION_ERROR: 29189 [ 674.917412] binder: BINDER_SET_CONTEXT_MGR already set 22:15:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$TIOCSPGRP(0xffffffffffffff9c, 0x5410, &(0x7f0000000100)=r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) 22:15:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000fdfdffff00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 674.941221] binder: 15085:15087 ioctl 40046207 0 returned -16 [ 674.974780] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 674.974789] binder_alloc: 15085: binder_alloc_buf, no vma [ 675.018088] binder: undelivered TRANSACTION_ERROR: 29201 22:15:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x900}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 675.085066] binder: 15120:15121 transaction failed 29189/-22, size 24-0 line 2855 [ 675.124192] binder_alloc: binder_alloc_mmap_handler: 15120 20001000-20004000 already mapped failed -16 [ 675.143300] binder: 15085:15107 transaction failed 29189/-3, size 24-0 line 2970 [ 675.162205] binder: undelivered TRANSACTION_ERROR: 29189 [ 675.182822] binder: 15120:15121 transaction failed 29189/-22, size 24-0 line 2855 [ 675.198719] binder: undelivered TRANSACTION_ERROR: 29189 [ 675.222016] binder: undelivered TRANSACTION_ERROR: 29189 22:15:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 22:15:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000006c00000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x700}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000080)={0x2, 0x9}, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r6 = dup2(r2, r3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x631}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7, 0xe47d}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:15:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000060000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 675.674339] binder: 15140:15143 transaction failed 29189/-22, size 24-0 line 2855 [ 675.687249] binder: 15142:15144 got transaction with invalid data ptr [ 675.709160] binder: 15142:15144 transaction failed 29201/-14, size 24-0 line 2989 22:15:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 675.724219] binder_alloc: binder_alloc_mmap_handler: 15140 20001000-20004000 already mapped failed -16 [ 675.752522] binder_alloc: binder_alloc_mmap_handler: 15142 20001000-20004000 already mapped failed -16 [ 675.753444] binder_alloc: 15142: binder_alloc_buf, no vma [ 675.762459] binder: undelivered TRANSACTION_ERROR: 29189 22:15:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) [ 675.779292] binder: 15140:15143 transaction failed 29189/-3, size 24-0 line 2970 [ 675.838697] binder: undelivered TRANSACTION_ERROR: 29189 [ 675.847907] binder: BINDER_SET_CONTEXT_MGR already set [ 675.876301] binder: 15142:15144 ioctl 40046207 0 returned -16 22:15:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000a00000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 675.885410] binder_alloc: 15142: binder_alloc_buf, no vma [ 675.891253] binder: 15142:15167 transaction failed 29189/-3, size 24-0 line 2970 22:15:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 675.947408] binder: undelivered TRANSACTION_ERROR: 29201 [ 675.967414] binder: undelivered TRANSACTION_ERROR: 29189 [ 675.988139] binder: 15169:15171 transaction failed 29189/-22, size 24-0 line 2855 [ 676.036872] binder_alloc: binder_alloc_mmap_handler: 15169 20001000-20004000 already mapped failed -16 [ 676.104345] binder: undelivered TRANSACTION_ERROR: 29189 22:15:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22:15:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 22:15:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000001200000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)={0x1f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 676.565277] binder: 15191:15192 got transaction with invalid data ptr [ 676.576118] binder_alloc: binder_alloc_mmap_handler: 15193 20001000-20004000 already mapped failed -16 22:15:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 22:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 676.628864] binder_alloc: binder_alloc_mmap_handler: 15191 20001000-20004000 already mapped failed -16 [ 676.655294] binder: BINDER_SET_CONTEXT_MGR already set [ 676.660677] binder: 15191:15192 ioctl 40046207 0 returned -16 22:15:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 676.673763] binder_alloc: 15191: binder_alloc_buf, no vma 22:15:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000004c000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22:15:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 22:15:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000048000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 676.819862] binder_alloc: binder_alloc_mmap_handler: 15226 20001000-20004000 already mapped failed -16 22:15:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x900000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000a000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:31 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 676.945390] binder: 15239:15240 got transaction with invalid data ptr 22:15:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 677.007745] binder_alloc: binder_alloc_mmap_handler: 15239 20001000-20004000 already mapped failed -16 [ 677.036537] binder_alloc: 15239: binder_alloc_buf, no vma [ 677.080925] binder: BINDER_SET_CONTEXT_MGR already set 22:15:31 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) 22:15:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000005000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 677.105291] binder: 15239:15240 ioctl 40046207 0 returned -16 [ 677.134433] binder_alloc: 15239: binder_alloc_buf, no vma 22:15:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000400000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 677.342513] binder: 15274:15275 got transaction with invalid data ptr [ 677.376131] binder: BINDER_SET_CONTEXT_MGR already set [ 677.402956] binder_alloc: 15274: binder_alloc_buf, no vma [ 677.419371] binder: 15274:15275 ioctl 40046207 0 returned -16 22:15:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22:15:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000050600000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000001000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:32 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 677.990728] binder: 15287:15288 got transaction with invalid data ptr [ 678.002666] binder: 15291:15292 got transaction with invalid data ptr 22:15:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 678.060206] binder: BINDER_SET_CONTEXT_MGR already set 22:15:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) fcntl$notify(r0, 0x402, 0x80000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x980, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000140), &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000005000000000000000000726f7365300000000000000000000000696662300000000000000000000000006772657461703000000000000000000062726964676530000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000b8080000b8080000f0080000616d6f6e67000000000000000000000000000000000000000000350400000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736e617400000000000000000000000000000000000000000000000000000000100000000000000006a1176d6aa600000000000000000000"]}, 0x9f8) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x101, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000068000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 678.098239] binder: 15291:15292 ioctl 40046207 0 returned -16 [ 678.125449] binder_alloc: 15291: binder_alloc_buf, no vma [ 678.163725] IPVS: ftp: loaded support on port[0] = 21 22:15:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000006800000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000600000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 678.302676] binder: 15313:15319 got transaction with invalid data ptr [ 678.321768] IPVS: ftp: loaded support on port[0] = 21 [ 678.343235] device bridge_slave_1 left promiscuous mode [ 678.349715] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.363319] binder: BINDER_SET_CONTEXT_MGR already set [ 678.406137] device bridge_slave_0 left promiscuous mode [ 678.406463] binder: 15313:15323 ioctl 40046207 0 returned -16 [ 678.411704] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.490385] team0 (unregistering): Port device team_slave_1 removed [ 678.502470] team0 (unregistering): Port device team_slave_0 removed [ 678.512564] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 678.559090] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 678.628204] bond0 (unregistering): Released all slaves [ 679.969181] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.982022] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.990355] device bridge_slave_0 entered promiscuous mode [ 680.000723] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.012059] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.020236] device bridge_slave_0 entered promiscuous mode [ 680.069192] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.076222] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.083702] device bridge_slave_1 entered promiscuous mode [ 680.107399] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.113902] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.128327] device bridge_slave_1 entered promiscuous mode [ 680.137779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 680.195110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 680.203975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 680.283658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 680.365155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 680.414487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 680.527377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 680.576134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 680.693818] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 680.701403] team0: Port device team_slave_0 added [ 680.760323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 680.768245] team0: Port device team_slave_1 added [ 680.815791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.834232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 680.842855] team0: Port device team_slave_0 added [ 680.864504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 680.871798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.889273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.916122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 680.923514] team0: Port device team_slave_1 added [ 680.932389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 680.939747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.951467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 680.982839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 680.989888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.998493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.012084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 681.020030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.031552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.050370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 681.057769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.067935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 681.112359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 681.120491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.130189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.142581] device bridge_slave_1 left promiscuous mode [ 681.148573] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.215564] device bridge_slave_0 left promiscuous mode [ 681.221104] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.275501] team0 (unregistering): Port device team_slave_1 removed [ 681.286265] team0 (unregistering): Port device team_slave_0 removed [ 681.297843] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 681.358659] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 681.436300] bond0 (unregistering): Released all slaves [ 681.501253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 681.508720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.518313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.080412] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.086891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.093603] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.100105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.114981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 682.285134] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.291573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.298363] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.304821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.312987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 682.904793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.912100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.321304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.450323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.496311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 684.627357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 684.658773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 684.665441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.673824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.807155] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 684.813453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.829566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.841618] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.985603] 8021q: adding VLAN 0 to HW filter on device team0 22:15:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000040)="66b91b09000066b80000000066ba000000000f30ba6100ecbaf80c66b85eb4698a66efbafc0cb00dee66b8030000000f23c80f21f86635040060000f23f8b800088ec066b94b0b00000f3266b9d40b000066b80020000066ba000000000f30670f01ca0f01f9650f07", 0x69}], 0x0, 0xfffffffffffffffd, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000100)=0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000007400000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000068000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) [ 686.006862] binder_transaction: 19 callbacks suppressed [ 686.006877] binder: 15851:15854 transaction failed 29189/-22, size 24-0 line 2855 [ 686.046326] binder: 15849:15856 got transaction with invalid data ptr 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 686.080522] binder: 15849:15856 transaction failed 29201/-14, size 24-0 line 2989 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 22:15:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = fcntl$getown(r1, 0x9) r6 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r11 = gettid() sendmsg$nl_route(r3, &(0x7f0000006f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006ec0)={&(0x7f0000000500)=@bridge_dellink={0x69b0, 0x11, 0x0, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x10020, 0x2008}, [@IFLA_MASTER={0x8, 0xa, 0x1}, @IFLA_VF_PORTS={0x13f8, 0x18, [{0x19c, 0x1, [@nested={0x124, 0x38, [@typed={0xc, 0x4a, @u64=0x101}, @generic="5f244840cf865311e33df19404689ce6be0e7a42540a670d6a1e19539961b74ed9b8a1029e01e4577f9ce1008ccc612f84f4bf6a9d088700f4f4f38a85aaa3a5358e4d4a14a979fa997f4ca53723f1ffdb28f96bc72d96f7a9b9e582ef33e559239be786e001e393d46fb17edc85498538616d0a767df2b8c12525c62dc9541679c1bbd5a104b8e3ebd96b595ae0224ceb527286a9485714f6560e38b38fa0e03e8a0487ae5643ec213bda875a0127137a929cd70db03cd8e36bf620563b1a64fa3c8d2c5ed899fb4c49c358877c6f", @typed={0x14, 0x45, @ipv6=@remote}, @generic="b30488e2b6f83f5586411b3c4f11c8bdfba71fe3b62477234ab9611209cd334cd6b92dedf73e872a9560cf746061"]}, @generic="1a3cc2ee95083a148e917ba6c8004e28a52192501f87a533dc63ef0a5fde3f24703ce3cce0fbd99daeb86eef525d4f76f412ba81327e296061131ef3af63716c461edab20ba4931e54f96a05b53af5f7b7f85a0e93eab2f8e536aac1867f02a8a9186c63f769df832b1d81ae4531e56a728f"]}, {0x1258, 0x1, [@generic="7989d98534b36970743e4ff579e65453ba8e21f52acc815c5f05e00ae157fe6512d6667af153f4eba35d14015ceb715f90e20cbce55d462374d96596c6ce185459347f4b06ad837d3f4724323209375eb1ee43eb6918ce4c065cddc373f967c57aee7e6871134e59d30db0553bb64d9e3ac400f2751f40280fc2b7a22aab40", @generic="8f2fc894863b7199f335810281b30a880ca7418b4e9d88b353da8ad1197e5869c90ca9bc3f8d4bd843c23d20aa9715ba22186faf1069fe8aeaac786a1ce53997e38616cba4797c89895259871dbf260ee4f0ba28e7ae7132f9157dfefb4b741a7166dda8f7493f5e949db76988d63ebc5ff2a1c8dad919645ff7f22504f907e167829d1e9046bdb2cca1134d9d631c8211da7a29a7f3f51fe2f42b07349f6763071c8faa18279382f7e0e609506a2c406d5e24ab3877dad7436e24f7d3f84091c5a090550fc500f923ebce273b22cbd62638", @typed={0x8, 0x90, @str="a700"}, @generic="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", @generic="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"]}]}, @IFLA_BROADCAST={0xc, 0x2, @remote}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_LINKMODE={0x8, 0x11, 0x200}, @IFLA_VF_PORTS={0x5110, 0x18, [{0x30, 0x1, [@typed={0x8, 0x8d, @pid=r5}, @generic="d6a4d7aa34d65156b07354a3", @typed={0x8, 0x56, @uid=r6}, @nested={0x10, 0x3c, [@typed={0xc, 0x82, @u64=0x3}]}]}, {0x1dc, 0x1, [@typed={0x74, 0x3a, @binary="78ec07c960cdee6c0d67ee83f1c4180fe917a04db8f9848d506f6617c778da89129d1e5c7f961b90af1e8dedc6e4dc85473f0c8c8d12564c22a87acf5c1c4d7fb3a32787f8b5ee3b97258f7ba28b8d6359f9c31137324e6d5aa303a2e93b71971f5bea6dd1635adb5dfea98fe421"}, @generic="09ec787c8e22f71322053f3b5fa62bfb1aa29cf4cecd18aca207eaf33f39b5e8235abfa1cbcac458400d2eedea84e1a81c52563e47ab0819a431644a1247260c61a4a6a13c22820aaeb03df517541a8c83a02a9904c3c980d84a9b114c2a1492a0fcfbffc859eb26568257179d4e7c5611db1caf1b5e170c5d410861ea43c3426d3c067fc0f6ebe86978ea677e904a5601109915d75ec094992e9457acbee517c8ea52236f06644429f1f166f3f4598d9721218ee1fde962d6e9", @generic="cc606299765e42253ec9f88045a781ffdc76493539794ccd8a2157c8f93a8384d87bbece08173f5880240a5b0578e22dd2ba768e2889d37c4c628c537114b7d7fbbd46882f9dc381bb9a27dbe2d2e517c604b99ff250a8b23c70e7706085f77706804f11877c84e6906cf82d8de6d057b0ddd8762ebd24397de5a9ba0b61021b7929f2436359d3a651298ebf2a89bc5f6808862c60478c909c29a577b1a4aa9b0ccf7d6f05ce426976"]}, {0x3ec, 0x1, [@typed={0x8, 0x64, @u32=0x7}, @typed={0x98, 0x76, @binary="dc90384408e83da0f7e4c3971ec627694f5dcdd084e45a71997a8e3d3ac6d662f78709ae0b8824f7e9a06fd26b02e095366d785da7c60607136272a5c20db99fd15d7988e5f463f7c96904df3e0a663efca36e6c353395c27ede8da545887c5efcb9dbdbafb4ba78cda3c05884aff35067c69868e52dc48d8cf9dff73dfa3cbcd116dce08257099cd2f36b388c91610d5b65e5ae"}, @nested={0x1cc, 0x4a, [@generic="0d44c62b7f63fefe5e196240bca144f6b92376997f317322279287a82f715eba0ad79b8766ef72a6d789ac5df49c73b29985ddb034bc2d81af28374f0faad64b231273a5ddd5ae88af4babb7ec0350c707ea200cf99d1081222b899c79bfa4a76bc10be5c64923c47819ac9e7affdae6dcb02ee7768cb3f0564429490ea966ed34caf3046e0ca766641f4ab783558fe063e597b2a3b2ce52a4cf343c81", @typed={0x8, 0x9, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @typed={0xc, 0x38, @u64=0x4}, @typed={0xc, 0x86, @u64=0x2}, @generic="24d5d2d2600d53f0b30e754e11fb38180443950a185218bcd7eb9208b77deb45eb3254ca53f3386bc280406c72bb54fee159f1c4a6d2c327d372a70aebfe5c4ba89338e6437e40784dee1f5627139cc44179c0b4872c8ed8d7b1972d8398008b5d44183199ff255ae23bd5332bfac014cc9831f821b47b73b678c7a88b0a09352670db05c205c34d8f111f6f20ac30ae6309d01619719d91e02e7c7a50b96f6cd1708280e1f0c909ffc6096d33240da1957904d8201487ba1cdddd7f166fb2066d126f74602b3b90ffa9d00cdcd0ee621e615f5ed2eb66f50c2957d35655b4a773a234c9985ab0c27847da519eeaa90f8f77a566a0", @typed={0x8, 0x72, @uid=r7}, @typed={0xc, 0x7c, @u64=0x9}]}, @generic="def3a56b2922ad53a5d12628cd7b1e60257709d5779b92084898ee67153ff85a683525e879a3a1d425f235a01e59ef2d0766ecfae76c217434ca277a209574069b3f232663903d859a00ea4875e0a8b1ecd8a72696324da62da58d5e0663af52c9e3805e54b2c0f7c37e1fcbee85274b8e7039d26168d1f35ac2f48cb3f1ce040356", @generic="e9e1cb8c7a591c6856b97ca69e92199019aa1548128ab6d14944e89d8c05b7667e5ddcb93582e70508113f87591cb793bdf2b2e5694a7fdfe504058e4b825cf2cf744b1b0df6d57d21fae63dbff4fd3c65a9ea76545694875f7e360237292c9e274bf71b25b6110ae715d638ecbd03ae3e89929c5e1c610d0d6e2dca7bd4932c03ed3a32570efee20ad7c1350b523a24b365bfddb482d3a1f61f626b95cd1447de6515d6f1442611026b2579e5621cb16fc877a7f75242f40f0dfda25678e732007064093fe37a93dc6c6099a4f6a111a87b70da6454de80e1a328f2584b637b9414a798f14c5f212d3622fad4cf7ebaa05b5330aac29e0b"]}, {0x3b4, 0x1, [@nested={0x1a0, 0x47, [@typed={0x14, 0x19, @str='%,$loselinuxlo\x00'}, @typed={0xc, 0x73, @u64=0x6}, @generic="bef787ab5297225ef779c8e74220fb83fc83bb1c70c53282089b3bcc5fa0e5ce9beee69e8720c1efaaf3180bdefa22ee4f746b1c427c5b13824e98dea4955d678f86e24c9be6bfa744c88df1115debf2fb3108c8021a97849ed12a48d3778f6efcef69afa5831e9b87a93de43443dd6443556cc5240800466feae6b6d80b5701f4f7bd2f40d4f3c331dd1c50b42bc3ae7152bcfe5388e4020146fab5d61b553dd5b7752a535f4b533e0f20c4bffb2041008d21599e41c99f", @generic="ff0e9d5c3f8658619e1a879f5720bc49225c758045654be1f7fb93da7c57df7fb99099de15db896ab58f9364c0bf573d384009e026cf05893ae97425cdf90060bf284b12e8d49f3aa2e097c9a030a46cc28192684cd88ae50dd29e269398c9db30b9357abe778836adeb75c988920a9425ad2a2c6028b7573d5803c65f82c48332b5f34234780546b5602a19e81939b4163c814e92e9778bea5dda6e18c3fb5b4be4c342543c7a10edcc08a8e306fbc3f9bd1f929c64d16c8aaa8bc0dd8f84e6a28d"]}, @typed={0xc, 0x56, @u64=0x3f}, @nested={0x128, 0x61, [@generic="80348c5ad947c721cbd35fc96c805360d79472fea2104eac4bd39a7f01159457a67834d42a7fd8d5c4d42f177800ad5f6c1076a06423744d83ad6a640a3f0185b93c6db8ebd31c7797a840f005f83630f53f11802af4a21df8551d4722ef2c09b76169e5b4b0e4457aad866add12667e185c7cf5d4cfe3043434c068d803929d70af5f0d1dd5c2120f76954cdfe80a0b2be53800da04e9890898a4c2756b11fa623a0d186bd20ee97481f91a764d55a0290f9f2817f73a8368b7368bb51dda600028fb4fbb0a3a0d8a7122de82803866928be39d6be0473ed7f89780b3ff8b", @typed={0x8, 0x56, @u32=0x7fffffff}, @typed={0x14, 0x5, @ipv6=@mcast2}, @generic="f31f489f6f8c85077a2ea35f37b60399529d8b04be51a70e269db8c439c253d39c62e30304f1"]}, @generic="4575327f4a9bb5833f021fb01b01e35c691707e41c2a319a531f78471c4953c64facbc24684540dcaa39fd033262d68c22e3ae828ec953a69378eafa3777eff5e79b7f3177d56d8071a66e436a19d72529e1d5f2e4d29c0624aba6b163acdb5b8a92300e695d96d2daf0785bb25ab9d1bb829d1b285ef06e90dfb96461eaaa9ec99ab919c413734e3355da2bd1529f734d224bf9deeffebbe38e9c1a4ea18acfc8732adf0f22a35a17237fbe0b046dea7ce2235712976f7ef47da813d02f6dbc9cd3e69ebfc70ea582f57c881dbc1467744dc60215e5e289c8f771ca"]}, {0x1128, 0x1, [@nested={0x108, 0x41, [@typed={0xc, 0x59, @u64=0x6}, @generic="fa1d814c03590b61fa19753d63c0696a8ce70bedf6fb996407cee41b083f2dcac2fd40a0e785ea88d0389ff408fdddaf2ab0b7b7d361c81fd339dc6d47e522c145dd8367ee316669abd04d62291d1214cb4ad2cce9ed98f8e92c7d4b70ed82863bc5e9e34eab4fa8baabb7b801b47f2558051e73227cc0", @typed={0x4, 0x8e}, @generic="bc8e9f15b3d09ee0738916ea59a1fc2bc8bd3dd7121a30ba712382e3e232bc8528fd0691748b766999f5f51a33aa1e7fa397572e1443e30b331ab51d2eba647a0752a53666882dbb5edd87b43fb5686e97a0bc70a7586cd11aed0776eb58ca2dd3475cb07797defcff154c12f40dcf7df23c", @typed={0x8, 0x40, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}]}, @typed={0x14, 0x3c, @ipv6}, @typed={0x8, 0x16, @pid=r8}, @generic="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"]}, {0x152c, 0x1, [@typed={0xac, 0x72, @binary="41a79567306a752e9a30caca4bb54c63031898db4fb5ac20a9f981a6adcdbf283e526c70bbb322966dbf5cdbb51b352d0f9a9852a519ed115e158f63dbcd485681efc087fb725dccec4f6082b2895e1f6f91df58b2dd5414f463a0b484e9c2b6a2d221d94baa7ffe343181dc800c022589d7a39ad1c70aed5e1056fc6075c7e29e29d0a7a2e52691c1c28e9360405b2ca0270db5427be94bec8861919a0c4e4c2eb8204b2dd440"}, @generic="41c506fa552d5de08c8d6c2a8b1ba5f762fcdf685373570ef6fd6fa2515a0961cebe438702de04d1607165537837504d278f5569deafae0923026fe40223e2ab76ce7a013379f30f6144c0d4e9a64bb8d2e16587b660f9ce9e56fdeedffbd26bcc80eb82174026a293cb5e582be7ac2b51605ed2096178a1332babc59dd7c20fe41d69a16c2e0ae689a063b69b5f7dce0f85ec4f8980253ac9ff95ee3571188255e9d77e", @typed={0x8, 0x4c, @ipv4}, @nested={0x1378, 0x0, [@generic="0ad93a1ddc93b82e53108c3860c47221f928f32ea1aca770b8e6d22912346b370e9dc0398b1479a29255dea9729b40a18a8d8fc80aa4abb96e55a68b6d9c2ee0", @generic="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", @generic="95f6f40c3c21df04abdd2e0d3811a753b7410e4e9f5ab9dde4e6fb82094b12efccb2f9c63f187a7e7eae98cdc4f7723f4b8f182fe759336e9bb4382dc47ba9289eb59c8742523e0bf433377471122f553360af7af53fa28e9472af10f71b9cd10881eccfe9d618ca9c3fb6bb14bd1711f7461856ac3abef51b0f834153d0cdede15e17028201b05b28cd43b162433af66009f93cad0895377fb78c64e55cbbcc8f883f118ff2be439ec6e8ea7ff2f03894a7568603c0c330240906081cb82701453c86005004daf5c44c5a0c6e82e1d9902087dcc2c517033f2084a750c71f2cbf019471573fa34a7b6b859f", @generic="777442dc7c8839bd8b877b5b98031ea2eb1f646c7ff2deeb9af60db0e3445dcbc1472c92ee50cd65bf5f391d38e7732f83e76f70625e2b921aa15608f5abfd79b39c7323b1ad11418db3e9e5a76a8531fe53c531aa84c502a509db56c3bb5344b4cc496f0bdde8deaca822", @typed={0x1004, 0x1c, @binary="4a106de6b7f5a3b07866ea1a994de4843d662e3d8cc66adb66491b4719d031111453f3d405772c5c0556ddc1c8da0d090033c9436b90891266cf2bae1e796e9fd3ed51d92e70637a2c7649df141dab0f2e0462a018cc4d39d705cf925a8957b1dca6687ba46f5f6834b83e7cb779014329a94fa367153d39f3ecab9b86a63e3a091b9521878002717e1b33c4c05ac20d2e6663762304a6b7bbcde4c815296437b702fdccc3f24116d125690c06543385d7d06111536eb0d46df2073f1dd28ff9334aaa0da2d25e3992765a6e0974a945633c77f3b9b7359aab87123ec209776f20af1998af82ee6f5b21337ce87dce3818a7eb039995dd7f49bb40d9aac055ab2dbdec8a89d6304ba7e6c36cbe0e2febe004ed51ccb378acfb8b56b7cc9313249cb8e5adeb25932ed2d88967d632ff186a48c28e893da5f0d8af7f7c776562505b3e3ebd76a204fb2495255f0fcef463df757be54cde815a95c847516100ec95e546cfffe0cf8862f6ee16c6d872df04ec9a9b838b27b0b33801a61fdbcf7b8444da047771aac7a07d2de30ca480e3ec439f5315d813e5e8cd39e8c24cff6b5200ecaa013c0bee25aaac05786f6caf68f87a3221d5cafb5dcef826af488d54848ab2c6265eae7a1e574ecc9860a4ae52bf4b4eea2d267aaf00b1a31a6f9ee500840786f35f3e56b39017fe87809e8500a8dd3aa1140b1af18dfe0d53e054fcc1160342e210497921dd147c87063dafa678937c4bc3a70f18bfd66aabdb2e708e17731e8ea8d5a923aa743ef22bef45c136de469897d1ccfeb404d7dd2d08dd84de6deecb6adf0160441c634bc6e671403839ebe7e08a38436bd91225405b543f744c5c32dbef8ef9c17fe3e19e45852afc14845bc54aaaeeab123630970984f458df6ea0fbb784b60916c36ffae9d87cb70e1d7007fbbd2d6fa9dc0186131fb6d9947981853c8d115e1619fce0f80f9a56628dc3ce8a44c62b793e5f01c61d8b0e60f5d69134322f160c75de294ad07e2dd9562e3c9ce86e0b03e9533e9fdfb86d556dd56a3098f8cb3476637431ab1367e87daaf705f5128174df13b0e5d63c02a6a9fe945521eb17f70a13a714dad49278159651c01de614e4549a599637e3f123a11e1e22e0a18f1944731f8574d4ca8f66d746dd6f54aabcb200fba25f65704f76f51a8540281fe880bf5afc40f52cca708761475f4a1b84f60e0c1b929ffd25c375bd11d5df292f45d03470473444619e29e5539c89841836af75b26a22e3e1c16f8059797dc7347a0d629722ee3d1a6ef7dea1a85c6588933ad45d3933bbf6cb94120cf6e1c39408eccf7b76fe2c547ac560069623daa6687afdcc8ef4e126616e9256ec3bb5423f16d2e1cb0a26aae481fe41e86b31bd2c50ada5ce15593150c7d8043c659cee0f8ed3218b2257c06a45e94f196631b3f7c262df84ab0011e9b9b5e62b9fbe86ec4e7f604eceb635c87ec88fb2efe43da753a1fc986486589f7345ccdf7434e17cb43f08e8f72f3f0dcf4598d2e1533234b4110485f8db5182c6169d91ff6ba944329f80a30842aaf18a013577ce272c3b611457bd57f96fac80d0da693c5f980bfc4bbcc20b337971861ccc2995b693db21ffa5ff5fa763f046fe8e7746fdc30a629eba73a0002a7a59404d572e819e11a7153f1b005b2be6d8d7df01ec78c9d45921459e716ca6ddab1e4a4f62bbd5ba494823baeb4b898655b5ee0058a3bd8806c083f78a09658127b83d45974eeb72d72056d523ea944be03982f8f181f52c27398521862377a158c39632ac0e78ef96a1f3d864b7d042f0817760777d4ab0d7ba7279db0e8dd4b744faac5718fce6ee159deb5d2fac0b59b3fabfc8fb591cd09d717bc53ddc86db0f2d3aea781e34ba541ec0554d9c157800dd909d16c995a8e5bd17ece059fb79cc0caf12734bbcf41776bda6aeeca985df22218ec53140e375ee2b4fcf0f05fe41eec07d21b4336592839fb32ed4988fa8fd6eb8aefb07faa6737ac9ee0e3b36236de22203b0c40604fd20e3f0772095de81767616025d6ca3563548cacbb3471f372a1d706fd7e175b3e49c972f1b9bbcf42a799200a6efb99057fe4ce9b26ba951788570da6cfdb82aa5db6ccbd5028032bb0cccc8f9d56e4345133d588c2981e2de5d791530008572b8dc7def0bb465ba78f5411765bf1118f204b83196a2f7189a3b1ee5c5aea449665b016ffb670e303662995813b9cfe0a71107142e0a9a9b66f18528aac9756c87d4f78ea45fe04c92d7d888ac08dcdf411816b8e2fec71944c2500d8cf8886a6817feca13b15ff7ab6d9960993c54654574db766b7215921105cc6c84e1e00e52b2a86e824acb2063f55f9d69726d7b7bcef33ca3dd287adfc2eae3af18fe2b6c561b71d451d3b46c4ecb47e26487a805628ee10221ca554f9da2526372c461ae2fb7774c8321887489b67c6c239d37be171508b63867e689e00d6d22a595b8effe623c2fb0fa219876497b3c0bb82ccaa605e624154fd7613cabde6f0e158943a13e2330640882ce57274e6e514623e425835a9b2affb41c33cbfc60ade3cc033d8d3e874b91f7713ef8a6ec85319bd370c08296b4a453c8844e0b303310a50392a652f4688d938de8e6b24fe34f96f3ab4b99e667f512f8a150c81e4efbb443f8e959a864762890c10d00e4476a024576a5d38257ac0c4ec46a7f4eaeda40c27521e7cf1e6dd55a0d5ee83c22535bd38f8e2e4a9277060adb139458bd912ed0c86a09b4a4bbb917f58b7f8b95d516184daf17eaa05d83c7e099883cfadb444eb34f3767e243ebe314cee336d860f0b07d3ebd768e72e106953de9e1fea63debedecad985e35d69f38dc1467c8190f82dd0d9d73531edd439b260d814108d80fbb1d257b0297c54e773f094a13654ad20e6cf16a509b32a03fc6fe2fe3052abf7b549ef5581e292eae3472ec193d3acb502640aa309c0a7de21865a4a5afd676403b958416e75f5f944c47e09e7655b840ea337c754a6cf106fd17b2d5560773709b574d4b216d083ab8b5883067eeb9fc297ffc9f7c1163aea7d2ae8890d15d46e6a13a9087e26ee81d7d381e8f8152ca894ff26abad3c6e03608b2b28fdb2fcb1e338e2bde0adde363c09c349cd246e7814d087cbdff7b6802187714ff3e2e1617c2c94a9809f1604033c4916020b92a2abaa97d7455f0b08153c416e7b2a258ecc00741afd5d76633a75c4f7a220bdf2a8f8bc0d91498891b8b2c66f485669e4fe1ee46078b2b0fe3097209e90e3b9e9d20464658e662f1caa27b0e7413798986b9758cd910bc56bc3221cc1ac342d5830ad65d3ea70a3b1c561781d22d392d8c56f1a5513480c65d54705cd17a7d7c2660abd4ee489c0a73bc56f528baf6f7641a9785f818c418556b68f8f83b2cf6ca36814d003ea0d43618636bfc6b2b473bb1cb8d97ee4f5c559358e02464411dc97c56dfe45066bcf34eb048c49214f91d7db77ffd47bbad9285ec014883867b64049a843dd7ac2dac820f98e9e0cb2f402ab17ea44ec18969e75fe11644b5d4ea9a197556e7ce5bdf8ee19ed22395da11fad91652cf624f98be761771ba42318737537f48bab1eafa8b64ed7d4aeb76e8de33467af10a2409a721027d0cd215b639824bcacf6bc5971f044d4e37c28ad604028a323cfb31d4017bdbfe2591b746fd47e86ddfa5fa3f9d31c80906b12e831c690c34dde0e750841e3091550b46ca00a90f8295d0a7d4df957935e1369aa2a263429a3dc0db13bdcfbb40fac963e9ce6a32b798588a16844e6d23b8b68194c08ea0772fedd5462332a1a5c8bb5287e5e1689815d067c2f93808b79ba47db34e933d3f43e5b303d4ec279e7cd3fe2c99f302ebee4eb8c5455b4309bcf322d3b250bcf1461264e334b27686a3dcf5af3cca2e8f08fd685b186fefb2748b9b75242aa158c5cfebd818ad702024ee1e2a036494ea19b098584b7006f2a186606416623289259d14ab96c000c0c3326cc3f05bf145f55a0c3d81bb2041ac23ead77f841a54bb2fabf85cb1656d0761ec45808176df23ec7d859917628da17e7e784e3ef7bd4445d9a19becabea15e5dbbe0edc4321cd67fb727dea13b6f7f35a28b947b19aaea4b3b146e87f87717fd3bbe8e9bb28fc2f8b7d8ecc44cfba844f1d5f5a444374ef15bd37516931658d3a8c6b1ecd47816b092b5ea405cedff548a8788b339c18db2ebc33560a823417cbdd5e228286db4e586f59ca15e295743719c31eec1baf06a3242d3d537e36b2be5854ff51fa921a497d469fafe1b2ea17a67aca611cdf6552fbb3f89353f4925518cc040ef2bf81c33a89617103341d0b9ce28362dca5c7431e454cb989791deb65ff9aa00936534997ba2faae18bf37296746fff3f067fc3f39c62d265f6800e84f1f5da0223160f3adafb838803e273e61e97d4464172853bfcb0891dd0d206b5cbcd86b16e2f406505896af6d68ccebaf25456342bf270a2937f6820880da993aa04118005733cd3b59436b749fb56d8bd721bf8242e038cf96acb696172ca4c6547c823e86f2eb2ef005b70e2941056f67852ab2868bb8d4a8f365ad926c04852880dc96dc0af0d52ad8bebb8cfb96d40a1bcc046b762153f150b0fabf95d0684f6d685733a1d28729b610b35b7477fe7f57781e867616cb0e845779c0472fd87e26276ed46284c34bbaf2ff77145a3ac0a4352d772859726b100eed73349a590e46f512a5e8c88798855757d9bf19db5bc8ce61c9a367e4a30b64dbd80a3ae61a2ff083c6edadb638b1546f192f633af934ea0d10fef27e74b1ca776220c774bb281edf6dacbd0ac02a32ba330361c18fd57ac4e83dad72506492d284250be15e39a4c8f382ff15db4c0144472e52918c559ccafb16b99841a023e193641d65a34523ee5a1b49ca45bf86ce7e0ea198b5c040d69c210ca9f9bea7055be531f3339991f1223db39785d452e4e334f798f0323bb6d2071f6f6d134fc6b8c8aa256fcc9b9efd134f1e283e5c593fa16bc61c8394b7488f85479dccdc7996f44b39db53cf8ecf193bf11b5b6246de5adeb88bb7f7a521b035ba23e3ee346c24fa4c62f901ea12fe2de623b9395620f4c0dc37dff1f57ce82b9c6cd078b283cf4469d07b61f0165187d1df9126838d5261d78c2bfde6e8f6a8ed4f7df0ad846abc237bd850d2195497989594e51c582bfeffaae8e26b439f8101d668c1c488e9536b7b8078d00981a9406d0e7d4219bd9c42e1523a0cb522bcb54301ab79452f6d71ff2c77ce3beeb469407a305208c1d606d2e7a93b06addb04d2d78c83fed96b6e6120d733da92716540a91c1fd247845738a6ec51183c66fb8e07dcd3bf7c7f97ea084292eaaf4268a2d887ef8c164471571f5eee8f35e2e5caeed47375e477b042aeb22baa33be755d44cb05baac53b2bef606561a87fdd4e48108f4b2d2dff749584ec3b022955082e2af7b30030904583f0d7d5044522f46d4b3e8ec016d0039a02735975f6f55527d93c436fbbdc3b14889f8763d2c8656371ae6dabd2ae00db39ac2596db9e4a8426d67b1eea58cc7a105c80a62d6f2b894726840f274fd369ffb98440c1729972dc0ab8392c4bf2439f2328371765c5bc1ea555c4493a672d1d5f0fa62e8f576a760b498a85a56a6d92998bd3e6d391b0af1a282c036813ee1b716e7b3b89b3f0581cf8760aaeb33ebf5cf617804d1c9d38ba034de28d290dd6fefd4074242479f4c1402121dfbfd76d33da9a4378418c6ba1b53a97be7b67afda8f9d900289541bd4272277"}, @typed={0x14, 0x45, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @typed={0x10, 0xa, @str='/dev/kvm\x00'}, @generic="a7bd039751f20dacf81f263d2a95843da2878d0f3ddfa80af627a5d933df39a57d77983ce577fc52c970d122ef72ab88225891780d75901a23e37e1c88de931a975b6a7f568cc828f27ddd89686d99cbc2b0885d99b28c62858fabbe1faa35d01cebccd388578807fa883fa0fe0446ac80ca53a962a18940b4345ed725577a7ce2c2fd270b8bee7a35028636744f52f54dbd63f07bb42ed44d70", @generic='t', @generic="fd16a215cfaa668c58f0400da1ab8eacc167bbcbbff411ac871d04"]}, @generic="dd1211a24caea250290cc9543e31891337f840d2875451f2c6e0d780e4928b2dd29a05ecf6fb60446c4ddd2f011c5ac2bdd85ee5e57c74fe0be1c2e5150142c6e6f43d83e48a20f64fad9ad7b861b2568a94255e87"]}, {0x210c, 0x1, [@generic="d3", @typed={0x4, 0x4d}, @typed={0x8, 0x2f, @u32=0x800}, @nested={0x4, 0x8b}, @nested={0x1030, 0x54, [@typed={0x10, 0x6c, @binary="f1ee6c918ef17dfaab0781"}, @typed={0x8, 0x7f, @pid=r9}, @typed={0x10, 0x88, @str='bdevnodev\x00'}, @generic="5b091a98", @generic="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"]}, @generic="5c8dc8b6f0cbadb5057d6289fe131cce44a1d60fa437b1ce10f6de620e9e1ceedf239529b60650f0a7beef774fe9b5f743a2b3b236a14cdb3cf66d2b632fe3e5bed1f89b1867fc417ccb6331bdde82622c363355d3181ca137f676cf7fca19b70102152ebcfd61b42fe4a85ff9b01cb52105283d800fdd5026de05d87a17b2bb02e3ecffbffc71a8f10e1a68501dbd549e0f1cfd27c4c63522834d83405993ce9763b0742cb89571", @typed={0x8, 0x6d, @ipv4=@rand_addr=0x80000000}, @typed={0x14, 0x18, @ipv6=@loopback}, @generic="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"]}]}, @IFLA_VFINFO_LIST={0x42c, 0x16, [{0x130, 0x1, [@generic="84f82d2d940d33043425c76fb4a3dc6bd4661136c7e68305485a416f93ef8d2bd9bd7f14d1c86059a9ee1d4fb2164a4ee94061dc117ab4afe6b12fc0acd5c7c941b14723ccb43649d27ba6c26b25d194a2ef61207bc0b1901f450d99ad928490a9fe4f2e7bbccb2683563aea0feab8b748a3d6d7241eede40d442e0bc466297e90b5a8748127569633e9105d5b210bcfd151bdc400df138457818cb88a08cee3b9c2d211080eb404a166a18edc74d68571dbf65399d074cb3e03ead70e45cc5aa2bd19fa04640a", @generic="fbd69aced03051419010c2341786d4361ee321d9169396524c59013dd35386b9b7635fe21819a7e96aa512c69c8a12441c4437efe974fd09c0e3ea2364e11231d62e94cac1b80edc06f8b4938bca092122fa6917bc2d2168", @typed={0xc, 0x12, @binary="53f3f892c9"}]}, {0x2f8, 0x1, [@nested={0xc, 0x10, [@typed={0x8, 0x55, @u32=0x4}]}, @nested={0x60, 0x37, [@generic="6982d23965894af18fb037b5de9c34cda09f5ff2720a03", @generic="714ec4b692a9d4afee924b83d05366d4a1c816b1d9c4dfaf720096a0fd5ef7cf33e2fd0c631234cab15f1c6ba43ee7af72020e055ecece7b33b4", @typed={0x8, 0x40, @uid=r10}]}, @nested={0xf0, 0x8d, [@generic="0551a99cbede33635f8220c7821da276f3a29722ed25887a18cc4b25b8c2d7b61d47e8d6bf3c9178f02b441374b4b61fd5e9a9b89cbeb9bc2bd7c47b258e88b675c26e4a0a720a8aaf7bbc3aab6d5d93e15ee25da23effbb87b0bcafd14efed1a15d23c67de4d077bd22360ecf0cbf3d0661e8632b6782c126b3bc8b84edfa184357d501ef3b02c93f21aa62746e0d9b2dbae51f7cee1537ac77b5d76d8b51b9a5328da28a45ad6a948623643bcd4b73cb72c79c288235a77b9c0f473c39a120057c1ff0b25713b5d65a6322e647d0bd0acd96fc23af5387dee900fa32981167aa0c8006a4fd667f498e"]}, @generic="f21c67c82befae0d1a43aa409480dcb5429c0f66a0de01c0cf04cfc3be2150c51aa3d5ae6c7a272c7486a8e586d8b6fb6c2d00d114ae66f33ee34c7af7dfcf7d394e8f412615cb90810ea280fedf48b4da5644fb49bf2f2a77b50c56fb4b90b9287960c5ba8ec9ecc78c048e1485be940369332eb02e13aee4cf107dbcc74283086ce2f37a74b65dd0302a79fbf6899488c4239ce87a020b15d228d3ec4f469dc90a3f50334149fef9fbe5b363858b75a5453c2ff87b9d2d58f40deb3f0380e18ead4c23bceebac4f354586c5af7b901416f75", @generic="ba95ba4bf00fc01ae40c1a187c03b76a689420c91d975976d2d00e20484f62c48ce42dc6bc0ab12366847c89a018e2c25fa2d9cb071ea9819fced72a9fa1397ab364a0c417592e27cb5f869502e30869f5b39994e37e36beb7f0c2799aa4e24e78339086bb7297e6f5219fab15af4317bc6b510db1c7aeab8cde4b54e7fa5f8a32c00c46e7573630cbaad9320b6a46c1eb5d23165540c1b3220483127eb16e574da7202beb87aedc08db367a5dd6c5d21c39375ee7dcc9e17f055bbf8a29db5133f3ee4820"]}]}, @IFLA_PHYS_SWITCH_ID={0x24, 0x24, "3e4ba8990c46a116c0c4d1fe00976874d426807f01be7d4bbc0983ab60"}, @IFLA_NET_NS_PID={0x8, 0x13, r11}]}, 0x69b0}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 686.137015] binder_alloc_mmap_handler: 8 callbacks suppressed [ 686.137033] binder_alloc: binder_alloc_mmap_handler: 15851 20001000-20004000 already mapped failed -16 [ 686.153893] binder_alloc: 15849: binder_alloc_buf, no vma [ 686.156954] binder_alloc: binder_alloc_mmap_handler: 15849 20001000-20004000 already mapped failed -16 [ 686.174838] binder_release_work: 19 callbacks suppressed [ 686.174848] binder: undelivered TRANSACTION_ERROR: 29189 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) [ 686.197240] binder: 15851:15854 transaction failed 29189/-3, size 24-0 line 2970 [ 686.219470] binder: BINDER_SET_CONTEXT_MGR already set 22:15:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000300000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}}, 0x84) [ 686.271003] binder: 15849:15856 ioctl 40046207 0 returned -16 [ 686.271408] binder: undelivered TRANSACTION_ERROR: 29189 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 686.314048] binder_alloc: 15849: binder_alloc_buf, no vma [ 686.323741] binder: 15849:15891 transaction failed 29189/-3, size 24-0 line 2970 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 686.355587] binder: undelivered TRANSACTION_ERROR: 29201 [ 686.365194] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.386051] binder_alloc: 15849: binder_alloc_buf, no vma 22:15:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000930000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 686.398586] binder: 15896:15901 transaction failed 29189/-3, size 24-0 line 2970 [ 686.419314] binder_alloc: binder_alloc_mmap_handler: 15896 20001000-20004000 already mapped failed -16 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 686.473579] binder: undelivered TRANSACTION_ERROR: 29189 22:15:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000002000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000ade3b57f151886614dea4404f1aba7eec9900e8509357c9ff66c4692922bf11cc46b0a41080ba2"], &(0x7f0000000100)=0x2d) 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) 22:15:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0xfffffffffffffff7, 0x3ff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x10000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000029000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 686.587384] binder: 15915:15917 got transaction with invalid data ptr [ 686.612284] binder: 15915:15917 transaction failed 29201/-14, size 24-0 line 2989 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 686.658232] binder: 15927:15933 got transaction with invalid data ptr [ 686.677213] binder_alloc: binder_alloc_mmap_handler: 15915 20001000-20004000 already mapped failed -16 [ 686.704841] binder: 15927:15933 transaction failed 29201/-14, size 24-0 line 2989 [ 686.730842] binder: BINDER_SET_CONTEXT_MGR already set [ 686.746981] binder_alloc: 15915: binder_alloc_buf, no vma [ 686.754858] binder_alloc: binder_alloc_mmap_handler: 15927 20001000-20004000 already mapped failed -16 [ 686.772832] binder: 15915:15917 ioctl 40046207 0 returned -16 22:15:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:40 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}) 22:15:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 686.778879] binder: undelivered TRANSACTION_ERROR: 29201 [ 686.794246] binder: 15927:15933 transaction failed 29189/-22, size 24-0 line 2855 [ 686.803491] binder: undelivered TRANSACTION_ERROR: 29201 [ 686.809790] binder: 15915:15945 transaction failed 29189/-3, size 24-0 line 2970 [ 686.834081] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.874517] binder: undelivered TRANSACTION_ERROR: 29189 22:15:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000074000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000004800000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 22:15:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x4000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000d8debc985fb953ea00b03fa7e2b40291c81f3406c3459490a4e3cb76cc8e75d127f94c28229d4e86453a90886a13480d12bfe62d3134630668d7c9250501ab3d9238b31f09cfe685ea72dc3bc253c81dfde03ccfbfe50e7080fd4f8ae31c5e518b3f06f5414e5ff311e968dc46838e1423b6539f7c9c6cc4ce3290851ad8467ed2ae9a"], &(0x7f00000002c0)=0x8b) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r3, 0x3, 0x5, [0x3, 0x7f, 0x20000000002, 0x1, 0xd]}, &(0x7f0000000140)=0x12) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r4, 0x10001}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x7ffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000027000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:15:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 686.976744] binder: 15972:15973 transaction failed 29189/-22, size 24-0 line 2855 22:15:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 687.022038] binder: 15977:15978 got transaction with invalid data ptr [ 687.030386] binder_alloc: binder_alloc_mmap_handler: 15972 20001000-20004000 already mapped failed -16 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}) [ 687.092974] binder: undelivered TRANSACTION_ERROR: 29189 [ 687.100367] binder: 15972:15973 got transaction with invalid data ptr [ 687.118535] binder_alloc: binder_alloc_mmap_handler: 15977 20001000-20004000 already mapped failed -16 22:15:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 687.173668] binder: BINDER_SET_CONTEXT_MGR already set 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}) 22:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000700000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 687.197351] binder: 15977:15978 ioctl 40046207 0 returned -16 [ 687.246301] binder_alloc: 15977: binder_alloc_buf, no vma 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 22:15:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000018000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = semget(0x2, 0x2, 0x80) semtimedop(r3, &(0x7f0000000040)=[{0x4, 0x2, 0x1000}, {0x4, 0x7fff, 0x1000}, {0x7, 0x6, 0x800}, {0x0, 0x1, 0x1000}, {0x7, 0x7, 0x1000}], 0x5, &(0x7f0000000080)={0x77359400}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}) [ 687.360174] binder_alloc: binder_alloc_mmap_handler: 16016 20001000-20004000 already mapped failed -16 22:15:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 687.453910] binder: 16034:16035 got transaction with invalid data ptr 22:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000004c00000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa00}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 687.495481] binder_alloc: binder_alloc_mmap_handler: 16034 20001000-20004000 already mapped failed -16 [ 687.571252] binder: BINDER_SET_CONTEXT_MGR already set 22:15:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:41 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 22:15:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 687.602698] binder: 16034:16035 ioctl 40046207 0 returned -16 [ 687.609419] binder_alloc: 16034: binder_alloc_buf, no vma [ 687.629837] binder_alloc: binder_alloc_mmap_handler: 16050 20001000-20004000 already mapped failed -16 [ 687.630056] binder_alloc: 16034: binder_alloc_buf, no vma [ 687.668094] binder_alloc: 16034: binder_alloc_buf, no vma 22:15:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000020000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000020000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 687.818746] binder: 16071:16075 got transaction with invalid data ptr 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 22:15:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/kvm\x00', 0x400000000000002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000bc0)={0x2, 0x467f, 0x3, 0x9, 0x3, [{0x56d, 0xfffffffffffffffb, 0x4, 0x0, 0x0, 0x8}, {0x36, 0x5, 0x1}, {0x80000000, 0x3, 0x3, 0x0, 0x0, 0x1}]}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000a80)={0x53, 0xffffffffffffffff, 0xac, 0x5, @scatter={0xa, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000700)=""/199, 0xc7}]}, &(0x7f00000008c0)="b5ea9c9caedbaeebc6f8a00b0e4a80edcba16f2d00deac0b2353244bc1cf7d536575fcc84585d8f32f214c6e1e89b17851840a420f24251f2229809ff5075d6c0d03676e42bd046077e29f59cbebca46a6c5bd32333dd9e667310e7e015aa1a0abbc2c31d20e7f51cf782b05a774143ec6cf99308bc26bb983546a7618c3bb3aaa3982accd502cad8fae3a71e4b97e754016d946fc6ae8bf0f3ff908c8705c2a4fce6ed3be6ba58164bf1236", &(0x7f0000000980)=""/134, 0x40, 0x3, 0x3, &(0x7f0000000a40)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 687.863418] binder: BINDER_SET_CONTEXT_MGR already set [ 687.880711] binder_alloc: 16071: binder_alloc_buf, no vma [ 687.890933] binder: 16071:16075 ioctl 40046207 0 returned -16 [ 687.899137] binder_alloc: 16071: binder_alloc_buf, no vma 22:15:42 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000060000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000007400000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) 22:15:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 688.076272] binder: 16098:16099 got transaction with invalid data ptr [ 688.078894] binder: 16100:16101 got transaction with invalid data ptr 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}) 22:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000700000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 688.118433] binder: BINDER_SET_CONTEXT_MGR already set 22:15:42 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 688.202516] binder: 16098:16099 ioctl 40046207 0 returned -16 22:15:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000003000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000007400000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 688.363099] binder: 16131:16135 got transaction with invalid data ptr [ 688.388521] binder: BINDER_SET_CONTEXT_MGR already set 22:15:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 688.449156] binder: 16131:16135 ioctl 40046207 0 returned -16 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:15:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000006000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xc3) 22:15:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000730000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000004000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 688.677488] binder: BINDER_SET_CONTEXT_MGR already set 22:15:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 688.733470] binder: 16174:16176 ioctl 40046207 0 returned -16 22:15:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000001000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) 22:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000012000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 688.898213] binder: BINDER_SET_CONTEXT_MGR already set 22:15:43 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 22:15:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 688.975792] binder: 16198:16199 ioctl 40046207 0 returned -16 22:15:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000100000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006c00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 22:15:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) 22:15:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x323, 0x3, 0x9, 0x80000000, 0x0, @broadcast}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 689.204923] binder: BINDER_SET_CONTEXT_MGR already set 22:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 689.245236] binder: 16229:16230 ioctl 40046207 0 returned -16 22:15:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000007000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:43 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 22:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000100000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) bind$vsock_dgram(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="0400000000000000030000400000000006000000010001000800000000000000150000000000000000000000000000000b000000fcffffff06000000020000000300000001000000ff07000000000000000000000000000019000080ff000000040000180600000003000000810000000500000000000000000000000000000007000080020000000100000008000000030015b6666d000000020000000000000000000000000000af7bfda8fa27a5c11d9bc335969dd7645695d83c33702f6469f9709c6202a05c6f68594bb902e8da80f7ce6c6a855aab8f8041085d97555004a8eb1ab8d5e5e19e196c5ae5c1a7118e27b8332c3d575953020258cf1a155543d21e4ab99da6ea9e385e0a8fb8111697208623dbcc3f84803bd1fadd1790eb452e775ed57e150f14a71b971b04904ddbededf0428a"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0xf0, 0x8}) [ 689.527074] binder: BINDER_SET_CONTEXT_MGR already set [ 689.532429] binder: 16264:16270 ioctl 40046207 0 returned -16 22:15:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x700}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000300000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:15:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x300}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:15:43 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20001, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x800, 0x5, 0x2d, 0x4a6f}, &(0x7f0000000200)=0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r3, 0x7ff}, 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x29) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000600)={r3, 0x1000}, &(0x7f0000000640)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000080), 0xffffffffffffebd) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 22:15:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000506000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:43 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 22:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000004c000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 689.881507] binder: BINDER_SET_CONTEXT_MGR already set [ 689.900805] binder: 16311:16315 ioctl 40046207 0 returned -16 22:15:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 22:15:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000ffffffff000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 22:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000007a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) tee(r0, r2, 0x7, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 690.095737] binder: BINDER_SET_CONTEXT_MGR already set [ 690.115162] binder: 16335:16336 ioctl 40046207 0 returned -16 22:15:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 22:15:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000006c000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) 22:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000004800000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 690.292729] binder: BINDER_SET_CONTEXT_MGR already set 22:15:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb00}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) [ 690.326040] binder: 16357:16359 ioctl 40046207 0 returned -16 22:15:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)) 22:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000300000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000500000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}) [ 690.577789] binder: BINDER_SET_CONTEXT_MGR already set 22:15:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000002000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}) [ 690.615244] binder: 16392:16393 ioctl 40046207 0 returned -16 22:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000003000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)="acb0681e90dc905859284b3d8d80c1fee0191b215f0e821ba5ca090904bde85ef8e161605f3a2b27b8c101"}, 0x10) 22:15:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000020000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000007fffffff000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:44 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 22:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000002) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xfffffffffffffffe, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={[], 0x12}, 'irlan0\x00'}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000004340)={@dev, @multicast1, 0x0}, &(0x7f0000004380)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000043c0)={'vcan0\x00', r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x20000000000, 0x0, 0x2000, &(0x7f000002a000/0x2000)=nil}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$setflags(r5, 0x2, 0x1) 22:15:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000006000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 690.907672] binder: BINDER_SET_CONTEXT_MGR already set [ 690.953474] binder: 16423:16429 ioctl 40046207 0 returned -16 22:15:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000048000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000500), 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x28000300, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280), 0x0) 22:15:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000fffffdfd00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 691.051701] binder_transaction: 54 callbacks suppressed [ 691.051720] binder: 16450:16451 transaction failed 29201/-14, size 24-0 line 2989 [ 691.077305] binder: BINDER_SET_CONTEXT_MGR already set 22:15:45 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 691.098414] binder: 16450:16451 ioctl 40046207 0 returned -16 22:15:45 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x8926, 0x2c29, 'queue1\x00', 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e21, @local}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000060000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 691.146528] binder: 16450:16452 transaction failed 29189/-22, size 24-0 line 2855 [ 691.179097] binder: 16454:16455 transaction failed 29189/-22, size 24-0 line 2855 22:15:45 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:15:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000e0700000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 691.217565] binder_release_work: 55 callbacks suppressed [ 691.217572] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.235586] binder_alloc_mmap_handler: 30 callbacks suppressed [ 691.235604] binder_alloc: binder_alloc_mmap_handler: 16454 20001000-20004000 already mapped failed -16 22:15:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 691.313384] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.314265] binder: 16476:16477 transaction failed 29189/-22, size 24-0 line 2855 22:15:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000020000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 691.357698] binder_transaction: 11 callbacks suppressed [ 691.357708] binder: 16479:16482 got transaction with invalid data ptr [ 691.374042] binder: undelivered TRANSACTION_ERROR: 29189 22:15:45 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000500), 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8400, 0x4) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2, 0x200040) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280), 0x0) 22:15:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x40000000000000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 691.449274] binder: 16479:16482 transaction failed 29201/-14, size 24-0 line 2989 22:15:45 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}) 22:15:45 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000500)={0x0, 0x1}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280), 0x0) [ 691.491182] binder_alloc: binder_alloc_mmap_handler: 16479 20001000-20004000 already mapped failed -16 [ 691.521836] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 691.521845] binder_alloc: 16479: binder_alloc_buf, no vma [ 691.564772] binder: 16492:16494 transaction failed 29189/-3, size 24-0 line 2970 [ 691.572606] binder: BINDER_SET_CONTEXT_MGR already set [ 691.603390] binder: 16479:16482 ioctl 40046207 0 returned -16 22:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000007000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 691.610425] binder_alloc: binder_alloc_mmap_handler: 16492 20001000-20004000 already mapped failed -16 22:15:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x300000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 691.645015] binder_alloc: 16479: binder_alloc_buf, no vma [ 691.656308] binder: undelivered TRANSACTION_ERROR: 29189 22:15:45 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) [ 691.691458] binder: undelivered TRANSACTION_ERROR: 29201 [ 691.697029] binder: 16479:16518 transaction failed 29189/-3, size 24-0 line 2970 22:15:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000060000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000006800000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 691.739911] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.746125] binder: 16522:16523 transaction failed 29189/-22, size 24-0 line 2855 22:15:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) move_pages(r4, 0x3, &(0x7f0000000080)=[&(0x7f000001f000/0x4000)=nil, &(0x7f000001b000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil], &(0x7f0000000100)=[0x0, 0x81, 0x0, 0xfff, 0x4, 0x9c8, 0x8000, 0x2, 0x70], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:15:45 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 691.805309] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.832265] binder: 16534:16535 transaction failed 29189/-22, size 24-0 line 2855 22:15:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000500), 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x2, 0x8000) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000002c0)=0x5, &(0x7f0000000300)=0x2) sched_getaffinity(r0, 0x8, &(0x7f0000000340)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280), 0x0) r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x202200) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r3, r4, 0x5, 0x3}, 0x10) [ 691.858082] binder: 16536:16537 got transaction with invalid data ptr [ 691.875131] binder_alloc: binder_alloc_mmap_handler: 16534 20001000-20004000 already mapped failed -16 [ 691.933306] binder: 16536:16537 transaction failed 29201/-14, size 24-0 line 2989 [ 691.933944] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.958290] binder: 16534:16535 got transaction with invalid data ptr 22:15:46 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000500), 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x2000000000000002, 0xb, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280), 0x0) 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 22:15:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000040000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 691.976101] binder_alloc: binder_alloc_mmap_handler: 16536 20001000-20004000 already mapped failed -16 [ 691.986533] binder: undelivered TRANSACTION_ERROR: 29201 [ 692.012972] binder: BINDER_SET_CONTEXT_MGR already set [ 692.045846] binder: 16536:16537 ioctl 40046207 0 returned -16 [ 692.072544] binder: undelivered TRANSACTION_ERROR: 29201 22:15:46 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:15:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000a00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 692.129524] binder_alloc: binder_alloc_mmap_handler: 16568 20001000-20004000 already mapped failed -16 22:15:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000140)="a980a7d8443e1b3791527089410487948371b37fb6f5b52683a633d24161868eeec7bbeab066eeb344b7a76b22d2e1ed6fd5bb912f220f2af3bb4393eaf190b82750c5b961", 0x45, 0x8000000000007, 0x0, 0x3, r0}, &(0x7f0000000200)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x59f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r5, @in={{0x2, 0x4e24}}, [0xffff, 0x0, 0x16, 0x7, 0x2, 0x7, 0x401, 0x9, 0x7fffffff, 0x101, 0x9, 0x1000, 0x2f, 0x7f, 0x2]}, &(0x7f0000000300)=0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:15:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000074000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 692.246491] binder: 16583:16584 got transaction with invalid data ptr 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 22:15:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 692.337492] binder_alloc: binder_alloc_mmap_handler: 16583 20001000-20004000 already mapped failed -16 [ 692.362169] binder_alloc: 16583: binder_alloc_buf, no vma [ 692.375261] binder: BINDER_SET_CONTEXT_MGR already set [ 692.380595] binder: 16583:16584 ioctl 40046207 0 returned -16 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 692.398053] binder_alloc: binder_alloc_mmap_handler: 16593 20001000-20004000 already mapped failed -16 22:15:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8070ae9f, &(0x7f0000000040)={0x0, 0x8}) 22:15:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000740000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000068000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 4 (fault-call:3 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) [ 692.597442] binder_alloc: binder_alloc_mmap_handler: 16621 20001000-20004000 already mapped failed -16 [ 692.604073] binder: 16619:16620 got transaction with invalid data ptr [ 692.642405] binder_alloc: binder_alloc_mmap_handler: 16619 20001000-20004000 already mapped failed -16 [ 692.658691] binder_alloc: 16619: binder_alloc_buf, no vma [ 692.666025] binder: BINDER_SET_CONTEXT_MGR already set [ 692.684097] binder: 16619:16620 ioctl 40046207 0 returned -16 22:15:46 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x20000270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae47, &(0x7f0000000040)={0x0, 0x8}) [ 692.694804] binder_alloc: 16619: binder_alloc_buf, no vma 22:15:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000007a000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:46 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) 22:15:46 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000007a00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x600000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}) 22:15:47 executing program 4: clone(0x100004, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x38500, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) ptrace$getregset(0x4204, r0, 0x207, &(0x7f00000000c0)={&(0x7f0000000080)=""/35, 0x23}) [ 692.902921] binder: 16667:16668 got transaction with invalid data ptr [ 692.938751] binder: BINDER_SET_CONTEXT_MGR already set [ 692.944304] binder: 16667:16668 ioctl 40046207 0 returned -16 22:15:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae44, &(0x7f0000000040)={0x0, 0x8}) 22:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000740000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 692.968184] binder_alloc: 16667: binder_alloc_buf, no vma 22:15:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000004000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 22:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000012000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 693.109020] binder: 16698:16699 got transaction with invalid data ptr 22:15:47 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4070aea0, &(0x7f0000000040)={0x0, 0x8}) [ 693.158342] binder: BINDER_SET_CONTEXT_MGR already set [ 693.163694] binder: 16698:16699 ioctl 40046207 0 returned -16 [ 693.197487] binder_alloc: 16698: binder_alloc_buf, no vma 22:15:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x135402, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40000) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x5, r3, 0x17, r4}, 0x10) dup3(r1, r1, 0x80000) 22:15:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000ffefffffff7f0000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000680000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 22:15:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4008ae48, &(0x7f0000000040)={0x0, 0x8}) [ 693.359824] binder: 16723:16724 got transaction with invalid data ptr [ 693.372097] binder: BINDER_SET_CONTEXT_MGR already set [ 693.378609] binder_alloc: 16723: binder_alloc_buf, no vma [ 693.394175] binder: 16723:16724 ioctl 40046207 0 returned -16 22:15:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000730000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 4: clone(0x10200100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)) ptrace$pokeuser(0x6, 0x0, 0x400, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) 22:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000010000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 4: remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1, 0x2000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) [ 693.543113] binder: 16749:16750 got transaction with invalid data ptr 22:15:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x8}) [ 693.616888] binder_alloc: 16749: binder_alloc_buf, no vma [ 693.625129] binder: BINDER_SET_CONTEXT_MGR already set [ 693.630486] binder: 16749:16750 ioctl 40046207 0 returned -16 [ 693.635166] binder_alloc: 16749: binder_alloc_buf, no vma 22:15:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000fffffdfd000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000007fffffff000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 693.729789] mmap: syz-executor4 (16782) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 22:15:47 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) [ 693.772568] binder: 16783:16785 got transaction with invalid data ptr 22:15:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x2d04882a, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x500}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0x8}) [ 693.820084] binder: BINDER_SET_CONTEXT_MGR already set [ 693.835824] binder: 16783:16785 ioctl 40046207 0 returned -16 22:15:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x448400, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x1) getpid() ioctl$TCXONC(r0, 0x540a, 0x7a) 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000074000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000705000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}) 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 694.025920] binder: BINDER_SET_CONTEXT_MGR already set [ 694.038769] binder: 16818:16819 ioctl 40046207 0 returned -16 22:15:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0x8}) 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)=0x7b) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) getsockopt(r1, 0x9, 0x80000000, &(0x7f0000000080)=""/226, &(0x7f0000000180)=0xe2) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000fffffdfd00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000004000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xc41) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)={0x0, 0x8}) [ 694.303845] binder: BINDER_SET_CONTEXT_MGR already set 22:15:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 694.342529] binder: 16858:16859 ioctl 40046207 0 returned -16 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000006c0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000074000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x5460, &(0x7f0000000040)={0x0, 0x8}) 22:15:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 22:15:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 694.597029] binder: BINDER_SET_CONTEXT_MGR already set 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000060000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 694.629962] binder: 16898:16901 ioctl 40046207 0 returned -16 22:15:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x204000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x800000000, 0x6, 0xe90c, 0x0, 0x9, 0x200, 0x1, 0xfffffffffffffeff, 0x9340, 0x0, 0x2, 0x3, 0x6, 0x200000000000, 0x10001, 0x800, 0xffffffff80000000, 0xfffffffffffffff9, 0x8, 0x7, 0x9, 0x7ff, 0x0, 0x5, 0x401, 0x9, 0x6, 0x200, 0x6, 0x9, 0xfffffffffffffffe, 0x3, 0x3, 0x80000001, 0x5, 0x0, 0x3ff, 0x4, @perf_config_ext={0xf8, 0x800}, 0x800, 0x7, 0x0, 0x7, 0x9, 0x2, 0x80}, r0, 0xa, r1, 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4008ae6a, &(0x7f0000000040)={0x0, 0x8}) 22:15:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000600000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa00}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 694.807812] binder: BINDER_SET_CONTEXT_MGR already set 22:15:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x5}) [ 694.846850] binder: 16929:16930 ioctl 40046207 0 returned -16 22:15:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:15:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000fdfdffff00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc048ae65, &(0x7f0000000040)={0x0, 0x8}) 22:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000200000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0xb347, 0xd96, 0x5, 0x1, 0x7f, 0x4678}}, 0x8) [ 695.058611] binder: BINDER_SET_CONTEXT_MGR already set [ 695.077615] binder: 16958:16959 ioctl 40046207 0 returned -16 22:15:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000060500000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8048ae66, &(0x7f0000000040)={0x0, 0x8}) 22:15:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc00000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x16, 0xb9, &(0x7f0000000040)="dae21560aa44444ea510b5bd64230432cdd5b5f7f95ab09ed9b1eaa0e3e599ad6d0095bef72c6e2286919dc6c59dc1c63b786bc99c950501f5140c5168c1135ae64bbf10fe0361749467695480b61a36f1bb88053096f27a2aea58933f8a400ca0e63c08618b6c708a92ae425cb4a00ea7f9803e3cc5d233874a16fe009ec0d51281a7e7038a3ebcc4f84663d17498aab9bf9b6e387ae61ed05f24240e76a839f62746c75889c527ff16b4890d7056b34a00981a75fd345058"}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000003f0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0xd713, @loopback, 0x7}, r1}}, 0x38) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) [ 695.282560] binder: BINDER_SET_CONTEXT_MGR already set 22:15:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, &(0x7f0000000040)={0x0, 0x8}) [ 695.314191] binder: 16985:16988 ioctl 40046207 0 returned -16 22:15:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 22:15:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000001800000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000012000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x8, 0x4) r1 = getpid() sched_setscheduler(r1, 0xa, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) [ 695.479845] binder: BINDER_SET_CONTEXT_MGR already set 22:15:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 22:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000060000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 695.514554] binder: 17007:17012 ioctl 40046207 0 returned -16 22:15:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4020940d, &(0x7f0000000040)={0x0, 0x8}) 22:15:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x900000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000003000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ioprio_set$pid(0x2, r0, 0x9) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) [ 695.708159] binder: BINDER_SET_CONTEXT_MGR already set [ 695.713534] binder: 17036:17046 ioctl 40046207 0 returned -16 22:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000480000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x800000000000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) finit_module(r2, &(0x7f0000000100)='cpuset\x00', 0x0) r3 = dup(0xffffffffffffff9c) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000140)={0x3, 0xfff, [{0x1, 0x0, 0x3}, {0x800, 0x0, 0x623}, {0x4, 0x0, 0x2}]}) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x1}}}, 0x88) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:15:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000007000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x8}) 22:15:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000fdfdffff000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 695.948776] binder: BINDER_SET_CONTEXT_MGR already set [ 695.981284] binder: 17061:17062 ioctl 40046207 0 returned -16 22:15:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x8}) [ 696.083132] binder_transaction: 61 callbacks suppressed [ 696.083150] binder: 17068:17069 transaction failed 29189/-22, size 24-0 line 2855 [ 696.168193] binder: 17068:17069 transaction failed 29189/-22, size 24-0 line 2855 22:15:50 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}) 22:15:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000007000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000070e000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae03, &(0x7f0000000040)={0x0, 0x8}) 22:15:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x500000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:50 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = dup(0xffffffffffffff9c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 696.666321] binder: 17079:17080 transaction failed 29189/-22, size 24-0 line 2855 [ 696.685911] binder_transaction: 9 callbacks suppressed [ 696.685921] binder: 17081:17083 got transaction with invalid data ptr 22:15:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 696.713536] binder_alloc_mmap_handler: 31 callbacks suppressed [ 696.713554] binder_alloc: binder_alloc_mmap_handler: 17079 20001000-20004000 already mapped failed -16 [ 696.756754] binder: 17081:17083 transaction failed 29201/-14, size 24-0 line 2989 [ 696.776142] binder_release_work: 62 callbacks suppressed [ 696.776149] binder: undelivered TRANSACTION_ERROR: 29189 22:15:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x5450, &(0x7f0000000040)={0x0, 0x8}) [ 696.805854] binder_alloc: binder_alloc_mmap_handler: 17081 20001000-20004000 already mapped failed -16 [ 696.837166] binder: BINDER_SET_CONTEXT_MGR already set 22:15:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000020000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 696.869271] binder: 17081:17083 ioctl 40046207 0 returned -16 [ 696.908374] binder: undelivered TRANSACTION_ERROR: 29201 22:15:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000007fffffff00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 696.981294] IPVS: ftp: loaded support on port[0] = 21 22:15:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x5452, &(0x7f0000000040)={0x0, 0x8}) [ 697.025368] device bridge_slave_1 left promiscuous mode [ 697.031016] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.042118] IPVS: ftp: loaded support on port[0] = 21 [ 697.043470] binder: 17108:17111 transaction failed 29189/-22, size 24-0 line 2855 [ 697.070425] binder_alloc: binder_alloc_mmap_handler: 17108 20001000-20004000 already mapped failed -16 [ 697.085502] binder: undelivered TRANSACTION_ERROR: 29189 [ 697.107962] device bridge_slave_0 left promiscuous mode [ 697.113564] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.121756] binder: 17114:17120 got transaction with invalid data ptr [ 697.152545] binder: 17114:17120 transaction failed 29201/-14, size 24-0 line 2989 [ 697.208294] team0 (unregistering): Port device team_slave_1 removed [ 697.220220] team0 (unregistering): Port device team_slave_0 removed [ 697.232075] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 697.269919] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 697.329917] bond0 (unregistering): Released all slaves [ 697.403986] binder_alloc: binder_alloc_mmap_handler: 17114 20001000-20004000 already mapped failed -16 [ 697.415606] binder: BINDER_SET_CONTEXT_MGR already set [ 697.421223] binder: 17114:17120 ioctl 40046207 0 returned -16 [ 697.428186] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 697.428195] binder_alloc: 17114: binder_alloc_buf, no vma [ 697.441123] binder: 17114:17126 transaction failed 29189/-3, size 24-0 line 2970 [ 697.452496] binder: undelivered TRANSACTION_ERROR: 29201 [ 697.478089] binder: undelivered TRANSACTION_ERROR: 29189 [ 698.740862] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.764747] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.773636] device bridge_slave_0 entered promiscuous mode [ 698.842617] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.849236] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.865968] device bridge_slave_1 entered promiscuous mode [ 698.951234] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.958357] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.966470] device bridge_slave_0 entered promiscuous mode [ 698.975416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.013478] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.020090] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.027519] device bridge_slave_1 entered promiscuous mode [ 699.037292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.125366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.174077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.218223] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 699.276893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 699.346244] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 699.401068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 699.544213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 699.553344] team0: Port device team_slave_0 added [ 699.606279] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 699.613884] team0: Port device team_slave_1 added [ 699.622245] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 699.629806] team0: Port device team_slave_0 added [ 699.664877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 699.672053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.680737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.694398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 699.702608] team0: Port device team_slave_1 added [ 699.708073] device bridge_slave_1 left promiscuous mode [ 699.713569] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.755554] device bridge_slave_0 left promiscuous mode [ 699.761035] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.815830] team0 (unregistering): Port device team_slave_1 removed [ 699.827405] team0 (unregistering): Port device team_slave_0 removed [ 699.839702] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 699.898296] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 699.959228] bond0 (unregistering): Released all slaves [ 700.010850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 700.018692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 700.025985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.035428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.048505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.057024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.074009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.096469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 700.103713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.121009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.133253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 700.141249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.151891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.166083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 700.173796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.185330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.208360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 700.216238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.233064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.968308] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.974757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.981447] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.987879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.022662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 701.118097] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.124533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.131291] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.137726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.146039] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 701.564842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 701.577677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.067321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.104425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.231718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 703.264290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 703.390696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 703.397208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.413526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.431320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 703.437980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.446270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.578739] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.593373] 8021q: adding VLAN 0 to HW filter on device team0 22:15:58 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) 22:15:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc00}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae60, &(0x7f0000000040)={0x0, 0x8}) 22:15:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000002000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000400000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:58 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x4, &(0x7f0000000580)=[{&(0x7f0000000100)="8046fb23a8347c8ecd83abf06cf10ef5dea7537488972ba6bb9ad40dd26633ad1169f46708ae768543d387170581858bea930b158a13c9c371171db095b0f91d952f8a99ce1aa7d58207e160a8c2971cc27421a5deb0e003739aa2fc3022210495d1a685be43374c71f19fac6085aa8d809de3ab62507b44638ad9dff63ada49f2f05061b06dabdb010098dcd7e8a59b368a81b7ed651eaac71d8096b7b83f751533367713a2701acc323d533d09c52cee45e9783e630f46f0d32b78b6dfa8ce26c62b4ee918b0", 0xc7, 0x7}, {&(0x7f0000000380)="148052f102d4d9370d915ebcd9a88e0cd10092d30026ee8b8a424059b3d7909976f00454ba25462fd7ddd9569bce210c00396fda6174bc4865f17bcf11c3c9f90a84f4e6ad7992d0c5ddf66796773779ddcd08860857b0b46a648ff100da799050c74b77728180ce1442f7f7f54176648b8c6d9755ecf31e0968da57647dbf59afdd78aff81e934b29b31ec0fb5c7cfee7ddc21075f2fa6dd5fb4c4112a8769cd6270243fe72e6e2dcc78f3a51107d2e0c1a94635a21be2fc839b27546d8ee73ec233ade516a74", 0xc7}, {&(0x7f0000000480)="d62de67cfc142dba2c273c2446c1588eab6ae54e08400c2df04f155d5904fe5c947609acf564b67e6b7d97032d559f7bfa6b910dde7bd5b2bdbcb8265fab565f02a1a1ea61fb376f7245c1653fc2ec48d00522667534d521ef21543242d8d2c45659b64740d2d95e991fe73022333c1b52cb2450bc84cd52de272fe6355e18c223c03e8a311575e4ef09b984814e9dc830cbb87581f7a010d3ac2ada49d43a3bcbde52daeba7f392ff1c3f06896add9a21a686261948c24155b6bd224fe029f77779202f2474d2a152", 0xc9, 0x2}, {&(0x7f0000000280)="4e8af4c6851585fe8a25139096214ee40fa949e791f7ab07205c67209b1651579203baf7ad9f78e43587f23950d025db88e8918253c5771f841c9d7c8d2f9fcb8c6e49a9f11dba0b6b0c2aafbee8bd89b1cc6f7a20afc6ca71279c874ef8b15ee23e048a49d90f", 0x67, 0x3}], 0x20, 0x0) [ 704.622228] binder: 17648:17650 transaction failed 29189/-22, size 24-0 line 2855 [ 704.643047] binder: 17656:17657 got transaction with invalid data ptr [ 704.663058] binder_alloc: binder_alloc_mmap_handler: 17648 20001000-20004000 already mapped failed -16 22:15:58 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 22:15:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:58 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='/dev/dmmidi#\x00', 0xfffffffffffffff9) keyctl$link(0x8, r1, r2) r3 = semget(0x3, 0x2, 0x104) semctl$SEM_STAT(r3, 0x3, 0x12, &(0x7f00000001c0)=""/2) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7ff, 0x2000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000040)=0x6c, 0x8) [ 704.675388] binder: 17656:17657 transaction failed 29201/-14, size 24-0 line 2989 [ 704.720895] binder_alloc: binder_alloc_mmap_handler: 17656 20001000-20004000 already mapped failed -16 [ 704.735518] binder_alloc: 17656: binder_alloc_buf, no vma [ 704.759574] binder: undelivered TRANSACTION_ERROR: 29189 22:15:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x8}) 22:15:58 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 704.765542] binder: 17648:17650 transaction failed 29189/-3, size 24-0 line 2970 [ 704.773208] binder: undelivered TRANSACTION_ERROR: 29189 [ 704.781944] binder: BINDER_SET_CONTEXT_MGR already set 22:15:58 executing program 4: clone(0x803fffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x3ffffffffffffffe) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 704.816271] binder: 17656:17657 ioctl 40046207 0 returned -16 22:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000003f000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x700000000000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 704.864453] binder_alloc: 17656: binder_alloc_buf, no vma [ 704.911111] binder: undelivered TRANSACTION_ERROR: 29201 [ 704.948797] binder: 17656:17695 transaction failed 29189/-3, size 24-0 line 2970 22:15:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x8}) [ 704.960875] binder: 17702:17706 transaction failed 29189/-22, size 24-0 line 2855 [ 704.969563] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.002042] binder_alloc: binder_alloc_mmap_handler: 17702 20001000-20004000 already mapped failed -16 [ 705.021776] binder: 17702:17706 transaction failed 29189/-22, size 24-0 line 2855 [ 705.045287] binder: undelivered TRANSACTION_ERROR: 29189 22:15:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000930000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 705.052090] binder: undelivered TRANSACTION_ERROR: 29189 22:15:59 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x671, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000120000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 705.149510] binder: 17729:17730 got transaction with invalid data ptr 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x600}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae78, &(0x7f0000000040)={0x0, 0x8}) [ 705.211432] binder: 17729:17730 transaction failed 29201/-14, size 24-0 line 2989 [ 705.228999] binder: 17741:17742 got transaction with invalid data ptr [ 705.243541] binder: 17741:17742 transaction failed 29201/-14, size 24-0 line 2989 22:15:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$setptracer(0x59616d61, r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x52, 0x4200) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000080), 0x800) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) [ 705.257761] binder_alloc: binder_alloc_mmap_handler: 17729 20001000-20004000 already mapped failed -16 [ 705.283421] binder: BINDER_SET_CONTEXT_MGR already set [ 705.291263] binder_alloc: binder_alloc_mmap_handler: 17741 20001000-20004000 already mapped failed -16 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}) [ 705.307591] binder: 17729:17730 ioctl 40046207 0 returned -16 [ 705.318902] binder_alloc: 17729: binder_alloc_buf, no vma [ 705.324523] binder: 17729:17744 transaction failed 29189/-3, size 24-0 line 2970 [ 705.341767] binder_alloc: 17729: binder_alloc_buf, no vma [ 705.355483] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.364238] binder: 17741:17742 transaction failed 29189/-3, size 24-0 line 2970 [ 705.373596] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.383956] binder: undelivered TRANSACTION_ERROR: 29189 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x900}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 22:15:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000a000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 705.411435] binder: undelivered TRANSACTION_ERROR: 29189 22:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000070000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) tgkill(r0, r0, 0x19) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x5421, &(0x7f0000000040)={0x0, 0x8}) [ 705.540337] binder: 17777:17778 got transaction with invalid data ptr 22:15:59 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000340)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8880, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'bond_slave_1\x00'}}, 0x1e) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 705.582175] binder_alloc: binder_alloc_mmap_handler: 17777 20001000-20004000 already mapped failed -16 [ 705.598408] binder_alloc: 17777: binder_alloc_buf, no vma [ 705.605120] binder: BINDER_SET_CONTEXT_MGR already set [ 705.610724] binder: 17777:17778 ioctl 40046207 0 returned -16 [ 705.650206] binder_alloc: 17777: binder_alloc_buf, no vma [ 705.650592] binder_alloc: binder_alloc_mmap_handler: 17779 20001000-20004000 already mapped failed -16 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}) 22:15:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:15:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x8}) 22:15:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000002000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000068000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:15:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 22:16:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 705.879187] binder_alloc: binder_alloc_mmap_handler: 17827 20001000-20004000 already mapped failed -16 [ 705.911444] binder: 17825:17830 got transaction with invalid data ptr [ 705.914358] binder: 17827:17828 got transaction with invalid data ptr 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}) [ 705.967657] binder_alloc: binder_alloc_mmap_handler: 17825 20001000-20004000 already mapped failed -16 22:16:00 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() ptrace$poke(0x4, r0, &(0x7f0000000000), 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000007a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 22:16:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x2, &(0x7f0000000040)={0x0, 0x8}) [ 706.055239] binder: BINDER_SET_CONTEXT_MGR already set [ 706.060595] binder: 17825:17830 ioctl 40046207 0 returned -16 [ 706.113348] binder_alloc: 17825: binder_alloc_buf, no vma 22:16:00 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x100020000000005, &(0x7f0000000140)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6}, 0x10) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) [ 706.154886] binder_alloc: 17825: binder_alloc_buf, no vma [ 706.164457] binder_alloc: binder_alloc_mmap_handler: 17853 20001000-20004000 already mapped failed -16 22:16:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000200000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 22:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000600000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x501000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2503) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc208ae62, &(0x7f0000000040)={0x0, 0x8}) 22:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000070000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) [ 706.309784] binder: 17886:17887 got transaction with invalid data ptr [ 706.337301] binder: BINDER_SET_CONTEXT_MGR already set 22:16:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000006c00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 706.414827] binder: 17886:17887 ioctl 40046207 0 returned -16 22:16:00 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 706.494352] binder: 17913:17916 got transaction with invalid data ptr [ 706.513044] binder: BINDER_SET_CONTEXT_MGR already set [ 706.528009] binder: 17913:17916 ioctl 40046207 0 returned -16 [ 706.534843] binder_alloc: 17913: binder_alloc_buf, no vma 22:16:00 executing program 4: prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x6, 0xd836, 0x4, 0x1}, {0x4, 0x80000000, 0x100000001, 0xfff}, {0x2, 0x7, 0x68, 0x81eb}, {0x9fd9, 0x401, 0x2}, {0x10001, 0x100, 0x1, 0x967}]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000480000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000068000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x8}) [ 706.649036] audit: type=1326 audit(1537481760.775:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17931 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x457679 code=0x0 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000003000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 706.720464] binder: 17938:17940 got transaction with invalid data ptr [ 706.755944] binder: BINDER_SET_CONTEXT_MGR already set 22:16:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 22:16:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000300000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 706.787094] binder_alloc: 17938: binder_alloc_buf, no vma [ 706.806678] binder: 17938:17940 ioctl 40046207 0 returned -16 22:16:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebc, &(0x7f0000000040)={0x0, 0x8}) 22:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000a000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 706.946386] binder: 17967:17971 got transaction with invalid data ptr [ 706.982111] binder: BINDER_SET_CONTEXT_MGR already set [ 707.002788] binder: 17967:17971 ioctl 40046207 0 returned -16 22:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000068000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 22:16:01 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x28a600) write$P9_RLINK(r0, &(0x7f0000000080)={0xd4, 0x47, 0x2}, 0x7) clone(0x102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x8}) 22:16:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000073000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 707.435490] audit: type=1326 audit(1537481761.565:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17931 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x457679 code=0x0 22:16:01 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80800) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x3, r0, 0x0) 22:16:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 707.522793] binder: BINDER_SET_CONTEXT_MGR already set [ 707.561325] binder: 18001:18004 ioctl 40046207 0 returned -16 22:16:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 22:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000060000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc0045878, &(0x7f0000000040)={0x0, 0x8}) 22:16:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000200000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:01 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df000000000000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000580)}}], 0x4000000000002cb, 0x22, &(0x7f0000000a80)={0x0, 0x1c9c380}) r2 = getpid() r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800, 0x0) accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sched_setscheduler(r2, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) 22:16:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000006c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4020aea5, &(0x7f0000000040)={0x0, 0x8}) [ 707.768611] binder: BINDER_SET_CONTEXT_MGR already set [ 707.795277] binder: 18040:18043 ioctl 40046207 0 returned -16 22:16:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}) 22:16:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000050700000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 22:16:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4020ae76, &(0x7f0000000040)={0x0, 0x8}) 22:16:02 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0xf, &(0x7f0000000040)=""/15}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 708.011092] binder: BINDER_SET_CONTEXT_MGR already set 22:16:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000600000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 708.036531] binder: 18073:18076 ioctl 40046207 0 returned -16 22:16:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 22:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000007a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:02 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) getpgid(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000fffffdfd000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:02 executing program 4: clone(0x10804, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000000)={0x3d}, 0x8) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 708.276534] binder: BINDER_SET_CONTEXT_MGR already set 22:16:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 22:16:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x8}) [ 708.324197] binder: 18109:18111 ioctl 40046207 0 returned -16 22:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000007a000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000020000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 708.448492] binder: BINDER_SET_CONTEXT_MGR already set [ 708.465437] binder: 18132:18133 ioctl 40046207 0 returned -16 22:16:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) 22:16:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000700000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae41, &(0x7f0000000040)={0x0, 0x8}) 22:16:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000006c000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 708.652845] binder: BINDER_SET_CONTEXT_MGR already set [ 708.668516] binder: 18159:18163 ioctl 40046207 0 returned -16 22:16:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) 22:16:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000400000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x500000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x8}) 22:16:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) getpgid(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r2, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b525517282cc75d43a54cb3b440fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274f1576385a885b764dc4babfdf01646fa6000"], &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r5 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000480)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r7, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r6, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x0, 0x5, 0x7}, 0xb) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) 22:16:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000006000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) [ 709.242417] binder: BINDER_SET_CONTEXT_MGR already set 22:16:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}) 22:16:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000001000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 709.272402] binder: 18185:18192 ioctl 40046207 0 returned -16 22:16:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae64, &(0x7f0000000040)={0x0, 0x8}) 22:16:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000012000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}) [ 709.434549] binder: BINDER_SET_CONTEXT_MGR already set 22:16:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000004c000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) sched_setscheduler(r0, 0x9, &(0x7f0000000340)=0xfffffffffffffffd) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0xffffffff00000000, 0x8, 0x3, 0xf5e}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x53, "d310ce50d3e72d10f3ce7c3965be1f3044974e9f8f21cfe0c24160942575264005b78a15e057c720cc68cc9d62d28f14d05b5347300953157f0451ade1f13413182e4e71726e12c6d1dfc795bc2e9ecbfc7983"}, &(0x7f0000000180)=0x5b) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x1be1}, 0x8) [ 709.471724] binder: 18225:18226 ioctl 40046207 0 returned -16 22:16:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000007fffffffefff000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x8}) 22:16:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0xffff, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0xd025) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=""/181, 0xb5, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) fallocate(r2, 0x11, 0x1, 0x2814a) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 709.635071] binder_transaction: 53 callbacks suppressed [ 709.635089] binder: 18245:18246 transaction failed 29189/-22, size 24-0 line 2855 [ 709.689828] binder_transaction: 8 callbacks suppressed [ 709.689838] binder: 18253:18254 got transaction with invalid data ptr 22:16:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 709.731614] binder: 18253:18254 transaction failed 29201/-14, size 24-0 line 2989 [ 709.741283] binder_alloc_mmap_handler: 26 callbacks suppressed [ 709.741302] binder_alloc: binder_alloc_mmap_handler: 18245 20001000-20004000 already mapped failed -16 [ 709.750442] binder_alloc: binder_alloc_mmap_handler: 18253 20001000-20004000 already mapped failed -16 22:16:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}) [ 709.777824] binder: BINDER_SET_CONTEXT_MGR already set [ 709.784198] binder: 18253:18254 ioctl 40046207 0 returned -16 [ 709.791864] binder_release_work: 53 callbacks suppressed [ 709.791871] binder: undelivered TRANSACTION_ERROR: 29189 [ 709.814851] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 709.814861] binder_alloc: 18253: binder_alloc_buf, no vma 22:16:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc0045878, &(0x7f0000000040)={0x0, 0x8}) [ 709.831774] binder: undelivered TRANSACTION_ERROR: 29201 [ 709.838580] binder: 18253:18264 transaction failed 29189/-3, size 24-0 line 2970 [ 709.846972] binder: undelivered TRANSACTION_ERROR: 29189 22:16:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000600000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x700000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000680000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:04 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r0, &(0x7f0000000480)="441ddb81cddc4d7ec6398be9c29507e9f91e5463b9b6ec6948908a1de4c302fff2e4caefd34361ebd4db7a158b32", 0x2e, 0x10, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000380)="a1e761da1b877b6a92bb4a48f2f22d223105527f8ac89763f0dae6b11f262150e8bb1c90130cd36cb802a7b04b7762884b2d677debbc7493906e572d4058cb42c77d7d203a559c9d0b64a3b4c73391159f1f28e943e699030c289323322422ba06aaf7b0f0f3ef9058806579ab7c1b85eaac36f7c66a5399cdcebc2b82786c0beff265b7da12118f135a58fe200549b5955ffb9eb412ae8774658a1d5b175a4dfee9e100db197117bdb996e608e4387b9f22dc4e93af7f6d43a1f08fde50de39092e5dfe6925df90bfbc92aec9a92ba67a406eb5c8c3b6620c1374bf8df16a", 0xdf, 0x100}], 0x1000800, &(0x7f0000000280)={[{@norock='norock'}, {@nojoliet='nojoliet'}]}) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x4, 0x7f, 0x8, 0x4, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x7, 0x9, 0x1, 0x1, 0x6, 0x8, 0xffff, 0x6, 0x100000001, 0x1, 0x3, 0xb3, 0x85ce, 0x7, 0x8000, 0x8, 0x0, 0xff, 0x7f, 0x4, 0x5256, 0x1fda, 0x10000, 0x1bc2, 0x2, 0x8, 0x3, 0x0, 0x1ff, 0x1, @perf_config_ext={0x2, 0x3}, 0x20005, 0xcc63, 0x2, 0x1, 0x3f, 0x7, 0x40}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x800) r2 = getpid() sched_setscheduler(r2, 0x9, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10080, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) recvfrom$packet(r3, &(0x7f00000004c0)=""/111, 0x6f, 0x100, &(0x7f0000000580)={0x11, 0x0, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000040)={0x6, 0x9, 0x9, 0x2}) [ 709.993473] binder: 18281:18282 got transaction with invalid data ptr [ 710.017411] binder: 18286:18287 got transaction with invalid data ptr [ 710.024098] binder: 18286:18287 transaction failed 29201/-14, size 24-0 line 2989 22:16:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 710.049940] binder: 18281:18282 transaction failed 29201/-14, size 24-0 line 2989 [ 710.064059] binder_alloc: binder_alloc_mmap_handler: 18286 20001000-20004000 already mapped failed -16 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb00000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae45, &(0x7f0000000040)={0x0, 0x8}) [ 710.098538] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.106559] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 710.121897] binder_alloc: binder_alloc_mmap_handler: 18281 20001000-20004000 already mapped failed -16 22:16:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) [ 710.163161] binder: BINDER_SET_CONTEXT_MGR already set 22:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000a0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 710.200672] binder: 18281:18282 ioctl 40046207 0 returned -16 [ 710.200728] binder_alloc: 18281: binder_alloc_buf, no vma [ 710.230779] binder: 18281:18317 transaction failed 29189/-3, size 24-0 line 2970 [ 710.270980] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.280515] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.289125] binder_alloc: 18281: binder_alloc_buf, no vma 22:16:04 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 22:16:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}) 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 710.343230] binder: 18321:18322 transaction failed 29189/-3, size 24-0 line 2970 22:16:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000007400000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) [ 710.387661] binder_alloc: binder_alloc_mmap_handler: 18321 20001000-20004000 already mapped failed -16 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb00, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 710.465868] binder: 18321:18322 transaction failed 29189/-22, size 24-0 line 2855 [ 710.482030] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.495310] binder: undelivered TRANSACTION_ERROR: 29189 22:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000030000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 710.525263] binder: 18339:18342 got transaction with invalid data ptr 22:16:04 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x22, &(0x7f0000000040)=""/34}) 22:16:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 710.580647] binder: 18339:18342 transaction failed 29201/-14, size 24-0 line 2989 [ 710.591874] binder: 18352:18354 got transaction with invalid data ptr 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 710.622606] binder: 18352:18354 transaction failed 29201/-14, size 24-0 line 2989 [ 710.655512] binder_alloc: binder_alloc_mmap_handler: 18352 20001000-20004000 already mapped failed -16 22:16:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc008aeba, &(0x7f0000000040)={0x0, 0x8}) [ 710.685225] binder_alloc: binder_alloc_mmap_handler: 18339 20001000-20004000 already mapped failed -16 [ 710.697724] binder: BINDER_SET_CONTEXT_MGR already set [ 710.715256] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.728270] binder: 18339:18342 ioctl 40046207 0 returned -16 22:16:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x300, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000007fffffff0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) [ 710.785290] binder: undelivered TRANSACTION_ERROR: 29201 22:16:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000006000000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fff, 0x80402) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="f9070000000000000a004e230100000000000000000000000000000000000001ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000030000000a004e2300000000fe8000000000000000000000000000aa04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fe800000000000000000000000000016ff7fffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000fe8000000000000000000000000000bb0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb46ea111a152421d18c14bd4ce8d82fe023"], 0x210) pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 710.862889] binder_alloc: binder_alloc_mmap_handler: 18381 20001000-20004000 already mapped failed -16 22:16:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x5451, &(0x7f0000000040)={0x0, 0x8}) 22:16:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) tkill(r0, 0x21) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="2bcd", 0x2, 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/42, 0x2a) 22:16:05 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000003f0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 710.988454] binder: 18395:18398 got transaction with invalid data ptr [ 711.062497] binder_alloc: binder_alloc_mmap_handler: 18395 20001000-20004000 already mapped failed -16 22:16:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xae71, &(0x7f0000000040)={0x0, 0x8}) [ 711.117118] binder_alloc: 18395: binder_alloc_buf, no vma [ 711.119510] binder: BINDER_SET_CONTEXT_MGR already set 22:16:05 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 711.188490] binder_alloc: 18395: binder_alloc_buf, no vma [ 711.197407] binder: 18395:18398 ioctl 40046207 0 returned -16 22:16:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x700, 0x1) r1 = getpid() sched_setscheduler(r1, 0x7, &(0x7f0000000340)) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) fcntl$getown(r2, 0x9) [ 711.231109] binder_alloc: binder_alloc_mmap_handler: 18418 20001000-20004000 already mapped failed -16 22:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000004800000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x40049409, &(0x7f0000000040)={0x0, 0x8}) 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000200000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0xfd92) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() ioctl$BLKRRPART(r0, 0x125f, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000340)) exit_group(0x6) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0xeb5) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x4000000000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040), 0x4) 22:16:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:05 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x3, 0x2020) r0 = getpid() r1 = memfd_create(&(0x7f0000000000)='!\x00', 0x7) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$VT_WAITACTIVE(r1, 0x5607) 22:16:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4040ae77, &(0x7f0000000040)={0x0, 0x8}) [ 711.492604] binder: 18457:18459 got transaction with invalid data ptr 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000048000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() getegid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 711.539224] binder: BINDER_SET_CONTEXT_MGR already set 22:16:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 711.572540] binder_alloc: 18457: binder_alloc_buf, no vma 22:16:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x80700) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x100, 0x1c, [0x81, 0x401, 0x3, 0x7, 0x7, 0x10001, 0x6]}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) [ 711.614539] binder: 18457:18459 ioctl 40046207 0 returned -16 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000005000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000006c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xffff8000, 0x8}) 22:16:05 executing program 2: clone(0x40000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10002, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:05 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = dup(0xffffffffffffff9c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x1000, 0x0, &(0x7f0000000380)="8767b3eb4ae321764775e92be3e0266e67f455266851b0654112f3e84c4363b86c41468dce2fe97768f882d08e9eab7b6801b28b3f7a148f979d43d1369580d26d88324da57c310f57a23cd93bb78a7258f1a9e863390dc6322b98ed7aba54abb76d101da4eb95b4c353c17748fba6f85834021541cb755ca36b7148d5645f019219763aca4ad552316910ce0a58717ec245d8959da1d64545be1f6d833019514dcec314118f06f7fbf772bca7f26668ef6cf515eb2b316a81663e9e4071ed4327c7625946918b6c663ad58acda8507920fffcbbd67f5c6fab38bc9a303c2dd448fdd33376eeea4fea65c1e8f6094e97cf65c1b76cd8b4dd6569046088ef45b927e6911ff3837ca2482dfeca4fdc107b02014d5b76d8bcb1396f745bb612815bad0ac43f1b7f469cfc2c20633d6232ab08a2f6605eae042069e91286e0d114e0c233ab68bda83413984557468de4c4da5f41c1327a8e9a6c382977c664554cda7cfbcdfe28b98fda780a7fc88bb0cd2e563994f6b8eb697c1c7ebd3d51384fea5ffb9a4d49ad7a5c9dacd8a15eee41102188b250453d024d225be3b83133bd91c1d9ccd6ed4cbd56e3f5aad79661405bfbe88c8358786a1a7ec7f6cc006a0891e51dabb211189ecdedebd604a4ab9ee31f8ae2ae2e13221a930faaa01d5b1917245c03f10f2bdb5b50d07e1f2152b6af6edb861a39df7161c6fc03610b2c5be24156f0096a7a997fdfb7b5889247a509caa0bba0d1ee41c08116b38f205a28b89e96f0f3ff9629d153f6ffd45a54e029950ed8ec086d88ac04132d0f3d9d265d7a790374e75708cbdabed8c36e244fe85f9337907b1ec7c84a090fdb08e4634b41122d0c159b04e1e121545aa68ac3b3ced1213650d81ed1ec6cf3cc0bee69396f9dc76325a262d2759f4f4cdbfdb4b7ec1286dac75e3c11fae17e0f36dec1af9954d558cd774c59f05f351f70bba516826bc13010fb12f0817be22491eb0df7c80b05316fee2c2d6d3f3e3fc7a66360c5e833ed7d867542385e34ac6803ad30fd96c4adf903655383a3ddb5f98edadb5dfdf2a193e57021196f3e01503ba3047d31f098aa40d66c5938b9ab5472944a4f376bdb359ce41be61d56f6fa808bccd12df902325c5ba7fa56a0813871d448b89a51c6725b05d5090f902f118729292668424edbf3bc7212c5fb24198b35f5c33c31704c9b356d34de1f61b3b3de77cef1b32b14f8c110f548d45eb71960664d8e6ea3e4d24d3e51567d0a6d28e571be92113cb696751bfd0dd0312e3e9971dc66fd261229c2ccbc8725301df0dd76ea977a4482fc71d45752280bf4fbb920f05a8650e667e4858367259974bc9622115069eae99fd58bfb01436dd55f1963315d01be1dd96a49ac2b7d90771691c25c60357c9af7e312ee1100929baa14ceb9afe70aebfc5188af665b0fe8b61f9bb42ad3dfee513b5416c446d56390969fec0ab54810145a55345004ba165d037968fbe97cf3d369d107bc22faa29863aa57b3dc27155477eeb7a4f7bedd5188f8a5bb8c60f24eb655a5872eb282c7379704ad837b2e4c55826f15270750756e774bb3459beae61a1525ea67b1a858bca9178a92841a55b84226a9d8f5b9dfd1fffc3e826d390ea3a034512bd85f4e527b7f967f1aaa3e427a2e2b1d0dce559b14ebdfdae47d1af59c8a944b93546dd83d0a2228f6624ac5bcdd662d30f05847fa331d669ceceb49c5a6d7c2cc23387064f43287bac30871c2f8eecd4f5c3e998900f8c027607fabe0e8fc77588d2ccd7ed4e33afddbd709def46c2037705c59ad238f08b482375641e7e485cbcb8ecda207765ae3db0141bdcff8e8d8c070875faaf13c24363c42c8947390cb6079bec9629be967036915a2303b698bfd4fc960411b61d52b7ba8fa91945af04db72de6f5975d1f46636fd0c5e4897eed26ccb4c8f4452dbc05b9afbb29c17c79e5bfbdaeb68e7a38cf0100327be0623133258dd6118cc4e175fcb399c72a10668d2889994e04f5c83ee3adafc5803c60897779e3c2e55b0e66b1543f2a4f3799034a5f501c502780b3882a7baaf5fe4733e4a72fbd4d3cee245abb05b1c5e44a51be9489a1c04b6e39299b1c24e230f509a92ff7066f3d5039236ed0c820fc8df6af75effe1ed350224c67670d2c95496aa2b8154f27bcfa4dab61301c7815322a7d4907a9dfee1c66bcd9a80d7dfa8861b1dff371614383b18c3cbe1266bd37dad4b9bcacaf59fda185eff4120308e1f23c1a299718845fe77b04b330cd0435111e821028264cd17c045761eca443a76d52e210c8774b7082b786940bbaed0f83c5b8be7e3d5642165aed00bfe3d7d97d5f28b99733824da2a009bd557682fb95de7c41b339a1195863b45790850762ef86ce4526aff7437e948935de77030497207c26663d14a763e9216a6731a0ac087b951295b83b0d9ac8ae14e35c9e5604dcfc31c1426791a6668064dda67fc41b50bad20b0ffa5912d95eec47fc427e478529c67620197c93b35299eed6ef51290a9b55cae29cee46bfd6fcb2a1810221a8acda3e458a07bf0989c85d4d696d7924b0676e45cbda662b63b16bdaa132f9c6a6127a2b244cf473842b8c61c2fcd063d5b27dd40fd8a9816eeb6c6b9034af7011fd6395f35b69c57070d4673e618ebf411118dda88428bdeb3be6b86fd2750f5a586aac534cb240877e7de47a5e97e370aafaa2739385dfef60908b44509847c1c4a2fe37eb6344d04427e073d2c5f61f98a388641dc153f449b280d3be8fd57b65a246f65bb34e596ebf5c6529d04be9716c94f9196012a44a2ce4ab856cc5294ca110f10a0f9bfb2af5458dd17b92b30dbd8624dd8e59ff488eee0c0deda5ea09d700d7393dc088246d835ccbf6c068ebabd22e802ee8f37ce9256ff39c885bb7a5f1635077703a81f1b1e9b4e7c8d76a287a34ae617b0e3a8d4297ba2c0ead5228b9b40403014787949bcfabdc28bdac82b87b5e6f63444d4b89efb8ab4553d3d05025322411e97c1701b4fbd767866025208f4007caf68de8ea9968ded8c7ebf107f90e410166f9b8e140d1835402cbbaae3004d9eefe9ae43b1b5433509f1d5a54a0151974d30164996d368db27159dd265d1e6767f701122b1585f0470747bef05ae12119b4e1edf528401171e644ddeeb7781339e36528ad6be9ef890a67aec3d610744e12642d03be29e5957fc080235e93ab185951a0774123b0f8d366475f9f7d4042b18fce9550fb93bbea11b8cf4356cdc7f5669c7088f3eb73e7cf29bf79926a4f535bae89d2786e329af170e0fffd1925851edd8f07ed91e3f999ac8f0cdb15e2dfece10d07b30be7e1b9612213c7dd62ed8f83d61a173005ef34cd9c340f11c2fc32233bdb18c3469b1db66d3f6bf1fb0d9b1d9904d5a48442c4a6b0284f4a909254da5257138d8f3f3531bce15f3aa5b3d2d35a133a9729667df7defa24775e1a8bfca737ecb808021cf1692d4996875f3f6cf5cd1ca79eb0d5eed181c6e4d7d8cc68508da345325920246675829e0d549b995dc79d4f6bca50f1303a69b99ab76049a30b02cc5f33050922565bef63afa3ef71545671a65921bfb70fc1d77c5c80311449061acf9077efab7c61d0348b6410a154e0d10e218d57ae2af6a52735b5c30199583fd4e4546423d9daa40e997f3f5a0f3e3d977e3b0161eb0e99144f7a646b61837f45f1b71fd16c9a35142a6edaed1af458f5f0b9b9395b508766865a13e0a110d898f19a06fb1c63f7043ee558932e77a01efe400f19bdb6dc2c7cff4d074eeb9e7bee6a3fda5e89ca58ca2097720c84223ae168efe5c0e561822c476da305f06355d6e835733d6a87bbab6614eb5fe3320cdcd36d169c525a7f03774121f1a5842dffd5f67e128891db65c1b601b96c7c0c1d4b271e74b68405060d7cda2e4bf1523784ff21341458b7349c9b65f73e536b7c8d59aa376fd0c365133c5ca8e109e2ff37471dd67729cf7d6eac469a3a4e21174e674a8d9e7a8516795938e16551b753fe7b0f273d2f888c5d622fea88e2493c93173a344d29b773c782fd83f4d3bc58fe5f5ff49626f365eff1a58e117c53ab3816be4eaddde7a4f8042be9adb04307a888fd9029187dcd22ca9bd38d83c0681a5a808d86b24b5fed6e2a0b9ca93b0f6e210e17d7db614a598e55f4dfcf98149bfa4bb5746baa44ab2d9e25176b04f4438b03ac9e474e11b01d88bb35f65289a3856a824e2c84eecea1f004232acd2a9340ac818e4d681b211145f69529c6f2a5851ece5c19242f40130e1546fbbb424e07097eae5b37d7d9689015c57458d02e63f946ab7272433143d351b04755886df786f3cef73002d2090a794f7fb9b7ee08c9e4ba4f019be5bf3aeadf6da8413cb4ddcd2babcf20afd621d531d11c08442eb678e0d8e7e9d6006e32b6e8154f46b56e9624b1d85b6239d753f59a2dde17b66f21cc12837497033baba9e10ccb9be4931f1ee2684bb59a580bbbbcd1d05e57b3f435504d32902364f412626814cc3e345a32954cca9f477e694933287711d00c1cb1eb2adcaec5f0d97424c04f336c67e5eb8995181f9947937e0d5cbdad7ce6543404cda92490be9893cee7ed909ea1cd7a536b694661cf67a441280d39adfe625dbaca6768285f31951118313180e4a798b5e345c6b21f933881dd243234c8eedf30887e457d6d80781a4a4105a1a064ce671dd9581ca3b683bd2428f68393d84e4efba844f3faaffd7d7f8fad6c1a527595b4c252e779a666eb8af3695a29935131b1dc9d8a046cc78409a0076663cad1980d84853cf8ad852264a3a9f0edde67e716ec97bfe1b85cd79a6525358ce64b9b8ff220de9d76f9caf85b33e5713199a4f8e2a5ee7bbe5d720fcf4c6d7ef124beddab94c00eedd65c9efb2c07728184ea08134c9ccb723d068c27d771c4a343a5511ace54530155c8d0f966f2bb14c2d22e8e1c4a83f543c1150546ab0c106cb1d2ef74bf644b1c53370248102c287fc5b358d8706c6c11df51972f47c5d53ebf0524f6be1c3e002d25b32b7c36581243f98f7265d837fe3c7521af35e166362e42389ccd38a376caa4eec66f24ef905255ec7a4820c6e051e7b769a3052126b6691cb989ea8fd9c46f2414cb3a766b9ac5f4d561fdc0a2222ed9fa73d9d8ef89098b452d9fcae11f54370401ac0f3d44db3ec8588ea9f4dbabd29a2fe4bbd597eae9f5a2383038168e886def1947354c3775b25bc97de3a20c341010b29ddd68c4a8b8c6c4ad8f797b54fe03e65fc90ca8b4ac03f2c5d5ecabe4b19b9e96325d456b4c23f0c00d6be4a3dd469391b5c719e91e09fffce361936bddf911daf62b1ee32974553eb11491735cf99f4261b9e36313d9b477ad856803407c6b5fbecb8f529f57d9b59f395763673b6477c1699bb4e9e6979163c17d5920926221e1a85b1928baf856455af9239e968a156b04d866c95a66cc715eb8348c673c9e42fcbc9b4d4aafc508085e2165680563dcf11ed24418bb7fa0f1f5a1a4f972d32b4fdf8ba6f5f435418047610ec262b90977074e08b2ae17e52c6159d9a4657b765a1d335b6b0e12671904a1552e083209d03f2eddef5135aeb7a53cf588418fdce90f8a5c2b012f696e95768f39a304ce8e456232bd328b31981a83ba61cdb7f7d6902df0a5b078e73a8f55d59e79057d4949dd2a2edc4d97a8d00ad9692cde2c45ba3ac7bc80f9c7dbbdc6504f2bab7eee0dc3d2a432b2b1c1e3dee1dbeac4013e65782321c68ad34c81950bb3feef4ac6dfdcef6aca17bb2b602e"}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f3, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000004c000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 711.841380] binder: 18505:18506 got transaction with invalid data ptr [ 711.907255] binder: BINDER_SET_CONTEXT_MGR already set 22:16:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000280)=0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x979, 0x418000) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x9, 0x10000, 0x1}) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e20, 0x72b, @empty, 0x5}, @in6={0xa, 0x4e22, 0x9, @remote, 0x28}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x401}, @in={0x2, 0x4e20, @rand_addr=0x80}, @in6={0xa, 0x4e20, 0x3, @empty, 0x9}, @in={0x2, 0x4e20, @broadcast}], 0xa0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) connect$rds(r1, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000480)="4eec9f97dd5eb69d5112f360ecb9ea624fa9cebc396eed07b0aaa10725daa5540888aca17caf194e87f348f4ece66f56fafcbd08cacda1ffadbe9600fa27f2ba7c2a1fc5b480fc332d723f070de9d5724e6ada3f8d2105959cbfb279fe820dc7839abda78f059dd6f28b6894e22b413af7c27035d54bbd2c210846321173471f1cf0bf81b47a042bfc092e85dadf8f2d2499f856524b211c0a9526223d3eea6c400cdfaac3eae3e665190670c59590b6be573562588dec6320dc96102fd2980dcc096226c53b828d4c3bee") fcntl$getownex(r2, 0x10, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4a, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/dsp#\x00'}}, {@cache_fscache='cache=fscache'}, {@cache_mmap='cache=mmap'}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@uname={'uname', 0x3d, '/dev/dsp#\x00'}}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, '/dev/dsp#\x00'}}, {@access_user='access=user'}, {@afid={'afid', 0x3d, 0x1b8}}]}}) [ 711.939568] binder_alloc: 18505: binder_alloc_buf, no vma 22:16:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x80ffff00000000, 0x8}) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() mount$9p_xen(&(0x7f0000000040)='^&]\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20c020, &(0x7f0000000180)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x8}}]}}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000680)=""/4096) 22:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000002000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 711.987591] binder: 18505:18506 ioctl 40046207 0 returned -16 22:16:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000005060000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000240)=[{0x7771, 0x7fff, 0x4, 0xe052, @tick=0x1, {0x6, 0x9}, {0x1, 0x4}, @raw8={"9bf13155cd74ce323c6d9f5f"}}, {0x1, 0x14, 0x9, 0x2, @time, {0x6, 0x800}, {0x6, 0x8a0}, @raw8={"906c0b0a235ec76c1630d402"}}, {0x1, 0x4, 0x8, 0x2, @time={0x77359400}, {0x100, 0x100000001}, {0x6}, @quote={{0x6, 0x7}, 0x2ae}}, {0x6, 0x6, 0x5, 0x1, @time, {0x20, 0x1}, {0x10001, 0x81}, @queue={0x6, {0x6, 0x3}}}, {0x8, 0x8, 0x80, 0x3, @time, {0x3, 0x1}, {0xba76, 0x1}, @time=@time={0x0, 0x989680}}, {0x7fffffff, 0x8001, 0x8000, 0xffffffff, @tick=0x200, {0x5, 0x20cc}, {0x3c89, 0x84}, @raw8={"c2ced9da20d458d596cbf06f"}}, {0x8, 0x1, 0x1, 0x7c, @tick=0x2, {0x5, 0x5}, {0x80000000, 0xa3}, @control={0x9, 0x1, 0x9}}, {0x73b, 0x0, 0x9, 0x9, @time={r1, r2+10000000}, {0x10001, 0x1}, {0x1, 0x20}, @raw8={"e7c73cd71b88784b7ba2e999"}}], 0x180) r3 = getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='..\x00') sched_setscheduler(r3, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000004c0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 712.230555] binder: 18550:18551 got transaction with invalid data ptr 22:16:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5a, 0x8, 0x67a}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0xfffffffffffff800, 0x10000}, 0xc) [ 712.271924] binder: 18560:18561 got transaction with invalid data ptr [ 712.297795] binder: BINDER_SET_CONTEXT_MGR already set 22:16:06 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0xfffffffffffffffe) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xca3b}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x200, 0x30}, 0xc) 22:16:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x80ffff, 0x8}) 22:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000120000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 712.327155] binder_alloc: 18550: binder_alloc_buf, no vma [ 712.339177] binder: 18550:18551 ioctl 40046207 0 returned -16 22:16:06 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000004000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x4, &(0x7f0000000080)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) mq_open(&(0x7f0000000000)='..\x00', 0x40, 0x80, &(0x7f0000000040)={0x8, 0x8ca6, 0x2, 0xff, 0x2, 0x1, 0x9, 0xe0bb}) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000a000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0xffff8000]}) 22:16:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10200, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = gettid() sched_setscheduler(r2, 0x3, &(0x7f0000000000)=0x8000) link(&(0x7f0000000400)='./file0\x00', &(0x7f0000000380)='./file0\x00') sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000240)={[0x1, 0xd000, 0xf000, 0x10d000], 0x0, 0x10, 0xde5}) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x2}, 0x1) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000fe000000300ab96eee4647771e852a4330e173f3767594b33cf153d57650f480975f2f1f5c2f3d138d50a0bcc92b77e0f9f9238dadbacf767097ffcbff175ca871436fb06fa6ab24f11af56034820a6973cb8d04e59acd6071ebb98480e0787f7287e98d7c131c5a3cf31b271e2e420c3b56656323903636c45cb443dad8bb368e95c33177cd8f353c406f58ec5928447d5372d446176beac850cdf60758bdb6441e588f2b1339d087a870086ed6112fe24b4071537cb840bc4be65f84baff6dc6311c42c7b1b3b5f6c0874143083127821787a23090dd1e66e4b09142c41be687f31e2f08b6d746c17a035276000738580017c757cf9f5a7809c0a5968f7af151d94c810000000000000000b6d1e0573c61310000"]) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 712.665862] binder: BINDER_SET_CONTEXT_MGR already set [ 712.675658] binder_alloc: 18600: binder_alloc_buf, no vma [ 712.692406] binder: 18600:18614 ioctl 40046207 0 returned -16 22:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000050000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x80ffff00000000]}) 22:16:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000074000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:06 executing program 4: r0 = socket$inet6(0xa, 0xf, 0x401) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000001a80)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001ac0)={@ipv4={[], [], @local}, @dev={0xfe, 0x80, [], 0x1f}, @empty, 0xbd, 0x3, 0x3, 0x500, 0x100000001, 0x80000, r1}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_tables_targets\x00') ioctl$FIONREAD(r3, 0x541b, &(0x7f00000004c0)) clone(0x40000, &(0x7f0000000280)="04724f9496045497579dd5b8d889f3d3111e7723255f5c57e298c83a156978d2d7029839279ddb0f88dbf8d2bc4f619fabebf34793d017898f7fcb52999ffaf23de5f30fd29ca878ae62388dcfeaca57f9f70337c6d75b9c1f", &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000380)="17d83bc875749831b34cfa0db51d8618b2796e49f5153b0d5abeefe7e352a01aa702133c9fa53717ff8623ab1f0587c65e593a2d8d8fe16908d979206bc0061db04a1280c91a3337c4705be867b401c3ae452ed43c1b4094ad2e327bb575c49bc57ad4dede1d40e7c11fce1982eb2a78e35befe5b65eb0faba00b260ac3370137e2a35172ab9d32274867811dae8d6281f1c9a1f960a117ff3f2bc8f39974587e7ac8f1b29c6bd05c058c7be994ad856e01fe750ad3dab2e9b143929ce1f58df04fb8fa8781deda81c7edb3dde780b5818f8046364701cdec86ade5ee1cdd88efa1167") sched_setscheduler(r2, 0x0, &(0x7f0000000480)=0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000180)=0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000a80)=""/4096) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x408000) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000100)=0xbf81, &(0x7f0000000140)=0x4) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000040)=0x8) uselib(&(0x7f0000000080)='./file0\x00') ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680)) 22:16:07 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000240), &(0x7f0000000300)=0x4) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) 22:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000007000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x80ffff]}) [ 712.980818] binder: BINDER_SET_CONTEXT_MGR already set [ 712.997931] binder: 18646:18648 ioctl 40046207 0 returned -16 [ 713.005932] binder_alloc: 18646: binder_alloc_buf, no vma 22:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000003000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000a0000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0xffff8000]}) [ 713.225456] binder: BINDER_SET_CONTEXT_MGR already set 22:16:07 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x8000000000000009, &(0x7f0000000180)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 713.259196] binder: 18666:18667 ioctl 40046207 0 returned -16 22:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000007a0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x80ffff00000000]}) 22:16:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000004c000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 713.470813] binder: BINDER_SET_CONTEXT_MGR already set [ 713.498635] binder: 18689:18690 ioctl 40046207 0 returned -16 22:16:07 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000400)=0x80) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x10000, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x20208, 0x4) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x9106}, @void, @x25={0x3, 0x0, 0xfb, "7d7251b7215f218c51a3192f50bd3be14d5c69092be935311e21901d2b4cd6f0b9f8a8690c852438063dda6b008451ca1c65b5bd4d3ace336222006a29d6ff1f20f2e8de9205c79181e0a0a85c69aa1b75e43c5dec16028b1389a655f86cc3776c45f0433ce304896b82ed5bcdff719e346ad3660206fcda83561620faefce4023985fcfaf788ec20851d3f19e1a4320a4a1ebeb5dfbd5056b0531ed4049b84ce57538e9906943fe8115e9ccc31ed3a13f6b2785aa7da021fd2fe299ca7f92984946d0dd116d44a36d0b4909e9bc13fbd1dfc354c44d13204387801acf08497dcbcaad0efcd06d9fee"}}, 0xf0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2102, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000440)={0xc87, 0x203, 0x7, 0x4, 0x3}) seccomp(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x8000, 0x1}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000480)=""/186) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000340)=""/172) 22:16:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x300000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000006c000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000005000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x80ffff]}) 22:16:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e21, 0x3, @local, 0xd05}, {0xa, 0x4e22, 0x6, @empty, 0xe1}, 0xe420000, [0x0, 0x200, 0x5, 0x10001, 0x599, 0x28, 0x1e, 0x4]}, 0x5c) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x7, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xcab9, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x100000001, 0x0, 0x100000000, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x1, 0xffffffffffffffff, 0x0) [ 713.851675] binder: BINDER_SET_CONTEXT_MGR already set 22:16:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000005000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x700, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0xffff8000]}) [ 713.886358] binder: 18710:18711 ioctl 40046207 0 returned -16 22:16:08 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_create(0x3, &(0x7f0000000280)={0x0, 0x2f, 0x5, @thr={&(0x7f0000000040)="5a2d3e4460ad19882149099c33a3b1b5904208e3424f2e1d5c9d47213bd0ca1489ed3ed6e7a393606adf014b8a7d680a4e775b3a4b2353c574bcea03dd3db13ad3facc111d2bc295c73c0e71fcbf4ee48fccb8c79009f84a2453ed488ad58fc2ef8a45b0f38c3aa200a8ab58e26213b669b3aab73becd51208305ac4387ac4a6a4780274be5007fbd995d85e4afa842085ab66ad2d47630f892c7a3b84e8080cf5e3c36512a6996b72b5af99758b7e9805ff0044e1a945fb53", &(0x7f0000000180)="08cfb9893ebffce81020066fc39f2400c186a41d4ef32f43d6e7656a3fe6583b616036037760238631a6538f4c5cd4c790737171912299270329ea8407fe293345d9426ad1463fe68074300ab88417f18bec6127c757fdabe44ff7ccb7ccc06ff93ef4087e2b19465bab0cf89de6d5806bf88ae5ec7a3bab7fee9d93142a59f4de23e1b8ee7f7e71a3038b665bb1dcd877e376d7ee4294a28ce52839b8ea8163a9196f07144f799e455d60c4cb3eab02cdddc075e88121fd76b55bc9fe3b"}}, &(0x7f00000002c0)=0x0) timer_delete(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) r3 = getpid() sched_setscheduler(r3, 0x4, &(0x7f0000000000)=0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300), 0x4) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000012000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x500, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 714.092352] IPVS: ftp: loaded support on port[0] = 21 22:16:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000060000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 714.138281] binder: BINDER_SET_CONTEXT_MGR already set 22:16:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x80ffff00000000]}) 22:16:08 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getpgrp(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}) [ 714.169278] binder: 18734:18743 ioctl 40046207 0 returned -16 22:16:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000007050000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000050000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 714.408424] device bridge_slave_1 left promiscuous mode [ 714.414005] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.486235] device bridge_slave_0 left promiscuous mode [ 714.492835] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.571984] team0 (unregistering): Port device team_slave_1 removed [ 714.583171] team0 (unregistering): Port device team_slave_0 removed [ 714.598849] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 714.668816] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 714.729450] bond0 (unregistering): Released all slaves [ 714.781205] binder_alloc_mmap_handler: 24 callbacks suppressed [ 714.781224] binder_alloc: binder_alloc_mmap_handler: 18769 20001000-20004000 already mapped failed -16 [ 714.782471] binder_alloc: binder_alloc_mmap_handler: 18767 20001000-20004000 already mapped failed -16 [ 714.789794] binder_transaction: 48 callbacks suppressed [ 714.789811] binder: 18769:18770 transaction failed 29189/-3, size 24-0 line 2970 [ 714.804981] binder: BINDER_SET_CONTEXT_MGR already set [ 714.844734] binder: 18767:18768 ioctl 40046207 0 returned -16 [ 714.850852] binder_release_work: 46 callbacks suppressed [ 714.850861] binder: undelivered TRANSACTION_ERROR: 29189 [ 714.862642] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 714.862847] binder_alloc: 18767: binder_alloc_buf, no vma [ 714.878272] binder: undelivered TRANSACTION_ERROR: 29201 [ 714.883993] binder: undelivered TRANSACTION_ERROR: 29189 [ 714.892589] binder: 18767:18777 transaction failed 29189/-3, size 24-0 line 2970 [ 714.901464] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.521540] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.528178] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.535777] device bridge_slave_0 entered promiscuous mode [ 715.584324] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.590994] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.598897] device bridge_slave_1 entered promiscuous mode [ 715.644716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 715.691167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 715.835123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 715.885297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 715.933220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 715.940273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 715.996004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 716.002954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 716.090527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 716.098396] team0: Port device team_slave_0 added [ 716.145371] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 716.152899] team0: Port device team_slave_1 added [ 716.199754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 716.230282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 716.277297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 716.284548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 716.302386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 716.335334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 716.342570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 716.352351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 716.624776] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.631214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.637978] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.644351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.651898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 716.794904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 717.658508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.756786] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 717.853675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 717.860086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.867801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.962863] 8021q: adding VLAN 0 to HW filter on device team0 22:16:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x80ffff]}) 22:16:12 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:12 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000004c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:12 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x4, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x6, 0x40, [{0xb5a, 0x0, 0xfff}, {0x800, 0x0, 0xffff}, {0x6, 0x0, 0x7ff}, {0x4, 0x0, 0x3}, {0xffff, 0x0, 0xfff}, {0x10001, 0x0, 0x3b}]}) 22:16:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000060000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 718.602429] binder: 19038:19039 transaction failed 29189/-22, size 24-0 line 2855 [ 718.629002] binder_transaction: 7 callbacks suppressed [ 718.629013] binder: 19043:19044 got transaction with invalid data ptr 22:16:12 executing program 2: clone(0x400, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ptrace$getsig(0x4202, r0, 0x3, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) ioctl$VT_WAITACTIVE(r1, 0x5607) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x1fffffffffffffe, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xe7, 0x101000) 22:16:12 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600000000000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0xffff8000]}) 22:16:12 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x10000) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 718.668223] binder_alloc: binder_alloc_mmap_handler: 19038 20001000-20004000 already mapped failed -16 [ 718.676530] binder: 19043:19044 transaction failed 29201/-14, size 24-0 line 2989 [ 718.731931] binder_alloc: binder_alloc_mmap_handler: 19043 20001000-20004000 already mapped failed -16 [ 718.749015] binder_alloc: 19043: binder_alloc_buf, no vma [ 718.750062] binder: undelivered TRANSACTION_ERROR: 29189 22:16:12 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x78000032, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)=0x0) r2 = getegid() r3 = geteuid() r4 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x4, 0x400) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000003c0)) r5 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000280)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x3, r1, r2, r3, r5, 0x63, 0x40}, 0x6, 0x2, 0x5, 0x100, r6, r7, 0x200}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r8 = getpid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000540)={0x100, 0x2, {0x3, 0x0, 0x6, 0x2, 0x15}}) sched_setscheduler(r8, 0x5, &(0x7f0000000340)) r9 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x19d) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @local}, {0x6, @dev={[], 0xa}}, 0x56, {0x2, 0x4e22, @local}, 'irlan0\x00'}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r8, 0x0, 0xffffffffffffffff, 0x0) [ 718.784862] binder: BINDER_SET_CONTEXT_MGR already set [ 718.791515] binder: 19043:19044 ioctl 40046207 0 returned -16 [ 718.799948] binder: 19038:19039 transaction failed 29189/-3, size 24-0 line 2970 [ 718.817900] binder_alloc: 19043: binder_alloc_buf, no vma 22:16:12 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(r0, r1, 0x9, &(0x7f00000000c0)={0x22, 0x8, 0x79}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 718.832313] binder: 19043:19077 transaction failed 29189/-3, size 24-0 line 2970 [ 718.853064] binder: undelivered TRANSACTION_ERROR: 29201 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5000000, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x400, 0x0, 0x0, 0x270, 0x270, 0x150, 0x368, 0x368, 0x368, 0x368, 0x368, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @remote, 0xffffff00, 0xff000000, 'bond_slave_1\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xff, 0x0, 0x4}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {'syzkaller1\x00', {0x4, 0x3, 0x800000000000000, 0x1, 0x7, 0x6, 0x1ff, 0xf8}, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffffffffffffe00, [0x8, 0x5, 0x1ff, 0x3ff, 0x0, 0x6360ce3b], 0x2, 0x6, 0x101}, {0x2, [0x3, 0x4, 0x80000000, 0x3eda6ff5, 0x3ff, 0x7ff], 0xff, 0x5}}}}, {{@ip={@empty, @remote, 0xff000000, 0xffffffff, 'eql\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0xde, 0x3, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@random="3cf85491ea10", 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x4, 0x1, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0xff000000, 0xff, 'ip6gretap0\x00', 'bpq0\x00', {0xff}, {}, 0x33, 0x3, 0x4}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3a69, 0x20, 0x585, 0x7fff, 0x16ec, 0x7fffffff], 0x80, 0x1, 0x4}, {0x1, [0x8000, 0x5, 0xaf, 0x4d2cc10e, 0x1], 0x20, 0x8001, 0x9}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 22:16:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x2, 0x0, [{0x8, 0x0, 0x8000}, {0x3ff, 0x0, 0x48d}]}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 718.895044] binder: undelivered TRANSACTION_ERROR: 29189 [ 718.923179] binder: undelivered TRANSACTION_ERROR: 29189 22:16:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000007a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000002000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x80ffff00000000]}) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x80002) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000001e40)={0x1808, 0x6, 0xb, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0xf8, 0x2e, [@generic="bf5eba2490996f81991ecb07d5b0564a74e7985bb24bee805e38ae05b75687970391d3d966bd8d0e5ad0b0489de73d6f72fa47c733a803c9f1062ab37708603b15dfd4689662f724eff1db166de601417de50a89ca3de7bdbde92b0bd0616777d5d1c5bddb3057e9fb2fcfc48b9cd58998782b844bfaab6a2f9d3c7aa42fc50959246a11b4211d45cabf9b9f8f0c7bbe75f4ef7d80e0d94f86411309baf7659289a5b312f9bbf25d31effc5c10da82aa712598302e4cb1b39e8176ad4084579051e72640ae6d7ee77d81e8e9d2bada52c0b4d6fed97538546403bfbbeb", @typed={0x8, 0x1f, @uid=r2}, @generic="d35947f4", @typed={0x8, 0x94, @pid=r0}]}, @nested={0x84, 0x96, [@generic="82acff79619816f0c174af40c5106431f36f5c17ab0ecdfd2093c812014dee5c5a21db767699e2165f111ef96a08cd53e87c92be27b25ffc7ae535cc3050da7167fa90027a1ccdc303c4be8db042a2e4eea623289f11e3513bce7809fed44fc994a275b29d0700d764b0c424ec26f439db82d29457e45e663dab8fb164911f"]}, @generic="b26b320d70bca50785f71b6043974696272f2593a19448cff08b51309875334a5c1b8122950d74003780cefb32c3dce61b08c924a7bd0f34c0dd8c1d0ecb4bd76405e7f702433445d6f2e437b7693c4d30eea4cfe9333a451429fb165808c7d14cf60e23a8857f2b9b816a9bb456", @nested={0x308, 0x52, [@generic="aaab8f62bb45d56d052f1a799a628785cb6539a9d84275e8502ca2a861f9c3aaa235cf505d9885111fa38135ff64089924efb5b86d8cd93d4fa86fe442d8b89d851f1512785e781c1d02442efd2b7a6661445b666a8b39885000d1054cb2864803da673e67a750124a434fa0d07c63b4f168cd93bba9f6e73098f1263cf88ebdf43a6b58fd233371f6a582635b5a39cb7d8f7adbc5a26cd95564d6ca516730a05837e33322c5cde0d75353c86745a8d9d9864f96f8c3cd69d9cde9ee44baeebd9eac6732855e", @generic="17523b381b0bc0fbc42e40bb2db1b7048ca5512ca60786766ebe65730a94d434c4dc764bf4cddc1f18066a079d96db1809276cfbe653cde38390aa3369350cb0b4b6c574f3a0585074e87720792e0178d69181f16f334c42a7959192d37245addcc87831f971ef2eee2f7bbb8d36c28bc3d2463f598873aad810d2fd374b75dcdfb5eba2b8cda71a0600ee61ff9f8c25d7f9aac086d02d795bff4dc39b7b36e461da53afbdd71f79322618f20528c6c08ac8a63021638a", @generic="4c7a382bded10252cc79fdac65bbcdafa4ad6226f22de2fd1ec5cd00e9ec377e935119120d90bdd78c2f553a89e84de95ebf2b86061acf0ab6a9bc287d788b13d83cbc0385c3594f96eebd1b87d38f6edbe2c623edbde80bc29750c7198df8e4c208ce2effa660e6c72da21ca1688ccdd0836c749da187ac59080a1c7f3b1c93ec9fd4cee6b68a7021fcfd60709aa7865469c11977ae94a25de99d93b13ba1afb7ef29770350426a33f7a30d3a4d1a0b4655b6bf983ae6b74b4bc651564d952cda0a6cf2c8e19782a3ba38d474a15de78a162ed191", @typed={0xb0, 0x3a, @binary="68bb34376ca5bc3f50940c480c9b93b205d7903984cc6387093b4c72687a54498284b17717486941c0c70a39bb8879a95743d854757a8741e695a4319a3284d0e02802257e43f47210fa493f34622d479de81f8ba1630d61c2243eb69e3e644f8c5005103dd0496a6fda330c701ae5451ece8132a4341db47f8c8f7c7b0fc13fe86bfe16371a93404c661cd11b44a908d4aa6475a784637d2b372e5d4375d94cc0ef95514c4cf0f55013"}]}, @generic="f5068bb38baf6d3da7b3a078b5dcebbbff1c02da0cb3461ad08f00d0db78f45d8e7669e26be4a1e17c8ff69496dafe2984a90b7f7e51ea8bf35c165d034018a2706e54ff3378a0480ad109037e8a0e05b8f831081bf34b3a8245fb65871f4647cfeb3b2189346239e47b4dc1410340954e42284497aa027e31a82cff3b35be61976983c43d12e83aa20b3b87ff2192ac65618a7c557b24ca52593c2c884d72d9b53985bf4228a2b2a41bee1cd181196dadbe2c9560849ac285c4e8b471e216d517718b687e562ed6fd5b12109ffc969765babb929907ad1176367080f98a3be137dd71", @nested={0x134, 0x1a, [@generic="1dba077b289b25c3768237413b095a8d69e72bc3c2ab801a1b57671bfbabf9cfc82e5b811963ef48b3f2000002366673f8728e8f", @generic="d2d634d7b99ac2682b3f0eeb875a2beb3913a088dd75bdc139f6a0921176db03ebc6882d7b0870660d5d98de8d01409f084686ff94422bff7ceb7ea0607e8672dc0cc3e917e8584e25b2f783719af211b2ac658927e681b8e5117be3694e6f994e6a9bb81760784a018614af2c955eceaa04b01c398edf4237f5074dc3491592844db60ff26c68d278cce92b60a140f37994486ee36b8229198db50060c304269a0966250dce2400e34a912960f30f1af66d76403f1bda1ad8b71f11", @typed={0x2c, 0x6f, @binary="2b256e6608bd9ae6bb4d69fcd70d8ba851697fe74f1810bab164da8f98045f48112ba84b7b"}, @typed={0x14, 0x8d, @ipv6=@mcast1}]}, @nested={0x10e8, 0x25, [@generic="8fc6e3ef0734ce77f6dcd20af0c7170501df394683b7f35b048f60e098030508adec1f7d6c79dfd165715438127822cb1c0f17f1539e69408df00c45ed399f0cf707ea37eb9ba23a8a39b9f7dd52eae7c3d04382416dec5306d7b29429f57fbb7d5bb70f9524eee8cdc084da5ef8cf7563b863a4f783042cc9d66ff30e81263d", @generic="3dae007ecc6408debfcffb0b57f48718c09cd567822b7556b379c3bca4ad8669afdcf829a45aaf29183a0e520c0959be45e1faac253121023110827cc61bfbad851d809b8b67798eb8cf81d6e4a65397", @generic="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", @typed={0x8, 0x8d, @u32=0xfff}, @typed={0xc, 0x67, @u64=0x3}]}]}, 0x1808}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900, 0x0, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.117694] binder: 19107:19111 got transaction with invalid data ptr [ 719.141721] binder: 19109:19110 got transaction with invalid data ptr [ 719.158508] binder: 19107:19111 transaction failed 29201/-14, size 24-0 line 2989 22:16:13 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400040, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/11) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6a008e20, 0x5, 0x3, 0x97a, 0x5, 0x5, 0x4c, 0xfffffffffffffe01, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x9, 0x101}, 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x103000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) [ 719.171162] binder: 19109:19110 transaction failed 29201/-14, size 24-0 line 2989 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x300000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.219063] binder_alloc: binder_alloc_mmap_handler: 19109 20001000-20004000 already mapped failed -16 [ 719.235725] binder_alloc: binder_alloc_mmap_handler: 19107 20001000-20004000 already mapped failed -16 22:16:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x80ffff]}) [ 719.271332] binder_alloc: 19107: binder_alloc_buf, no vma [ 719.278602] binder: undelivered TRANSACTION_ERROR: 29201 [ 719.286192] binder: 19109:19110 transaction failed 29189/-3, size 24-0 line 2970 [ 719.304431] binder: BINDER_SET_CONTEXT_MGR already set [ 719.304454] binder_alloc: 19107: binder_alloc_buf, no vma 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:13 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f0000000040)={0x28, 0x1, 0x400, 0x7f}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x400) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={[], 0x2, 0x6, 0x7, 0x2, 0x7ff, r0}) 22:16:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000006000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xec2f, 0x400400) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{}, {}, {}, {}]}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.319857] binder: 19107:19129 transaction failed 29189/-3, size 24-0 line 2970 [ 719.340781] binder: undelivered TRANSACTION_ERROR: 29189 [ 719.355165] binder: 19107:19111 ioctl 40046207 0 returned -16 22:16:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000068000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x8) migrate_pages(r0, 0x0, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x1) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000000)=""/163, 0xa3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)) 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb00, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 22:16:13 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x80, 0x80000, 0x1, 0x200, 0x4, 0x1, 0x1, 0x0, 0x3, 0x3}) [ 719.506661] binder_alloc: binder_alloc_mmap_handler: 19156 20001000-20004000 already mapped failed -16 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) read(r1, &(0x7f0000000080)=""/92, 0x5c) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.601287] binder: 19167:19168 got transaction with invalid data ptr 22:16:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000048000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 719.676577] binder_alloc: binder_alloc_mmap_handler: 19167 20001000-20004000 already mapped failed -16 [ 719.707068] binder: BINDER_SET_CONTEXT_MGR already set 22:16:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 22:16:13 executing program 2: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x100, &(0x7f0000000140)={0x7f, 0xfffffffffffffffc, 0x0, 0x7fffffff}) 22:16:13 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.726837] binder: 19167:19168 ioctl 40046207 0 returned -16 [ 719.763991] binder_alloc: 19167: binder_alloc_buf, no vma 22:16:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2f, 'rdma'}, {0x2f, 'rdma'}]}, 0xc) [ 719.801895] binder_transaction: 2 callbacks suppressed [ 719.801921] binder: 19188:19194 transaction failed 29189/-3, size 24-0 line 2970 22:16:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000a000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 719.909411] binder_alloc: binder_alloc_mmap_handler: 19188 20001000-20004000 already mapped failed -16 [ 719.934558] binder: 19188:19194 transaction failed 29189/-22, size 24-0 line 2855 22:16:14 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x18c800000}) 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 719.967723] binder_release_work: 4 callbacks suppressed [ 719.967732] binder: undelivered TRANSACTION_ERROR: 29189 [ 719.968113] binder: 19215:19217 got transaction with invalid data ptr [ 719.978944] binder: undelivered TRANSACTION_ERROR: 29189 22:16:14 executing program 4: clone(0x2102011fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) 22:16:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000004000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 720.020613] binder: 19215:19217 transaction failed 29201/-14, size 24-0 line 2989 [ 720.113808] binder_alloc: binder_alloc_mmap_handler: 19215 20001000-20004000 already mapped failed -16 [ 720.140407] binder_alloc: 19215: binder_alloc_buf, no vma 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa00, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r3, 0xe7, "be64a739c7ad86c5826c468df3916239f60ef3f01cd928d1e517518aecc7e2d9f9696bc9710745088657f68f75e72d422ea04b8ecaaf736a57a6131069f35585ecedcaec3290ea66f5ef94652bf65ce875d02e4961608f8b2da4ecfc784221d09ca57745ac5c80ed7df6c9c4606abdb4f12d3d3f2bd3a0ac9830989fdf86f15de07f8adea976b3249713e899dece4145dba0622650a54a38a72569188bbfe3d8e1c0fea1434fc13c098f6775c15ba26d0688d6d7293cb5a4fc2ab13c9054b6882e437d3c77ea0e826b5f98df676046daead5d99024744de6247ffae72314a76877289aaac80dcc"}, &(0x7f0000000280)=0xef) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r4, 0xa06}, 0x8) sched_setscheduler(r2, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) [ 720.157878] binder: 19238:19239 transaction failed 29189/-3, size 24-0 line 2970 [ 720.159636] binder: BINDER_SET_CONTEXT_MGR already set [ 720.176020] binder_alloc: binder_alloc_mmap_handler: 19238 20001000-20004000 already mapped failed -16 [ 720.201052] binder: 19215:19217 ioctl 40046207 0 returned -16 22:16:14 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getpid() mq_open(&(0x7f0000000100)='.\v\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 720.222351] binder_alloc: 19215: binder_alloc_buf, no vma [ 720.224389] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.253815] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.260964] binder: 19215:19245 transaction failed 29189/-3, size 24-0 line 2970 [ 720.277617] binder: undelivered TRANSACTION_ERROR: 29189 22:16:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000018000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000030000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:14 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x60202, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x3f) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x404001) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0xffff, 0x800, 0x1ff, 0x800, 0xfffffffffffffff8}, 0x14) clone(0x24200000, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000340)) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r3, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101200, 0x0) fcntl$setown(r4, 0x8, r0) [ 720.429034] binder: 19264:19265 transaction failed 29189/-22, size 24-0 line 2855 [ 720.434118] binder: 19266:19267 got transaction with invalid data ptr [ 720.458817] binder: 19266:19267 transaction failed 29201/-14, size 24-0 line 2989 22:16:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 720.474365] binder_alloc: binder_alloc_mmap_handler: 19266 20001000-20004000 already mapped failed -16 [ 720.496355] binder_alloc: binder_alloc_mmap_handler: 19264 20001000-20004000 already mapped failed -16 [ 720.519720] binder: BINDER_SET_CONTEXT_MGR already set 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa00000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:14 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x40000) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x84, 0x6, 0xf, 0x304, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@generic="b16725ce97c598baea81363fd88cf88eae", @generic="91e3f19e5d64634cea986f1954a50f9a8e626c980b16d7723b89d0a65ee11747c4d6ae94d5338d37ea860e539d334596aa6e9087c6c29c3b2f4713cd63e2fafc09619c2b55fee2c2279b9218bcc08306d17a2e4cd0b4801a16678d83f6"]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) [ 720.542028] binder: 19266:19267 ioctl 40046207 0 returned -16 [ 720.544855] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.569424] binder_alloc: 19266: binder_alloc_buf, no vma 22:16:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000fffffdfd0000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:14 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xc0, 0x0, 0xc0, 0x0, 0xc0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x1, 0x3}}}, {{@uncond, 0x0, 0x110, 0x170, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x20, 0xffff, 0x1}, {0x6, 0x4}, {0x1f, 0x8}, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xf664, [0x1d, 0x3, 0x7fffffff, 0x7fffffff, 0x2, 0x8f], 0x1, 0x4, 0x81}, {0x6, [0x80000001, 0xbb, 0x6, 0xfffffffffffeffff, 0x6, 0xfff], 0x3, 0x8, 0x100000001}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 720.606244] binder: 19266:19285 transaction failed 29189/-3, size 24-0 line 2970 [ 720.613925] binder: undelivered TRANSACTION_ERROR: 29201 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 720.681907] binder: undelivered TRANSACTION_ERROR: 29189 22:16:14 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fff, 0x90600) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="455d1e865251bdd3ddfcc75a7fcbb744", 0x10) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@dev, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={r2, 0x1, 0x10000, 0x68e394ff, 0x5, 0x80000000, 0x81}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fdatasync(r0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:14 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() socketpair(0x1, 0x8000e, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x4bba}, 0x4) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x7, @tid=r0}, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000074000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 720.728832] binder: 19300:19302 transaction failed 29189/-22, size 24-0 line 2855 22:16:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 720.785425] binder_alloc: binder_alloc_mmap_handler: 19300 20001000-20004000 already mapped failed -16 22:16:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 720.829034] binder: undelivered TRANSACTION_ERROR: 29189 22:16:15 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='vboxnet0\x00') 22:16:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x80000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) [ 720.892806] binder: 19320:19321 got transaction with invalid data ptr [ 720.925109] binder: 19320:19321 transaction failed 29201/-14, size 24-0 line 2989 22:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000070000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 720.940073] binder_alloc: binder_alloc_mmap_handler: 19320 20001000-20004000 already mapped failed -16 [ 720.987556] binder: BINDER_SET_CONTEXT_MGR already set [ 721.005832] binder: 19320:19321 ioctl 40046207 0 returned -16 [ 721.006382] binder_alloc: 19320: binder_alloc_buf, no vma [ 721.027537] binder_alloc: 19320: binder_alloc_buf, no vma 22:16:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 22:16:15 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x154) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@delqdisc={0x98, 0x25, 0x700, 0x70bd29, 0x25dfdbff, {0x0, r2, {0xfff1, 0xe}, {0x1f, 0xe}, {0x7, 0xffff}}, [@TCA_STAB={0x1c, 0x8, [@TCA_STAB_DATA={0xc, 0x2, [0x80, 0x5, 0x8, 0xfffffffffffffffd]}, @TCA_STAB_DATA={0xc, 0x2, [0x1, 0x6, 0x412d]}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_STAB={0x1c, 0x8, [@TCA_STAB_DATA={0xc, 0x2, [0x1, 0x4, 0x0]}, @TCA_STAB_DATA={0x4}, @TCA_STAB_DATA={0x8, 0x2, [0xfffffffffffff001]}]}, @qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x1f}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x1b8ece2bd65fbaeb}, 0x4) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 721.041404] binder: undelivered TRANSACTION_ERROR: 29201 [ 721.055320] binder_alloc: binder_alloc_mmap_handler: 19337 20001000-20004000 already mapped failed -16 22:16:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000004000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:15 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x80, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x200000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:15 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) recvfrom(r0, &(0x7f0000000680)=""/4096, 0x1000, 0x40, &(0x7f0000000040)=@llc={0x1a, 0x103, 0x101, 0x7, 0x7, 0x33, @broadcast}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000fffffdfd00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 721.210806] binder: 19362:19363 got transaction with invalid data ptr 22:16:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 721.261838] binder_alloc: binder_alloc_mmap_handler: 19362 20001000-20004000 already mapped failed -16 [ 721.300537] binder: BINDER_SET_CONTEXT_MGR already set 22:16:15 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) pipe(&(0x7f0000004cc0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000004e40)=0x86) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000004e80)={r3, @in6={{0xa, 0x4e20, 0x9, @empty, 0x1}}, 0x2, 0xb757, 0x2, 0x80, 0x40}, &(0x7f0000004f40)=0x98) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/83, 0x53}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/75, 0x4b}], 0x4, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 721.330398] binder: 19362:19363 ioctl 40046207 0 returned -16 [ 721.345477] binder_alloc: 19362: binder_alloc_buf, no vma [ 721.355179] binder_alloc: 19362: binder_alloc_buf, no vma [ 721.361893] binder_alloc: binder_alloc_mmap_handler: 19369 20001000-20004000 already mapped failed -16 22:16:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000006c0000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 22:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000003f00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 721.536366] binder: 19383:19384 got transaction with invalid data ptr 22:16:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x600, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 721.607056] binder: BINDER_SET_CONTEXT_MGR already set [ 721.617438] binder_alloc: 19383: binder_alloc_buf, no vma [ 721.650843] binder: 19383:19391 ioctl 40046207 0 returned -16 [ 721.683988] binder_alloc: 19383: binder_alloc_buf, no vma 22:16:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 22:16:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000120000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 721.867569] binder: 19403:19404 got transaction with invalid data ptr [ 721.895711] binder: BINDER_SET_CONTEXT_MGR already set [ 721.901079] binder: 19403:19404 ioctl 40046207 0 returned -16 [ 721.901119] binder_alloc: 19403: binder_alloc_buf, no vma 22:16:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 22:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000480000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000680000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:16 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x2, 0xc, [0x2, 0x4, 0x6]}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) flock(r2, 0x2) 22:16:16 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4dc, 0x800) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1051, r1, 0x0) [ 722.436434] binder: BINDER_SET_CONTEXT_MGR already set 22:16:16 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 22:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000fdfdffff0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 722.472366] binder: 19416:19418 ioctl 40046207 0 returned -16 22:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000007a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 722.672147] binder: BINDER_SET_CONTEXT_MGR already set [ 722.725739] binder: 19432:19435 ioctl 40046207 0 returned -16 [ 722.737031] IPVS: ftp: loaded support on port[0] = 21 [ 722.748848] IPVS: ftp: loaded support on port[0] = 21 [ 722.766135] device bridge_slave_1 left promiscuous mode 22:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000006000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000020000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 722.771677] bridge0: port 2(bridge_slave_1) entered disabled state 22:16:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 722.835756] device bridge_slave_0 left promiscuous mode [ 722.841319] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.861980] IPVS: ftp: loaded support on port[0] = 21 22:16:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 722.939516] team0 (unregistering): Port device team_slave_1 removed [ 722.953760] team0 (unregistering): Port device team_slave_0 removed [ 722.971749] bond0 (unregistering): Releasing backup interface bond_slave_1 22:16:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x70}}, 0x20000000) [ 723.009283] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 723.104384] bond0 (unregistering): Released all slaves [ 723.162931] binder: BINDER_SET_CONTEXT_MGR already set [ 723.194760] binder: 19448:19454 ioctl 40046207 0 returned -16 [ 724.830889] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.845814] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.853362] device bridge_slave_0 entered promiscuous mode [ 724.869718] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.887086] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.905492] device bridge_slave_0 entered promiscuous mode [ 724.915786] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.923122] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.943786] device bridge_slave_0 entered promiscuous mode [ 724.974372] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.995875] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.011438] device bridge_slave_1 entered promiscuous mode [ 725.021155] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.044306] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.065879] device bridge_slave_1 entered promiscuous mode [ 725.075511] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.082729] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.097916] device bridge_slave_1 entered promiscuous mode [ 725.106656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 725.165264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 725.193401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 725.210196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 725.247048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 725.312283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 725.416194] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 725.495280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 725.520585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 725.555753] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 725.625077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 725.632078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.648840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 725.666564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 725.675683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.734888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 725.742083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.753457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 725.765975] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 725.777151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.998911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 726.006909] team0: Port device team_slave_0 added [ 726.033768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 726.041577] team0: Port device team_slave_0 added [ 726.097305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 726.105020] team0: Port device team_slave_1 added [ 726.133493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 726.142553] team0: Port device team_slave_1 added [ 726.150325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 726.159395] team0: Port device team_slave_0 added [ 726.170393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 726.229223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 726.251195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 726.266011] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 726.273464] team0: Port device team_slave_1 added [ 726.318524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 726.338421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 726.347861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.365136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 726.388928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 726.412859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 726.422042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.439186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 726.466672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 726.477114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 726.484453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 726.494822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 726.505662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 726.513775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 726.526099] device bridge_slave_1 left promiscuous mode [ 726.531693] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.586013] device bridge_slave_0 left promiscuous mode [ 726.591530] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.625978] device bridge_slave_1 left promiscuous mode [ 726.631481] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.665674] device bridge_slave_0 left promiscuous mode [ 726.671162] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.778475] team0 (unregistering): Port device team_slave_1 removed [ 726.788841] team0 (unregistering): Port device team_slave_0 removed [ 726.801413] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 726.858444] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 726.917376] bond0 (unregistering): Released all slaves [ 726.968879] team0 (unregistering): Port device team_slave_1 removed [ 726.980301] team0 (unregistering): Port device team_slave_0 removed [ 726.991658] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 727.049013] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 727.116774] bond0 (unregistering): Released all slaves [ 727.180099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 727.192137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.205231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 727.213556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 727.222056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 727.232884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 727.306306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 727.313555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.324884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 727.962897] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.969398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.976185] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.982572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.992102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 727.998608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 728.209154] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.215656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.222384] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.228886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.265942] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 728.414147] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.420683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.427435] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.433822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.470873] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 729.069376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.085306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 731.084704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.345063] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 731.391382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.524912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.569401] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 731.575815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.582980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.650412] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 731.753995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 731.846674] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.905169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 731.911381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.919173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 732.012252] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 732.018743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 732.037004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 732.144807] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.244420] 8021q: adding VLAN 0 to HW filter on device team0 22:16:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x9) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) clone(0x28100, &(0x7f0000000000)="fe4280836f7bcb696f0e2774e26584863a43e3425ce3205ec3cb92eb5e9fa179b3ee233907e552ec46a869818a15ee65e876887f88389b6c2f00895a47cbfa52393f14e6a36e2f406dba6e67", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="ee9d0324359f1ac96d0ea43b7620290c6de31c4754919de5b7f70dab8d53d86c6a4e85b6b8628e94919faf6a") 22:16:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000700000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r3 = getpid() move_pages(r3, 0x6, &(0x7f0000000200)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil], &(0x7f0000000240)=[0x3f, 0xd1e], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) syz_open_pts(r2, 0x41) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140), 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x800000000, 0x1}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000180)={@multicast1, @multicast2, @rand_addr}, &(0x7f00000001c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r5, 0xcb, "a3651f", "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"}}, 0x110) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000100)) 22:16:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000068000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x700000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:27 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80001) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x7, 0x8000, 0x4, 0x8, 0x2, 0x4, 0x0, 0x5, 0x3f, 0x6}) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 733.657840] binder_transaction: 22 callbacks suppressed [ 733.657858] binder: 20247:20251 transaction failed 29189/-22, size 24-0 line 2855 [ 733.693717] binder_transaction: 5 callbacks suppressed [ 733.693728] binder: 20249:20261 got transaction with invalid data ptr 22:16:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb00000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 733.710036] binder_alloc_mmap_handler: 9 callbacks suppressed [ 733.710054] binder_alloc: binder_alloc_mmap_handler: 20247 20001000-20004000 already mapped failed -16 [ 733.730437] binder: 20249:20261 transaction failed 29201/-14, size 24-0 line 2989 [ 733.764435] binder: 20247:20251 got transaction with invalid data ptr [ 733.773831] binder_alloc: binder_alloc_mmap_handler: 20249 20001000-20004000 already mapped failed -16 [ 733.785170] binder_release_work: 22 callbacks suppressed [ 733.785177] binder: undelivered TRANSACTION_ERROR: 29189 [ 733.797188] binder: 20247:20251 transaction failed 29201/-14, size 24-0 line 2989 22:16:27 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x242200, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280-avx2)\x00'}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:27 executing program 2: clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x80000001) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 733.815431] binder: BINDER_SET_CONTEXT_MGR already set [ 733.824483] binder: 20249:20261 ioctl 40046207 0 returned -16 [ 733.825506] binder: undelivered TRANSACTION_ERROR: 29201 [ 733.831335] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 733.831344] binder_alloc: 20249: binder_alloc_buf, no vma 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000007400000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 733.885566] binder: 20249:20279 transaction failed 29189/-3, size 24-0 line 2970 [ 733.899004] binder: undelivered TRANSACTION_ERROR: 29201 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) prctl$setmm(0x23, 0x1, &(0x7f0000fff000/0x1000)=nil) r1 = dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xfffffffffffffffd, 0x0, 0x400}, r0, 0x0, r1, 0x0) [ 733.938062] binder: undelivered TRANSACTION_ERROR: 29189 22:16:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000007fffffff0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffff9c, 0x4008240b, &(0x7f0000000000)={0x3, 0x70, 0x0, 0x9, 0x1, 0x2, 0x0, 0xda0, 0x2040, 0x1, 0x7, 0x7, 0x8, 0x80000000, 0xede, 0x7fff, 0xff, 0x3ff, 0x10000, 0x8000, 0x82, 0x7, 0x6, 0x4, 0x8, 0x8, 0xfffffffffffffffc, 0x800, 0x40, 0x2, 0x7fff, 0x0, 0x3, 0x5df, 0x7, 0x1f, 0xffffffff80000001, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x2, 0x4}, 0x800, 0xba2, 0x7, 0x0, 0x80000000, 0x4, 0x9}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.003048] binder: 20300:20301 transaction failed 29189/-22, size 24-0 line 2855 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.053002] binder_alloc: binder_alloc_mmap_handler: 20300 20001000-20004000 already mapped failed -16 [ 734.091420] binder: 20315:20316 got transaction with invalid data ptr 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.109231] binder: undelivered TRANSACTION_ERROR: 29189 [ 734.115246] binder: 20300:20301 got transaction with invalid data ptr [ 734.117892] binder: 20315:20316 transaction failed 29201/-14, size 24-0 line 2989 [ 734.138283] binder: 20300:20301 transaction failed 29201/-14, size 24-0 line 2989 22:16:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0xffffffffffffffff, 0x3, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x7}) [ 734.157295] binder_alloc: binder_alloc_mmap_handler: 20315 20001000-20004000 already mapped failed -16 [ 734.164884] binder: undelivered TRANSACTION_ERROR: 29201 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.207149] binder: BINDER_SET_CONTEXT_MGR already set 22:16:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) creat(&(0x7f00000000c0)='./file0\x00', 0x6) socketpair(0x15, 0xf, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r1, 0x0, &(0x7f0000000080)=0x306) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}) 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000007fffffff0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:28 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x300, 0x240100) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x7fffffff, 0xb40b6a4bbe79914f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x8001, 0x7fff, 0x5}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 734.259038] binder_alloc: 20315: binder_alloc_buf, no vma [ 734.259045] binder: undelivered TRANSACTION_ERROR: 29201 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.325012] binder: 20315:20316 ioctl 40046207 0 returned -16 [ 734.331174] binder: 20315:20330 transaction failed 29189/-3, size 24-0 line 2970 22:16:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0xc8, 0x0, 0x3}}, 0x14) [ 734.377829] binder: undelivered TRANSACTION_ERROR: 29189 [ 734.422269] binder: 20360:20361 transaction failed 29189/-22, size 24-0 line 2855 22:16:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000930000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0xc351, 0x3, 0x22, &(0x7f0000ffd000/0x1000)=nil}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x1, 0x8, 0x6e, r0, 0x3, '..\x00'}}, 0x3e0) sync_file_range(r2, 0x2, 0xc, 0x3) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.473492] binder_alloc: binder_alloc_mmap_handler: 20360 20001000-20004000 already mapped failed -16 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x490400, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xe5e9) 22:16:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x2) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) [ 734.538816] binder: 20384:20385 got transaction with invalid data ptr [ 734.550423] binder: undelivered TRANSACTION_ERROR: 29189 [ 734.557477] binder: 20384:20385 transaction failed 29201/-14, size 24-0 line 2989 [ 734.574514] binder_alloc: binder_alloc_mmap_handler: 20384 20001000-20004000 already mapped failed -16 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 734.604135] binder: BINDER_SET_CONTEXT_MGR already set [ 734.611613] binder: 20384:20385 ioctl 40046207 0 returned -16 [ 734.623914] binder_alloc: 20384: binder_alloc_buf, no vma [ 734.665506] binder: undelivered TRANSACTION_ERROR: 29189 22:16:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000740000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:28 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) r1 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='eth0\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r2) ioctl$BLKRRPART(r0, 0x125f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) setxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x2) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000300)) 22:16:28 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000ffffffff0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="5cd2d7959deb4ed0d7a203aebb9f2fe98ae9194dc3c3db9cf36e755796dfadec98a7feea18476d7e8adc93246d63c4434d9d30fb4eaeb824387bb7956d42ab2b06420edf60f6a8fca0a2baedd45f741e5ab677e68f5e0ae2d05c6ffa104b4039b49c55196bb62214aa6ec8e490230918779f528ddc019a7ccb1d181a8edb8224543d28520a1f5104898738af065cfb85aed85175877a6501a713fe80936dd9d81d912c6ee41718d62a261cb84c1d33cf0c0e7bfa5bb4b747928281b3d7be2a635c3ce50457a06fe596850d4cfb", 0xcd, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x20002000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1a9000, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x2180, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc00, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x2, 0xfe00000, 0x1f}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) lseek(r1, 0x0, 0x2) [ 734.787158] binder: 20420:20421 got transaction with invalid data ptr [ 734.805363] Unknown ioctl 4703 [ 734.825930] Unknown ioctl -2147191725 22:16:29 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = msgget(0x2, 0x108) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000000)=""/48) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+30000}, {0x0, 0x2710}}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x500, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc0, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x8}) [ 734.852164] binder: 20438:20439 got transaction with invalid data ptr [ 734.860605] binder_alloc: binder_alloc_mmap_handler: 20420 20001000-20004000 already mapped failed -16 [ 734.901423] binder: BINDER_SET_CONTEXT_MGR already set 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x4fe) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x80000000000003, &(0x7f0000000000)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 734.934733] binder_alloc: binder_alloc_mmap_handler: 20438 20001000-20004000 already mapped failed -16 [ 734.934845] binder: 20420:20421 ioctl 40046207 0 returned -16 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x900, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000007a00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000506000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$FICLONE(r1, 0x40049409, r1) 22:16:29 executing program 2: clone(0x10008007, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xa75c, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000180)="b76856f3b142d88fc082baa8eafc44bc24a31b23c4b75437bb18fd29c30b5401528900a6769ed0e0973f4344a93c2eea4fe3987ce5d0acdde1bcd56b5b56617983701b55431de9425016447e187b395adb7c3e88cdc219f1c74378ed1917092da9aa3d82c2a7f4fa15504734") ioctl$TIOCSBRK(r1, 0x5427) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1024) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x8) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x19a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000240)={{r3, r4+30000000}}, &(0x7f0000000280)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.111472] binder: 20481:20483 got transaction with invalid data ptr [ 735.130256] binder: 20484:20485 got transaction with invalid data ptr [ 735.148361] binder_alloc: binder_alloc_mmap_handler: 20481 20001000-20004000 already mapped failed -16 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.158666] binder_alloc: binder_alloc_mmap_handler: 20484 20001000-20004000 already mapped failed -16 [ 735.177237] binder_alloc: 20481: binder_alloc_buf, no vma [ 735.193570] binder: BINDER_SET_CONTEXT_MGR already set 22:16:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x1f) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.210833] binder: 20481:20483 ioctl 40046207 0 returned -16 22:16:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000a00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:29 executing program 4: clone(0x8040000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x575) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x513100) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}], 0x3, &(0x7f0000000440)=""/44, 0x2c, 0x7}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) [ 735.255021] binder_alloc: 20481: binder_alloc_buf, no vma 22:16:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000180000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpgid(0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect(r1, &(0x7f0000000240)=@l2={0x1f, 0x6, {0x2, 0x8, 0x2, 0x80, 0x9, 0x2}, 0xffff, 0x1}, 0x80) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r3) sched_getscheduler(r0) socketpair(0xa, 0x2, 0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x4}, @in={0x2, 0x4e21}], 0x2c) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.401821] binder: 20521:20526 got transaction with invalid data ptr 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xac, 0x200) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0x8}}, 0xca2, 0x9a, 0x0, "479ea533b90c241b1ef71b6b09b3adf637d1f35403427e1890f1acdd1c231967a93d146ac9442aec6804f3d3c07c99701bc545afe98fd63439fb1cc0748e7afbb8b65e8ca290b29b8ef17eb58c1f52bf"}, 0xd8) 22:16:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000070000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 735.448499] binder: BINDER_SET_CONTEXT_MGR already set [ 735.466081] binder: 20521:20526 ioctl 40046207 0 returned -16 22:16:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) rt_sigqueueinfo(r1, 0x2, &(0x7f0000000040)={0x36, 0x8, 0xe66, 0x8}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000003000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 735.712523] binder: BINDER_SET_CONTEXT_MGR already set 22:16:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x3fffc0000000, 0x7fffffff, 0x2, 0x2, 0x9}, 0x14) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0x9, 0x1, 0x8000, 0x3f, 0x1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x7c80}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x3fa, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42200) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000040)={0x6, 0xc6d3}) 22:16:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000500000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400000000001fc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() getpid() r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.738590] binder_alloc: 20556: binder_alloc_buf, no vma [ 735.775455] binder: 20556:20558 ioctl 40046207 0 returned -16 22:16:29 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7fff, 0x1) r0 = getpid() readahead(0xffffffffffffffff, 0x30, 0x1fe) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000080)) sched_setscheduler(r0, 0x4, &(0x7f0000000000)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000007000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x119000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r3 = dup3(r2, r2, 0x80000) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4) 22:16:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x500000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000120000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 735.973853] binder: BINDER_SET_CONTEXT_MGR already set 22:16:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc00000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 735.999274] binder_alloc: 20600: binder_alloc_buf, no vma [ 736.015451] binder: 20600:20601 ioctl 40046207 0 returned -16 22:16:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x5, 0x6000000000000000, 0x3, 0x80, 0xffffffff], 0x5, 0xfffffffffffffffc, 0x3, 0x41, 0x1e0, 0x1000, {0x7, 0x9, 0x2, 0x100, 0x8, 0xffffffffffffff80, 0x4, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x5, 0xcad, 0x5, 0x6, "f49eaadca5f52b542ab9e15251e955a1de2c4f6770b90e11994b471211198658"}}) 22:16:30 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) io_setup(0x400, &(0x7f0000000000)=0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x401) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x84) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000380)=0x60, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000002180)={{0xc000000000000000, 0x1}, {0x8, 0x4}, 0x2, 0x1, 0x9}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = open(&(0x7f0000000540)='./file0\x00', 0x2000, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='limits\x00') r10 = openat$random(0xffffffffffffff9c, &(0x7f0000001780)='/dev/urandom\x00', 0x0, 0x0) r11 = syz_open_dev$midi(&(0x7f0000001840)='/dev/midi#\x00', 0x100000000, 0x5a7182) r12 = syz_open_dev$sndtimer(&(0x7f00000018c0)='/dev/snd/timer\x00', 0x0, 0x80800) pipe2(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r15 = accept(0xffffffffffffff9c, &(0x7f00000019c0)=@sco, &(0x7f0000001a40)=0x80) timer_create(0x6, &(0x7f0000002080)={0x0, 0x30, 0x2, @thr={&(0x7f0000001f00)="ea289e524207f4e2c801c0b7844ba38457fba2521d49fbfbf518b11763c78e11951f773a3dce3ba8360a08e153117498d64f9dd98c2bcb402d0794f9d36c46d2b6d0f6e9774c47a95687234eef95e94247aa951930eb65dc30a5b4939ea66b70b316a7d54e6682fc00542d9d035fdc916d3dc7330d073437abc6d385bcba8c6e30e930533198a3db89ff2ea802a8eee66eeabc08406981d652f9f1e0d76f7b93ffa4ad0ddc7d458127064ca4a53c65babd7d93ceb16695e6581c8cd3d4436db010ce6a00af01c8a70b4382a08f56a641cf28b0ea6dc97a0759fe3c8f", &(0x7f0000002000)="b272d9cfe7573f91eb79ecd7c2f074169c163231aa9e7b2abe0ad772638e29ff3c0cffd2c53e9b85ff8d687defa59cc128613f4cafa28f038aab216cb072aeb3134c54b4a9367ea2938ddd55cb06619052f278da0e5d30bb794fc0e498139d072b69f8"}}, &(0x7f00000020c0)=0x0) timer_gettime(r16, &(0x7f0000002100)) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='pids.current\x00', 0x0, 0x0) r18 = syz_open_dev$sndtimer(&(0x7f0000001b40)='/dev/snd/timer\x00', 0x0, 0x10042) r19 = syz_open_dev$usbmon(&(0x7f0000001c40)='/dev/usbmon#\x00', 0x1, 0x80000) r20 = accept4$packet(0xffffffffffffff9c, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d00)=0x14, 0x0) r21 = openat$audio(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/audio\x00', 0x0, 0x0) io_submit(r0, 0xa, &(0x7f0000001e80)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1f, r1, &(0x7f0000000040)="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", 0xfa, 0x3, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000000680)="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", 0x1000, 0x1, 0x0, 0x1, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f00000003c0)="f4fdbfa484c3ab7fc5c0f739e43a6edde63870e7b0810ff11f3e60081d3367f1ad9111e0c2ab107bcc8d82ffad91f30855e95dbb308841dbca02f1512de669d1aa9e75e8627e0fb07aa4a13eb2c02705cf4f4905d955c1fa21ebce6252dc6608a3b6717ca03721bf", 0x68, 0x9, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, r6, &(0x7f0000000500)="d21a9b40ace0a34a2179c00a62fa7657a63c5e2c80f6688dc4fb8f925ea382aa17367b1cf43628e1c3", 0x29, 0x0, 0x0, 0x0, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, r8, &(0x7f0000001680)="075baf49359b5a5f3be7ca01eaaf2700716d10dc43332a70e4c14b5a7e847590762dbc09c18cc94e054f83826f67f70d9ea0092fb29f883daa810e7a5d10f830ee666332026df3815aa5f38a814a32cd109510d170fe4708093d8c9b667a291b9ca53379e2bf9dc609183f00acec156fe8535cab42feae14d299e6acace320911ad0c8945ca5544ae680dccb352286bd921cf41549e05efabb412fb880510e0147577d2269e6dd50c0ccf5f4849488546429c3e32cc9e70a7b6dd50e010ac856e99a395cd880b7cff850c8b6ca630818591d39010778d0f2275feda11b7f62f9ca41dc3ee4b211e5578b4fef1a829e9d40a7ad05b3531bbe679a79e2253e4a", 0xff, 0x3, 0x0, 0x1, r9}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x2, r10, &(0x7f00000017c0)="d8070cb7936b4b736996b05d84fcbfdc0efc2a01384e24a0d3346c7a9f3d1fbcc8e6a9236ee67c0d54c5204c8280f2fa612d29e49a810f55cdc3e31f5e380097e9e6e51c4c9a7a424d3be6318801df0c35c71758de09447b5c540a6da8f8e06eed7d74d4c9d2cae6", 0x68, 0x1000, 0x0, 0x0, r11}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0x6, r12, &(0x7f0000001900)="0f98a6339f13b2997ad8bbc6b21a93316caccecb99da382837ac0fee09888130029e39adb8273fca", 0x28, 0xfc6, 0x0, 0x0, r13}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x2, 0xe09, r15, &(0x7f0000001a80)="3d098d513892ce94e595d0", 0xb, 0x7aca0f1a, 0x0, 0x3, r17}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x6000000000000000, r18, &(0x7f0000001b80)="6811af9c6cbf7dce3451303a7b34c15acaa767a619feb7deb113ee91c26cd683cc67dc6178ab7269f2aa76d8aa80f62b28f5e34330dbdf4baf6d2dbdb9e709eef0187dd10a44316b24c95f756db50861646813d9a756738ff60a1e1ef56d4971cbc092b2ca0ff05d4e864f85542410504cfb95c9596bf0ba2a686fc7fcb806e460599892e83c19eefec8c3e1e3ba9723f2ed3ea68ad990324af6b6d0220d1c1a2a7f4a235ae707e601d8023c16c8a545c51b79f18e75b2fc51b8e8f0b8a37040", 0xc0, 0x7ff, 0x0, 0x0, r19}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x5, 0x6800000000000000, r20, &(0x7f0000001d40)="773aad6787dca8f4f830741412a1ecb2c95f32aa88559cbc98ee176b831c5be283917242cd60a3543cce115e12b31a8295683c350fad6ed168008505b601014ce0dee392e896947266a04e96db605084a1ff9732ed1fb81b1433d28b9a8d27d708148a82015f0c579ced7eb1038e1bf59259c17e0bfe2a2b3461caa9cad62d2663fbcaf77e30f4", 0x87, 0xf12, 0x0, 0x1, r21}]) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r14, 0x8930, &(0x7f0000002140)={'veth0_to_team\x00', @ifru_hwaddr}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r21, 0xc0a85352, &(0x7f0000002200)={{0x1ff, 0x401}, 'port0\x00', 0x0, 0x0, 0x9, 0x1, 0x2, 0xfff, 0x8001, 0x0, 0x2, 0x9}) 22:16:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000605000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x16482, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x10000, 0x0) sendto$llc(r3, &(0x7f0000000180)="5f789aa7285df55c27abc60ce76189cd3a6dc7a68bcd3c6b67befa5b6bbb024b7d86b288a4b417315912d533333247a2c6d448fdca5a8412fe3724eb06d1d4d9931e43416d00d18683f38325ab201dba910f6e897835370af808b86a9b073a6f328d6f4e4799d53c05509d0680445f8cd56d922b63f9dab8174a26fbcd68fcca01a8b00f38", 0x85, 0x8000, &(0x7f0000000240)={0x1a, 0x0, 0x2, 0x9, 0x7, 0x65db844a, @remote}, 0x10) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) write$P9_RMKDIR(r3, &(0x7f0000000380)={0x14, 0x49, 0x1, {0x4, 0x4}}, 0xffffffffffffff13) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2001, 0x0) write$P9_RLCREATE(r4, &(0x7f0000000300)={0x18, 0xf, 0x1, {{0x33, 0x3, 0x3}, 0x5}}, 0x18) getsockname$netlink(r3, &(0x7f00000002c0), &(0x7f00000003c0)=0xc) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000080)=""/165) 22:16:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7fffffff) r1 = getpid() setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000400)=0x3, 0x4) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0xffffffffffff7ffe) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x1000000000000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x1}) sendto$inet(r2, &(0x7f0000000240)="4db0a670625665dc7c3d1ad68314093fe97fd047388ba19891defa8b6feaa790cba660e7e46a7632fa90a7a0bbe63e7a964867079f1d8fb44889820d81ad28a932510da9dcdd247c970c78f84e1ae056852591c3642f4194dc17b648121e4f5514e2f32999ffc4ee08c3f563de59431f5a688114be35250f03b37f1d04d9cf2b70059761a6eb7c06c3759eebca07e284da4870ac8f22a03b7be4a8b56c195ccc8d7bf41966397953859b47498bcda8b345704181e51b92d383c48153eb90b3f19ecee80d15267686d42d6ab990ce705dcf0364bcfdbe", 0xd6, 0x4090, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3f, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x78, 0x9, 0x7, 0x402, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x3}, [@generic="0764916450b9061e2a55352249aa5d6f0a6fc646e7d9a3eb5a8401ab4b4bb0b368d8385615b925f33a0c4befaa45e6d1bfe44a36df54cca81b48022a73d243d6815bfaa60a6b534955d68f94ca7761d1e7f9e28101c230c1e3dca3ecd7aab51831"]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0xc045) 22:16:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000006c00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 736.436453] binder: BINDER_SET_CONTEXT_MGR already set 22:16:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8002, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6}, 0x10) 22:16:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000200000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 736.461330] binder_alloc: 20637: binder_alloc_buf, no vma [ 736.475685] binder: 20637:20639 ioctl 40046207 0 returned -16 22:16:30 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000380)={{0x9, 0x7, 0x3f, 0x401, 'syz1\x00', 0x8}, 0x0, 0x10000002, 0x5863, r0, 0xa, 0xffffffffffffff80, 'syz0\x00', &(0x7f0000000080)=['GPL)%![#wlan0userposix_acl_access@\x00', 'prockeyring\x00', '.mime_type#wlan0@[}\x00', 'prockeyring\x00', 'prockeyring\x00', "73656c696e75786d696d655f7479706528706f7369785f61636c5f616363657373212e76626f786e657430e22d00", 'prockeyring\x00', 'prockeyring\x00', 'prockeyring\x00', 'prockeyring\x00'], 0xb9, [], [0x0, 0x2, 0x6, 0x200]}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) getpid() r2 = memfd_create(&(0x7f0000000000)='prockeyring\x00', 0x1) ioctl$TIOCNOTTY(r2, 0x5422) 22:16:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @loopback}, &(0x7f0000000100)=0xc) r3 = shmget(0x0, 0x3000, 0x78001000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) 22:16:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000200000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000a0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = semget(0x0, 0x3, 0x20) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000000)=""/29) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 736.700406] binder: BINDER_SET_CONTEXT_MGR already set [ 736.720678] binder_alloc: 20686: binder_alloc_buf, no vma 22:16:30 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() prlimit64(r0, 0xf, &(0x7f0000000000)={0xea2, 0x7}, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 736.761035] binder: 20686:20693 ioctl 40046207 0 returned -16 22:16:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000600000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x97aa, 0x3) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_tid_address(&(0x7f0000000000)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:31 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() mq_open(&(0x7f0000000000)='..\x00', 0x40, 0x110, &(0x7f0000000040)={0x6, 0x0, 0x80000001, 0x2, 0x3, 0x3, 0x4, 0x2}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x700, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000480000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 4: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x7, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x141100, 0x0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040), &(0x7f0000000080)) [ 736.948496] binder: BINDER_SET_CONTEXT_MGR already set [ 736.977254] binder_alloc: 20714: binder_alloc_buf, no vma [ 736.986164] binder: 20714:20716 ioctl 40046207 0 returned -16 22:16:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000fffffdfd000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() prctl$seccomp(0x16, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x6, 0x1000, 0x8d}, {0x1f, 0x6, 0x8, 0x2}, {0x2, 0x7ff, 0xffffffffffffff6d, 0xffff}, {0x7, 0x7, 0x80000001, 0x7}, {0x2, 0x20, 0xff, 0x800000000}]}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0x5, 0x6, 0x800}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x2, 0x20, 0xffffffff, 0xffffffff}, &(0x7f0000000480)=0x18) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000380)="6b657972696e6700ea98a8d03b6ad00d0d5536dc40e23ce46cd83a69f1aa908911799927e8c7b30593a9ff3bb685a12d0f770d0d6677917a667c027e639a0564eb3d4a404b0bb3d621cb09d510ddc7ac365f1024e41a54a455738cc429a5de1becb5c2963ac331bc702e6dfaa7dbaeddd6f47f37f5d79209253a2b509192f0ad6a0b92002cbb204762006b27c0be8db35dc2a92a8d38fc579aa158c1510b79066a87aa5d4379b866347303769f68e94521add936c746767629641b0470b1b43447169808c68c2a87e033a8473760fa684408f046d7ff316a0dec094be3de1d", &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) keyctl$setperm(0x5, r3, 0xffffffff) 22:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0xb80) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x8c3, 0xfffffffffffffc01, 0x10001, 0x7f}) 22:16:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x80000000, 0x81, 0x241}) [ 737.179535] binder: BINDER_SET_CONTEXT_MGR already set 22:16:31 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:31 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x105000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101101, 0x0) dup3(r1, r2, 0x80000) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 737.209281] binder: 20746:20747 ioctl 40046207 0 returned -16 22:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000006c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x900000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000007300000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x1, 0x1, 0x3, 0x6, 0x40}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r1, 0x0, 0xffffffffffffffff, 0x0) 22:16:31 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000, 0x4200) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x6}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x600000000000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 737.432463] binder: BINDER_SET_CONTEXT_MGR already set 22:16:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="ba4300ec66b88e0000000f23d00f21f866353000000c0f23f866b9fa02000066b8249bbfdd66ba0aa8c4420f300f017b05660faeb617001864000f01380f01db3e0fc76d30660fdcaf0080", 0x4b}], 0x1, 0x10, &(0x7f0000000140)=[@dstype3={0x7, 0xa}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x100000001, 0x0, 0x9}], 0x2) 22:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000003f00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc000000, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 737.528068] binder: 20789:20791 ioctl 40046207 0 returned -16 22:16:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000009300000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:31 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = creat(&(0x7f00000012c0)='./file0\x00', 0x10) ioctl$KDSKBLED(r0, 0x4b65, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000240)=""/4096, &(0x7f0000000080)=0x1000) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000001240)=""/78) 22:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 737.736793] binder: BINDER_SET_CONTEXT_MGR already set 22:16:31 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0xffffffffffff31d7, "d24ee5233c0ec28df023dd3f0dc00dd26a66eb4956b8ae2243baea59b9b9ebaf8fa38f0e218faf376104bab14c0ee0897c6a3756adecad4a45e48b8eabf1598a8cc98c248cac6644bf80328ce408bd2b7a1a116adceaa6939a37ec41b46b9d0ae59efec55aad2b27438c712bb18a50e5b8c95e9a08f6aff0f5149df42f4c256a"}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x1d5, 0x8004, 0x3, 0x3, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0)=0x10000, 0x4) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000001c0)={0x0, 0x8}) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8, 0x400) [ 737.776172] binder: 20816:20817 ioctl 40046207 0 returned -16 22:16:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000006c000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000060000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 737.924727] binder: BINDER_SET_CONTEXT_MGR already set [ 737.973347] binder: 20832:20833 ioctl 40046207 0 returned -16 22:16:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000002000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:32 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x64701) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x70000010}) sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x140) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x100000000, 0x1, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x9) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000180)={@multicast2, @multicast2, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000200)={0x5, 0x7, 0x44ad1a9d, 0x5, 0x6}) 22:16:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000600000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 738.695197] binder_transaction: 10 callbacks suppressed [ 738.695207] binder: 20846:20851 got transaction with invalid data ptr [ 738.710308] binder: 20848:20849 got transaction with invalid data ptr [ 738.736224] binder_transaction: 46 callbacks suppressed [ 738.736244] binder: 20848:20849 transaction failed 29201/-14, size 24-0 line 2989 [ 738.754824] binder: 20846:20851 transaction failed 29201/-14, size 24-0 line 2989 22:16:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x300, 0x66f, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 738.806558] binder_alloc_mmap_handler: 23 callbacks suppressed [ 738.806576] binder_alloc: binder_alloc_mmap_handler: 20846 20001000-20004000 already mapped failed -16 [ 738.841609] binder_alloc: binder_alloc_mmap_handler: 20848 20001000-20004000 already mapped failed -16 22:16:33 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r0, 0x3f, &(0x7f0000000040)) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='..\x00', 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0x7e00000, 0x9, 0x3, 0x8}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) [ 738.868415] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 738.868424] binder_alloc: 20846: binder_alloc_buf, no vma [ 738.915198] binder_release_work: 46 callbacks suppressed [ 738.915208] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.926727] binder: 20848:20857 transaction failed 29189/-3, size 24-0 line 2970 [ 738.933742] binder: BINDER_SET_CONTEXT_MGR already set [ 738.970450] IPVS: ftp: loaded support on port[0] = 21 [ 738.983672] binder: 20846:20855 ioctl 40046207 0 returned -16 [ 738.983700] binder: undelivered TRANSACTION_ERROR: 29189 [ 739.005868] binder_alloc: 20846: binder_alloc_buf, no vma 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000002c0)={r3, &(0x7f0000000180)=""/203}) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x30000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x0, 0x9c}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x1f, r5, 0x10000, 0xffffffffffff42c6}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 739.030264] binder: 20846:20866 transaction failed 29189/-3, size 24-0 line 2970 [ 739.066008] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.069110] IPVS: ftp: loaded support on port[0] = 21 [ 739.073428] binder: undelivered TRANSACTION_ERROR: 29189 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = accept$inet(0xffffffffffffff9c, &(0x7f00000012c0)={0x2, 0x0, @loopback}, &(0x7f0000001300)=0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x404100, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="c0661d5c93cabfbea665f238dea938d6ad74f1dae77d800bac38e17f0a896a2134b8a2573656de3603e4b64efa56f31377ee027fde4f93ab5835d1aef6bf7fb4a766af89a568c618fc1671a653d9ea76f09c2840c058ffe3a177c1c48d8ea339d2f7daffe8c19f4461234af3ad0bc34a0b1b1cfadeae90230a61e69856c5dac9ddeac01e2b720465d10cc627e0f2d7628e1a2467bb8875dfc0f37a278e3854ab5f0cb254540b30b9055c5a9830f7377508b24ed56b67c6989b8f3a7a6b03fb8225dbc1ec", 0xc4}], 0x1, &(0x7f00000013c0)=[{0x90, 0x187, 0x1, "de294187032fbee702cfc98875fc267f3bfd0c2e7682fc16a4e7b8e25e6c0aee19871dad4b10dc1aa1f77ffb5535b5318c029cd4c123f693d47e1867ff5ffaabe59d6f28e3ce15cf3a2fefa850786acdb2b8b6977a807e1e707309f5eb02bc20b0fddf206a6c80689cc3d8c4b269d04b1da0cb59b6f87d48e9c43417f0d7"}, {0x1010, 0x0, 0x0, "27159162bf5008baddd75b7ce779a8192f28bfa2e63637507dc7ed1d9e93f716a760746ca77148709f52d8f2521a84404cba9b326b6f7c1db96301a0b7fdef25ee0fba598d83d982d92b8c708a8cf871395b9e36b4c73e8e0e43b50aefaeb0cfaca4493405af36151e31e75c6de16147b339e3505f27b52aa1d5c3e68bd98848d57ca0c91a802ade12cbca553c070764f2033c9aa2150b2b74f00b009073320ac20051a5daa116056385b7bd972a91752c5719f0cfe900cef69eee0a7ca2268ac397e5090b48493f73c7fb4e40bbfb748ecbc498fbdddd53482bbacbf2accde6c61e0a6b652e33be921b6be6572d5a3ad88e62a2ccf6f92ae5d8f9615a8e08b609f2886649dcb13eced1dd0ca71cfadfaf5ff33a9b96fe7dabb7bed9fdf326e0faae33480c076af0f3d5fd44fcd496dbccf65aca5fbae836731e302786fe72ba12fbb15ab22017e3cc43096a67cff9059695629443047376aa1aece56f6e2d6f33fde82ddaee9935680d2c76a9340fd41a9f5154f750ba5232181095ed90ecc22e4c8fa82b28049feabf0135eaf1ab950efc5c93a17d0f4503798653ca1cc8fadf199175ef4d7518dec94416304a798f655b3049dd4fa9c95438f11e842fc621afa7c31ceb510edc8fe3747fe5d589942c80240834745ec71d9c0982526f79e3775d954c0df8045d8e4637e94275a9e48badd6ecc9d13821d81a381831680974dccf0e5df802ac2ab6e774ce237e849b8a870af066a9d75d236c4106f07531c91adf4f9c8a1400cb30646d56537d7144516eb828330ec48ba1f1b41eae6955ff7890ce1f7cc98b345313ea89de7f7cbaa4d72fc84b89d08c2d0f2b67bee18d201b27f721e44cbf514d0596d45e18875c98f29fce64113e17fc562bca0aa04ab6348e0cf8c540c15aa50a0b62b072d1397cc97ffb18a746be03ec60b933d91699a5c856e9177bffe87190ea11dfc28e01557d50453c2ddc845b93d334c5e11a2533ae8f36f81465c8fa3b955effe577795a92f82243a07cb0b253c900596d1e5f10cd493f895f537192e8f1468a59d46ce6b3f837621924784d9a46c75d757f6ce4dd53b08ee0d79ca78fd7cf42c3dd36ccf5c0dd47f8d0a3c9a4f1f0704909473370901638afe84a251eba82c2eceac095de774b7a686749f6eb306003206438625bd91d5767cd56a60cd70c4b08a32d8eda329b1675f3700c4d754417e63585ad2c3e79a5fcc89f5e0b1bd284b9c13d800f6293b8e2c96b080cde93c884f9820bcb3aabd6ce0232edfa9a289fa07c17ac8f596bb3ae763478d6329261222de3342d24311b2f8b13010c57c7882ddfad2f075c9aee8bf1aa025d755a7f0d32c1fe3eab2a33d6634492870a7d68d4b534c584038787b36697e00ad183efeba7a5c5ea3b234b4840676fb389b4f204032c5b6c60ebbc98a457eb193bbc625254b3857729e885d731024192b17712d604e5c7152631ff37a92bd499ad5bff09e48dde8f12ab2f56d460863d24d6c6fade35c85878c58a977706e72ea10df23ccf611e2b2b85437ec6f68f2dd473d6ac05f0e53848a2ef8f88a671de240974557d80fd9c382b9dc2a0aa58811c98c39b82bf0db81da4227c5aeb0ba0120c48b683db1cd0abeda7b8adf9cf766232113ac94af0c4f46eba9a59a423a2184891f4a0f4a77aaed5343fe3ca48635f1011deddd1bb63f66fbbecbcb9222c7416a9154efbd5272940e6addc3faf9832d472076acbb39e0c0f3c72ee5f9abd51141db38aeac2d17dc9c7480d0ca2ec6d81f5c024246f44e553cb91064354d06cbc8e089ea8f4b2567866bc8015e8d52b1b7ff153a931d6bd6515615c8d9615c676582cfc3794574c1f4564ffa4666af8ad4077823f20d6b1554cac0686b4503e7e44e459ef0212970124de0809eed8742b66c6a8b51517638d9f67f71391d5f532e85618e9cd39e9d683c72c2f3548ae67cc528b4975be7a7f246e65694f49718ce2cce3b62f9ece55540bc67f0ac622d4f8337719ba941b25560f01a4e400d7665276722ba5c9e14bd588f100b0fbae645135222eceda16c44b28b0ef18bda877f746648afef9dc9c6c838c1ac43efff9cf6a53ce0a37bae122b018e54c8e2cfa596b8a7696ee4ae3de3fa4db5935e5f1b59acb377a1c3d31783e7c86e2d47ecfa322a458529476018356a50750ab97f5e96eb6cdb0514c4403576783735d30ab29b1b252e8dd00f13c78a6ee14a0922f4a0e61c1bc98ded3d2acfce0ae37ede798e81c48295cf9fd9d8c14763a3d0431824811b55c63fd549ac935f3232a95d77ebb792d2d3effe865d06a38a5424c0708ec3be0fff46ae80d2cf200c9e3a4ae70b0df6ad9876aaad5f8cfeca7731f3886c001ab0ea86359eccb11aeaeabd31410c7949544e5195ea41c0591d2b973ad1258665864ed6cd1db5e2e63dfd50422b9cfb520ca0706b487ecd2087034556b13790672421b9eff18c76e97bad64b48af52466f9eb525619ad0aae85bafc03e3422b67b3a8b5d057e38e3c87d727d77e5558e72b129f172705b09c5e941e590ae80f35fbc490431ee3f0fc834c4c1410b37698bf4d99233f1df97161ca532a2b3937d66f1f4ec3d642ad841ac66b5b0e2d5f923923a61a61bdfb89ecc1cb9e3a8bd0d8c8d0eb0c58fa3d06846a7fa933920f00667b2dc63111bde1dc94e4614c8d265ab03eba4154ac15e004e6cb9a5340424d0374b13af4d0dd0596bc190e525f3ef00408bddb656db7f833de6f1641ddfb004bea6aa8837f5d5008722d73adab87da9ada772b8c69b2f9666c8eb5c032a4233914dc4f099078e64ab8d3cd17445192bde44862a22ed562151e2c13737f72f36101070f20adf46785dddaa437b266b0104b9db7b719b758fe8321513b4a74e5c441cd6328d703893c32bd6ceac07835c4dc8ee3d9a214a228291b9dcd7120af15898e571b47a59d40633bd91ab5e0673c3aebab4e30ac4e3a548a08b0e3d0914553bd8cb7c0805327692576a4aad0c7340d06bdae498659a734bec5c054c165f200310341b34ab2114de9ce401efeea057b3f7dfbb789e517bf9fa6fc57b254d8804dce08ef0af72a1e09b03b395c6e168151ee65c49ed7f9158a829cd423b195d3a887b436a52bac1421774ac2e940c68bbfa44516ce8f92b1cfa55f554e6abe8ac90d78930d4d5d9b3d0f4493f0a4128fc36d11c8c085747503bad8254b0f2b248ef5c23f1dafe95711b47f839a33edf74695dbe1c8df42430f1bb0b10bcb0e61e187f97762c48485ce0276b1bffb24ab1edb291bcd31769c84e909e61284e64537c75296c29bb57d7fccd56de844d0cf797fd38221114aa517c6de3f2cea528e81054858ef220926586d5adc4b8439fb24056035fd183a5f3093dc0d820be9c3142dc35ee5d4fdc58dc9adcf9abd2a82434fe732bfcdfe5d51fa71c6a7be27ae9e7e9bf528fbaf7ad9cad0342e216427541410a66315bd956917dd9acb9591bc9bc3ac614e8ba9c4a3c50e6dacec8280d00171f14d39861bbd551959d34fbbf441e0b60308ab2477130c3285affea968cc1da99e7302241925804f96d0f428c3bac83dfede57318d83561a17155f07d90ff4538a27517e486d53826a83e61e489fda152931c1417fc6acc7389ba695759d6de1bc70d931034b9e352ad4e91000ea287b91f217fa5a699c3d6b78c0693eb7d9f637f8e7b9d180f34c58614955e7de9a2dd7f9b6ff15595f8944ff3d25f046381f0fb1ddb53a7793b7cfc20fd5f76e4cec63cf394af7cc2b54544356e868b6edcfe8010e0e09635b3ace7eb046a8d95e978cdff0313a366cb0622dd3e91349ecbf4843634039839aaea0c5737521a40be4a1099a7ed30c1db2be520f92987a4a1d32caf5b0688a7419cfc3aefcc38411c4bca35e776fda0d741833d8cafb624da84fe8206ab42e1f63e4da788ef736c4fcb485ad103dd960b9abf4e7758ab2208cdcc6d77ccc10103a3dc8bb22b050b42b08a5c3659fcfb8267bbb4a61ddece4f0d3b8c483012525f215a34a216e731600ef09ce746e02802235def768d36e0bf13c27669cfe1531b1886a93f4f8247a0903d7e23ecb95f076d68c4f30ac7daa7be6a74c09fe310a00850ffdaf07784faf81d43653833cfe5567cae6baf4d28768a9a545c5dfd0c60176d9299c203009849273b68b8dd638b913135f8fb028bce0c8ae2aa548f104abdd4c80626a2892359e6a5c99a8a6ee76fa34ff6e99371441e1b933e9bf66e81b44ca4bd2b6b63d98f307b8bb3e222843a48cfe2140136b54748aa1bbd96a5bc41bc66b77596a0e32d13b97ab448efe4392063e9fd31b477b6fca43328955b6fb853186a4114e5e81db5870ac20812e8dd72a5b3bf2b1d2b578423bef22f4e901f9cb673eb3bea2e8098edd4b961d57aba2144cb2ed7c2ca483f12de799fe52270329f7bb239babfadf9368f410442f48d6d7727d04ec88043055463aac2f286afaccaa87d07692d3bdb7f8cbc0aaf8429c2ba5733c7559fc105b05399f1172192a50daf7951d4e295ac19fa02f7c0e318a37425853fa26318d7a2d980c7122911a6c69375e5a4684da8f9d3ffe987a49ab0a6270a89237a1f76c2f87014c5eae390a0af6cce61388112b042ba5eacb3c5eaba2b489a486259a0115c21e996cf6c264d396faaeaaf82464bbdbe2461abdf1ffbf8ec136294686348bc12edf3daf09058b6043defff884fa49164e9718655d94d41f1e5b5b814cc108e926a4aafe5186172eb014769f58c6b99bc92068f145d28662a0f166e2d029e99169b5714c761a9333f9b278d13a31116bb0fab7fe1bfa9f727d541878c1a7102504308e5d1191fa32ddb91790aa03cad5fa54459416452e7874b577668c823b09e0f6ad1de5e64d03f6528648f5eecf734c2f33a7f811c9ae65910e7a40b15e8db5613d86ac1e3c3a8cce033a196fa8f93e0cf8091d699d15a508d63d3c16899b7108a90f59a8b979e8f841b9762dbfa2c40f91c6792fb50fc9444ecd2d66e0d40c7bfc32057847c2e493292899508c93a85742700a11e493cfa78f63a65f1a04dcf6f1e80a726219a7637bb7b0d2de24780d5637d4086414975820e1a1c8d4088d26b25d2fa9678ad55be44e99058c470b5ee85f7b4fa767322b68fb19fa8282f614f474c7b159efdcbf34382e77c52e1067f90342b4ba664f313dd8ab7d739ac177f63d2fa29eb0c0cbd5e3c1325330b622be55877ccdfcf4a06e9fd2d5e2eddae3664f6f8d83d23727ad70f569cdc11738924f2232993a8012f70a3a23d669619e5646c1efdcfd3a018bde0da9b56ed1e4ba046e1e9b312704d2438f5f9a45285667f2c5b7f16d8c37dc93e524d25a36695b452b0f1be5ef42e462148b675ec44628bc1744175a1d177d998ebd0710501aad767947d09bcd0ad4b692c6f89914cae86cdc734932ee163c69e3338f18ad57409cf27cf31aabdf057313d069ef60c6bb8f31ef0f20faaae0320ca5e479e3485300f8c25df12f5b718e5fbec79ad06845aab44ee6a205ed239d6fd5d664d910d2e67477301b25f605ca7caa48f40d4e070208ce14fe454f39b2c2f483b221d9dd53d203c1bd0c1c5d12b4da1b79e561111febae9b7e117b3fc7568c71bc0e33e4ac11e5e034d39e1a8d9adefb378688751869b57692fd08f4314b4b9f9764198c723161625a41528a4d851ddeb9af5041db96685168fa4e957c474a3594a96dea8e37e430762303ae6916103ec340d377413b78130238758bea40e40ea38e07ee10dde0e28ceb2b91be5add4acc818d914994a5825"}], 0x10a0, 0x400c0}, 0x8000) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000001340)={@rand_addr, @rand_addr}, &(0x7f0000001380)=0x8) [ 739.162240] IPVS: ftp: loaded support on port[0] = 21 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) msgget(0x3, 0x100) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1010c0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000002780)=""/230) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c403a978ce04b9ce0000000f3266ba410066b8000066ef66470fdab50d3d00004d0fc75f07c744240000000000c7442402cb240c84c7442406000000000f0114240f0118470f32450f019bdcef9f892e450fc71f", 0x54}], 0x1, 0x8, &(0x7f0000000180), 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002600)=ANY=[@ANYBLOB="0a000000000000000030000000000000bc00000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00e\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000005000100000000006500000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000600000000000000010000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000009600000000000000", @ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000601000000000000010000000000000", @ANYPTR=&(0x7f0000002880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064ea82050000000000000000000000000000000000000000000000e5ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe6a9522c13c44000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000cbe28bfe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b902000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009fb35ab5233f5fd70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002781aac57fb5a6bf14cb69414c197072a4f87bcd2b7ba199ded5726982d816020e0593be53fdf4b3abdf28a8ebaa4efdc019f1e7874eb36350bbacd07d63fa84de888a3e92d239d86fbc2f9d242d33e540a5"], @ANYBLOB="000000000000000002000000000000006600000000000000", @ANYPTR=&(0x7f0000002400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004500000000000001500000000000000", @ANYPTR=&(0x7f0000002480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d00000000000003d00000000000000", @ANYPTR=&(0x7f00000024c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000100000000000fc00000000000000", @ANYPTR=&(0x7f0000002500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x402080, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0xfffffffffffffffe, 0x7}, {0xfff, 0x497ce7ac}, 0x10000, 0x5, 0x5}) 22:16:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x280000, 0x0) 22:16:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000070e0000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 739.622045] binder: 20891:20893 got transaction with invalid data ptr [ 739.641294] binder: 20891:20893 transaction failed 29201/-14, size 24-0 line 2989 [ 739.655396] binder_alloc: binder_alloc_mmap_handler: 20891 20001000-20004000 already mapped failed -16 [ 739.665246] binder_alloc: 20891: binder_alloc_buf, no vma [ 739.670960] binder: 20891:20895 transaction failed 29189/-3, size 24-0 line 2970 [ 739.674746] binder: BINDER_SET_CONTEXT_MGR already set [ 739.683815] binder: 20891:20894 ioctl 40046207 0 returned -16 [ 739.683820] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.684247] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.155210] device bridge_slave_1 left promiscuous mode [ 741.160782] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.215483] device bridge_slave_0 left promiscuous mode [ 741.220958] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.257112] team0 (unregistering): Port device team_slave_1 removed [ 743.267726] team0 (unregistering): Port device team_slave_0 removed [ 743.278246] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 743.309107] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 743.384825] bond0 (unregistering): Released all slaves [ 744.109522] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.116541] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.123922] device bridge_slave_0 entered promiscuous mode [ 744.144526] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.152068] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.175773] device bridge_slave_0 entered promiscuous mode [ 744.193201] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.206846] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.214327] device bridge_slave_0 entered promiscuous mode [ 744.247261] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.253762] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.265872] device bridge_slave_1 entered promiscuous mode [ 744.278727] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.286032] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.293530] device bridge_slave_1 entered promiscuous mode [ 744.300740] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.309712] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.317883] device bridge_slave_1 entered promiscuous mode [ 744.374044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 744.396565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 744.431119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 744.455742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 744.493098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 744.559702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 744.743506] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 744.803071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 744.865160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 744.884423] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 744.897464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 745.006675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 745.354772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 745.365815] team0: Port device team_slave_0 added [ 745.405954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 745.413451] team0: Port device team_slave_0 added [ 745.444079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 745.451747] team0: Port device team_slave_1 added [ 745.461197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 745.468677] team0: Port device team_slave_0 added [ 745.484748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 745.509507] team0: Port device team_slave_1 added [ 745.518116] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 745.529012] team0: Port device team_slave_1 added [ 745.564982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 745.571895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.588582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.615416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 745.622314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.632811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.643387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 745.657014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 745.664837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.672773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.686373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.695409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.718294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 745.735028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.743019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.764895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 745.772318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 745.789298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.805680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.816263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.831573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.841672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 745.855119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.872768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.898552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 745.906551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.925118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.936343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 745.944776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.952745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.972559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 745.985178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.002028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 746.061648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 746.069340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.086266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 746.771379] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.777839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.784523] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.791028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.798967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 746.808490] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.814908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.821583] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.828031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.836608] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 746.906723] device bridge_slave_1 left promiscuous mode [ 746.912281] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.965468] device bridge_slave_0 left promiscuous mode [ 746.970931] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.035958] device bridge_slave_1 left promiscuous mode [ 747.041421] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.085458] device bridge_slave_0 left promiscuous mode [ 747.090930] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.186661] team0 (unregistering): Port device team_slave_1 removed [ 747.200445] team0 (unregistering): Port device team_slave_0 removed [ 747.210812] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 747.258588] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 747.325239] bond0 (unregistering): Released all slaves [ 747.389576] team0 (unregistering): Port device team_slave_1 removed [ 747.400614] team0 (unregistering): Port device team_slave_0 removed [ 747.410370] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 747.458650] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 747.534352] bond0 (unregistering): Released all slaves [ 747.592350] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.598805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.605539] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.611917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.621456] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 747.654983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 747.662255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 747.682620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.626199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.879508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 750.903758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.971640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.087275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 751.128519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 751.135348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.144477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.240229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 751.353901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 751.361144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.372309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.385680] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.523033] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 751.531436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.549455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.580822] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.768084] 8021q: adding VLAN 0 to HW filter on device team0 22:16:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x2be8f195, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={r3, 0xfffffffffffffffc}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000001200000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000280)) [ 752.815217] binder: 21640:21641 transaction failed 29189/-22, size 24-0 line 2855 [ 752.869294] binder_alloc: binder_alloc_mmap_handler: 21640 20001000-20004000 already mapped failed -16 [ 752.879296] f2fs_msg: 2 callbacks suppressed [ 752.879310] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 752.909775] binder: 21640:21641 transaction failed 29189/-22, size 24-0 line 2855 [ 752.922270] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 752.926348] binder: undelivered TRANSACTION_ERROR: 29189 [ 752.944721] binder: undelivered TRANSACTION_ERROR: 29189 [ 752.956523] attempt to access beyond end of device [ 752.988027] loop4: rw=12288, want=8200, limit=20 [ 753.003509] attempt to access beyond end of device [ 753.017430] loop4: rw=12288, want=12296, limit=20 [ 753.030262] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 753.045161] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.058684] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 753.067019] attempt to access beyond end of device [ 753.072503] loop4: rw=12288, want=8200, limit=20 [ 753.078021] attempt to access beyond end of device [ 753.083066] loop4: rw=12288, want=12296, limit=20 [ 753.089121] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 753.142564] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.159703] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 753.172457] attempt to access beyond end of device [ 753.182949] loop4: rw=12288, want=8200, limit=20 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffe, 0x0, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.188761] attempt to access beyond end of device [ 753.200357] loop4: rw=12288, want=12296, limit=20 [ 753.206182] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 753.215809] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.236253] attempt to access beyond end of device [ 753.250381] loop4: rw=12288, want=8200, limit=20 [ 753.264116] attempt to access beyond end of device [ 753.269878] loop4: rw=12288, want=12296, limit=20 22:16:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8}) 22:16:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000050000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000600000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x700, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:47 executing program 2: clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ioprio_get$pid(0x2, r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10800, 0x0) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:47 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000a80)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10011d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be292c202000000000000396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999369a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ef7595edd0ff010030de3600000000a44eb0fd689de4f8329307011576590961e8f2c7a2ee75fabc498350db89044aca776324307da9956c572fa2b3a1529999cf3eedd5ca5a03b64ac113790b1063554390b959a869fb9a6ffe55414422344745798cf5ff25cea0a7d1e6e47a238d5fd4393b45a0d2d751a9b9933766cd75") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x40000000000002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x802}) socket$kcm(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000001a40)=[{0x10}], 0x10, 0x40000}, 0x20000810) socket$kcm(0x11, 0x0, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x800000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.406258] binder: 21695:21696 transaction failed 29189/-22, size 24-0 line 2855 [ 753.432676] binder: 21699:21701 got transaction with invalid data ptr [ 753.445441] binder_alloc: binder_alloc_mmap_handler: 21695 20001000-20004000 already mapped failed -16 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x7, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.455912] binder: 21699:21701 transaction failed 29201/-14, size 24-0 line 2989 [ 753.491082] binder: undelivered TRANSACTION_ERROR: 29189 22:16:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x1011fb, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000050000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x900000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.550267] binder_alloc: binder_alloc_mmap_handler: 21699 20001000-20004000 already mapped failed -16 [ 753.613650] binder: BINDER_SET_CONTEXT_MGR already set [ 753.631531] binder: 21699:21701 ioctl 40046207 0 returned -16 [ 753.644087] device nr0 entered promiscuous mode 22:16:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000002c0)={"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"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 753.660505] binder_alloc: 21699: binder_alloc_buf, no vma [ 753.669242] binder: 21699:21738 transaction failed 29189/-3, size 24-0 line 2970 [ 753.680251] binder: undelivered TRANSACTION_ERROR: 29201 [ 753.682021] binder_alloc: 21699: binder_alloc_buf, no vma [ 753.686902] binder: undelivered TRANSACTION_ERROR: 29189 22:16:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xb00000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.730482] binder: 21739:21741 transaction failed 29189/-3, size 24-0 line 2970 [ 753.787292] binder_alloc: binder_alloc_mmap_handler: 21739 20001000-20004000 already mapped failed -16 [ 753.806615] binder: 21739:21741 transaction failed 29189/-22, size 24-0 line 2855 22:16:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000003000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:47 executing program 2: clone(0x200002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ptrace$peekuser(0x3, r0, 0x5) 22:16:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', r2}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 753.833619] binder: undelivered TRANSACTION_ERROR: 29189 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() pselect6(0x40, &(0x7f0000000000)={0x6316, 0x9, 0x5, 0xff, 0x7, 0x7, 0x1, 0x800}, &(0x7f0000000040)={0x2, 0xb41, 0xc10, 0x80, 0x100000001, 0xffffffffffff7aad, 0x0, 0x8}, &(0x7f0000000080)={0x2, 0x8, 0x3, 0x1, 0x3f, 0x9, 0x1c0, 0x5700000000000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={0x6}, 0x8}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 753.866091] binder: undelivered TRANSACTION_ERROR: 29189 22:16:48 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0xa, 0x0, 0xf00}}) 22:16:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000300000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x2, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 753.938862] binder: 21765:21767 got transaction with invalid data ptr [ 753.976152] binder: 21765:21767 transaction failed 29201/-14, size 24-0 line 2989 22:16:48 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101001, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000380)={0xff, 0x7fff, 0x80, 0x5}, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = getpid() syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') write$P9_RFLUSH(r0, &(0x7f00000003c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000090}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="740084a9", @ANYRES16=r2, @ANYBLOB="20002bbd7000ffdbdf25010000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000300)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x8004510b, &(0x7f0000000100)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffff64, 0x49a001) 22:16:48 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000140)={r1, 0x10001}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:48 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@dev}, &(0x7f00000002c0)=0xc) [ 754.030663] binder_alloc: binder_alloc_mmap_handler: 21765 20001000-20004000 already mapped failed -16 [ 754.059067] binder_alloc: 21765: binder_alloc_buf, no vma [ 754.062713] binder: BINDER_SET_CONTEXT_MGR already set 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x300000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 754.087127] binder: 21785:21789 transaction failed 29189/-3, size 24-0 line 2970 [ 754.114882] binder: 21765:21767 ioctl 40046207 0 returned -16 [ 754.124041] binder_alloc: 21765: binder_alloc_buf, no vma 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x7, &(0x7f0000000200)=0x3fb) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 754.134771] binder: undelivered TRANSACTION_ERROR: 29201 [ 754.145249] binder: 21765:21788 transaction failed 29189/-3, size 24-0 line 2970 [ 754.174764] binder: undelivered TRANSACTION_ERROR: 29189 22:16:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000400000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x6000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000300)=0x4, 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x10000, 0x10008}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x1, r3}], {0x4, 0x1}, [{0x8, 0x0, r4}]}, 0x34, 0x3) 22:16:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @dev}}}, 0x7) [ 754.220042] binder_alloc: binder_alloc_mmap_handler: 21785 20001000-20004000 already mapped failed -16 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) clock_gettime(0x7, &(0x7f0000000000)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 754.266781] binder: undelivered TRANSACTION_ERROR: 29189 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x7000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000004800000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 754.321271] binder: 21828:21829 got transaction with invalid data ptr [ 754.411585] binder_alloc: binder_alloc_mmap_handler: 21828 20001000-20004000 already mapped failed -16 [ 754.420356] binder_alloc: 21828: binder_alloc_buf, no vma [ 754.444532] binder_alloc: binder_alloc_mmap_handler: 21839 20001000-20004000 already mapped failed -16 22:16:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)="63707526330a000ac0f92a6000") 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000240)=""/221, &(0x7f0000000040)=0xdd) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x12) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x100) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000100)={0x6, 0x400, {0x57, 0x9, 0x1, {0x7, 0x2}, {0x6, 0x7}, @ramp={0x0, 0x10001, {0x4000, 0x7c067fde, 0x0, 0x2}}}, {0x45123add9c7dbe01, 0x5, 0x3, {0x9c, 0x4}, {0x93d, 0x8001}, @period={0x5c, 0x7, 0x4, 0x2, 0xbe1, {0xffff, 0x1, 0x1, 0xf3c}, 0x8, &(0x7f00000000c0)=[0x8001, 0x13033eda, 0x7fffffff, 0x1, 0xfffffffffffffc00, 0x1, 0x1, 0x2]}}}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0xea49, 0xcf, 0x9a91, 0x2, 0x4}) 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x3000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 754.460564] binder: BINDER_SET_CONTEXT_MGR already set 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x200, 0x2000) getpeername$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 754.489317] binder: 21828:21829 ioctl 40046207 0 returned -16 [ 754.489387] binder_alloc: 21828: binder_alloc_buf, no vma 22:16:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000ffefffffff7f00000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000001200000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 754.547687] binder_alloc: 21828: binder_alloc_buf, no vma 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x9000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:48 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x3fffc0000000, 0x7fffffff, 0x2, 0x2, 0x9}, 0x14) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0x9, 0x1, 0x8000, 0x3f, 0x1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x7c80}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x3fa, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0x0, 0x0, 0x400}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42200) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000040)={0x6, 0xc6d3}) 22:16:48 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x100) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8ac, 0x1, 0x0, 0xf, 0x1a, 0xc, "791ab23d664c6dd3c06a6484c93ed84805c38c099cab02f8b15b986e2dc83a8ce4bd6c39565b742b7deedefc6d1e4e048ab601b4e28485a53a1bf06eab58b061", "a5369d5eee2f3067ed021ef546e235db18186a59ed9e7ebac47f0d6ea9e4f15081a094b968f8acf378b025b7a0cc76fcf3b3485d2d2c6a0167cf7dc8319cb9dd", "5d34145a2ce9344a499bf532887273f379af8ea51fc7a48960a997b301c1c692", [0x80000000, 0xb73b]}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x3) write$P9_RLERRORu(r2, &(0x7f0000000240)={0x64, 0x7, 0x2, {{0x57, "ed60876f4c7a0a2a9f30f9388c6c113953c7355d0ca740d505fa5cad6e7c105516e82f10e040047f5b9e374457b4aeec548c8136906710ae5c7d75c1e049e1e39817262866ebfdc1ca8b21a17fda7e82da9fd68d5caffe"}, 0x6ebe}}, 0x64) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) write$P9_RLINK(r2, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200000) write$P9_RLERRORu(r3, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, 'D^'}}}, 0xf) 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x5, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x90, 0x81, 0x6, 0xfffffffffffffff7, 0x8, 0x7}) [ 754.686846] binder: 21880:21881 got transaction with invalid data ptr [ 754.689942] binder_alloc: binder_alloc_mmap_handler: 21878 20001000-20004000 already mapped failed -16 [ 754.754709] binder: 21878:21879 got transaction with invalid data ptr [ 754.761664] binder_alloc: binder_alloc_mmap_handler: 21880 20001000-20004000 already mapped failed -16 22:16:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xc, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 754.794975] binder: BINDER_SET_CONTEXT_MGR already set [ 754.808312] QAT: Invalid ioctl [ 754.812370] binder: 21880:21881 ioctl 40046207 0 returned -16 [ 754.829122] QAT: Invalid ioctl 22:16:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd4, r2, 0x28, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x119}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x88}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1a01}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ea3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44}, 0x20008000) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 22:16:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000007a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 754.850873] binder_alloc: 21880: binder_alloc_buf, no vma 22:16:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xffffffff}) 22:16:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000048000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair(0x11, 0x0, 0x6c, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xffffffff, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x9105, r2}) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xa00000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000004800000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000180000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x100000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) socketpair(0x5, 0x80007, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x10000, 0x4) [ 755.120840] binder: 21934:21943 got transaction with invalid data ptr [ 755.154472] binder: BINDER_SET_CONTEXT_MGR already set 22:16:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x3, 0x7}) 22:16:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000740000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 755.168937] binder: 21934:21943 ioctl 40046207 0 returned -16 [ 755.168944] binder: BINDER_SET_CONTEXT_MGR already set [ 755.168977] binder: 21945:21946 ioctl 40046207 0 returned -16 22:16:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000007a000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x400000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:49 executing program 2: clone(0x1ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1f, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r1, 0x2}) r2 = getpid() r3 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(r3, &(0x7f0000000000)="71632f56e47400") r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) 22:16:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000007a0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000180000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 755.360306] binder: 21976:21977 got transaction with invalid data ptr 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x700000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:49 executing program 2: eventfd(0x76) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 755.423080] binder_alloc: 21976: binder_alloc_buf, no vma [ 755.462069] binder: BINDER_SET_CONTEXT_MGR already set 22:16:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r3 = getegid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = memfd_create(&(0x7f00000003c0)='wlan0keyringuser\x00', 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r5, &(0x7f0000000400)="bb4e2d997ec5d8598b5589d49603df4e63d9b98e5e6af5551d09397b531f67c85738df2d8427803929d47754bcaf291e4feb657246ea1f9e51f071a3f42e866f96d9b6301d2f65f79b0d8b375652839054a18a89ab3b483610aed6473ae604f1ff3148424d035b1eaf0b67952319b8bad2d7be1ee741a7cbb48d9a7883569790f1be63f0de717b5af6d81c5f569cae66b9bf64da95f1f45e96c4646f044c764c5735e94b3163342445e5aa3508e0599f2422c77cd42f07c4204ea721030b8f769de6c2a5840bc1ccee1cc309c94579bb5440190cdc1a59cceeb3f046366f8772029982c7fa04faa58a15fdad913d602916d38003c7c5d7"}, 0x10) getgroups(0xa, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x80000001, r2, r3, r4, r6, 0x10, 0x4}, 0x0, 0x7, 0xffff, 0x1000, r7, r8, 0x7fff}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4030ae7b, &(0x7f0000000000)={0xfffffffffffffffd, 0x939}) 22:16:49 executing program 2: clone(0x2102001dd7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 755.477871] binder: 21976:21977 ioctl 40046207 0 returned -16 [ 755.489946] binder: 21991:21992 got transaction with invalid data ptr [ 755.507001] binder: 21995:21996 got transaction with invalid data ptr 22:16:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000007fffffff00000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000680000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000004c00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x4000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:49 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x2, 0x2a]}, &(0x7f0000000080)=0x8) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 22:16:49 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000040)='..\x00', 0xffffffffffffffff}, 0x30) setpgid(r1, r2) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 755.719654] binder: 22025:22027 got transaction with invalid data ptr [ 755.722573] binder: BINDER_SET_CONTEXT_MGR already set [ 755.746754] binder: 22022:22023 ioctl 40046207 0 returned -16 [ 755.746978] binder_alloc: 22025: binder_alloc_buf, no vma [ 755.758371] binder: BINDER_SET_CONTEXT_MGR already set [ 755.763762] binder: 22025:22032 ioctl 40046207 0 returned -16 22:16:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xc000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000009300000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000700000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:50 executing program 4 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, [0x8000, 0x1, 0xffffffffffffdee6, 0x253]}) [ 756.011870] binder: BINDER_SET_CONTEXT_MGR already set [ 756.032043] binder: 22053:22055 ioctl 40046207 0 returned -16 22:16:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000030000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000740000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 756.066115] FAULT_INJECTION: forcing a failure. [ 756.066115] name failslab, interval 1, probability 0, space 0, times 0 [ 756.114961] CPU: 0 PID: 22056 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #247 [ 756.122386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.131759] Call Trace: [ 756.131789] dump_stack+0x1c4/0x2b4 [ 756.131810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 756.131833] ? __lock_acquire+0x7ec/0x4ec0 [ 756.131857] should_fail.cold.4+0xa/0x17 [ 756.131880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 756.131908] ? mark_held_locks+0x130/0x130 [ 756.147527] ? print_usage_bug+0xc0/0xc0 [ 756.156679] ? graph_lock+0x170/0x170 [ 756.156693] ? print_usage_bug+0xc0/0xc0 [ 756.156706] ? print_usage_bug+0xc0/0xc0 [ 756.156720] ? graph_lock+0x170/0x170 [ 756.156744] ? find_held_lock+0x36/0x1c0 [ 756.156762] ? __lock_is_held+0xb5/0x140 [ 756.156792] ? ___might_sleep+0x1ed/0x300 [ 756.193232] ? arch_local_save_flags+0x40/0x40 [ 756.197846] __should_failslab+0x124/0x180 [ 756.202098] should_failslab+0x9/0x14 [ 756.205916] kmem_cache_alloc+0x2be/0x730 [ 756.210074] ? vmx_flush_tlb_gva+0x380/0x380 [ 756.210093] ? print_usage_bug+0xc0/0xc0 [ 756.210110] ? d_splice_alias+0x7c9/0x11d0 [ 756.210136] mmu_topup_memory_caches+0xf7/0x390 [ 756.222832] kvm_mmu_load+0x21/0xfa0 [ 756.222864] vcpu_enter_guest+0x3dee/0x62e0 [ 756.222890] ? emulator_read_emulated+0x50/0x50 [ 756.237676] binder: BINDER_SET_CONTEXT_MGR already set [ 756.240252] ? vmx_vcpu_load+0xb06/0x1030 [ 756.240277] ? vmx_write_tsc_offset+0x680/0x680 [ 756.240298] ? graph_lock+0x170/0x170 [ 756.249716] ? lock_downgrade+0x900/0x900 [ 756.249731] ? check_preemption_disabled+0x48/0x200 [ 756.249752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 756.249767] ? check_preemption_disabled+0x48/0x200 [ 756.249785] ? check_preemption_disabled+0x48/0x200 [ 756.282936] ? __lock_is_held+0xb5/0x140 [ 756.287014] ? lock_acquire+0x1ed/0x520 [ 756.290997] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 756.296028] ? lock_release+0x970/0x970 [ 756.300006] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 756.305289] ? kvm_arch_dev_ioctl+0x630/0x630 [ 756.309793] ? preempt_notifier_dec+0x20/0x20 [ 756.314315] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 756.319168] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 756.324206] kvm_vcpu_ioctl+0x72b/0x1150 [ 756.328277] ? kvm_vcpu_block+0x1030/0x1030 [ 756.332608] ? find_held_lock+0x36/0x1c0 [ 756.336783] ? __fget+0x4aa/0x740 [ 756.340265] ? check_preemption_disabled+0x48/0x200 [ 756.345302] ? kasan_check_read+0x11/0x20 [ 756.349469] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 756.354756] ? rcu_bh_qs+0xc0/0xc0 [ 756.358313] ? __fget+0x4d1/0x740 [ 756.362107] ? ksys_dup3+0x680/0x680 [ 756.365823] ? find_held_lock+0x36/0x1c0 [ 756.369897] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 756.374846] ? kvm_vcpu_block+0x1030/0x1030 [ 756.379176] do_vfs_ioctl+0x1de/0x1720 [ 756.383068] ? __lock_is_held+0xb5/0x140 [ 756.387138] ? ioctl_preallocate+0x300/0x300 [ 756.391554] ? __fget_light+0x2e9/0x430 [ 756.395535] ? fget_raw+0x20/0x20 [ 756.398994] ? __sb_end_write+0xd9/0x110 [ 756.403064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 756.408616] ? fput+0x130/0x1a0 [ 756.411917] ? do_syscall_64+0x9a/0x820 [ 756.415896] ? do_syscall_64+0x9a/0x820 [ 756.419877] ? lockdep_hardirqs_on+0x421/0x5c0 [ 756.424467] ? security_file_ioctl+0x94/0xc0 [ 756.428895] ksys_ioctl+0xa9/0xd0 [ 756.432361] __x64_sys_ioctl+0x73/0xb0 [ 756.436259] do_syscall_64+0x1b9/0x820 [ 756.440167] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 756.445543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 756.450486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 756.455343] ? trace_hardirqs_on_caller+0x310/0x310 [ 756.460373] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 756.465399] ? prepare_exit_to_usermode+0x291/0x3b0 [ 756.470446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 756.475307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.480503] RIP: 0033:0x457679 [ 756.483708] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.502666] RSP: 002b:00007fb47471fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:16:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xa, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 756.510394] RAX: ffffffffffffffda RBX: 00007fb4747206d4 RCX: 0000000000457679 [ 756.517676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 756.524952] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 756.532233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 756.539510] R13: 00000000004d0078 R14: 00000000004c016d R15: 0000000000000000 [ 756.550653] binder: 22066:22069 ioctl 40046207 0 returned -16 22:16:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000006c0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000060000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 756.738752] binder: BINDER_SET_CONTEXT_MGR already set [ 756.757314] binder: 22078:22080 ioctl 40046207 0 returned -16 22:16:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000020000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000600000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000120000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3f, 0x8200) recvmsg$kcm(r2, &(0x7f0000002380)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/248, 0xf8}, {&(0x7f0000001240)=""/223, 0xdf}], 0x3, &(0x7f0000001380)=""/4096, 0x1000, 0x7ff}, 0x2000) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:16:51 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x40) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8}) [ 757.188793] binder: BINDER_SET_CONTEXT_MGR already set [ 757.203475] binder: 22094:22098 ioctl 40046207 0 returned -16 22:16:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000200000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x3, 0x10001, "0c5be623377d92a1cf78749b133b4818"}, 0x15, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 757.300994] IPVS: ftp: loaded support on port[0] = 21 22:16:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000018000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xb, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000007a00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x84000, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x1000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 757.524860] binder: BINDER_SET_CONTEXT_MGR already set 22:16:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0xc, 0xfffffffffffffd1d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r3, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 757.546566] binder: 22117:22119 ioctl 40046207 0 returned -16 22:16:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000004c000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000a00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80301, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="5789b7f198f49622da342d7efbe890eb446f434a0a4b0c0adcd135f817ed5530e1c6a03e25e8d1ae13872566acdc5d3ddd042561c0a96ee4de59c3f9943d9e3f7d3f245f8340e1d532e88770c97ad95d701ffa4dd79771c85da41a339096ba7802faefab859299952a60de3a1fb016fb8947684ecc623b8e3c72d75a086185a51b7306abdac186f3db8d0f98ba483f827397a2bd76e14de36d19e7f1d818951357053f7dc0115f937e024035930caba0b3dcab7921ad920b7608b48ec99781") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 757.723749] binder: BINDER_SET_CONTEXT_MGR already set [ 757.729620] device bridge_slave_1 left promiscuous mode [ 757.737060] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.740081] binder: 22136:22137 ioctl 40046207 0 returned -16 22:16:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="c74424000c000000c7442402fa080000c7442406000000000f011424c4e17e161966ba2000ed0f320f00de0fb3ad625ee848f20f225566d3bbb17863c00f01ca31c1", 0x42}], 0x1, 0x20, &(0x7f0000000140)=[@dstype0={0x6, 0xf}, @efer={0x2, 0x800}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 757.806739] device bridge_slave_0 left promiscuous mode [ 757.812358] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.823224] IPVS: ftp: loaded support on port[0] = 21 [ 757.826790] QAT: Invalid ioctl [ 757.875132] QAT: Invalid ioctl [ 757.957052] team0 (unregistering): Port device team_slave_1 removed [ 757.990264] team0 (unregistering): Port device team_slave_0 removed [ 758.012492] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 758.045485] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 758.115977] bond0 (unregistering): Released all slaves [ 759.141478] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.148083] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.157205] device bridge_slave_0 entered promiscuous mode [ 759.239410] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.245999] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.253461] device bridge_slave_1 entered promiscuous mode [ 759.335248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 759.406382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 759.499973] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.515327] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.525396] device bridge_slave_0 entered promiscuous mode [ 759.606885] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.613377] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.620684] device bridge_slave_1 entered promiscuous mode [ 759.632912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 759.676641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 759.686608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 759.745502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 759.914219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 759.962189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 759.989889] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 760.015697] team0: Port device team_slave_0 added [ 760.064741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 760.072212] team0: Port device team_slave_1 added [ 760.115757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.163247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.208722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 760.215976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 760.223963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 760.249723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 760.257194] team0: Port device team_slave_0 added [ 760.270770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 760.278614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 760.289080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 760.306362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 760.313775] team0: Port device team_slave_1 added [ 760.360275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 760.367287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 760.376772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.427465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 760.435770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 760.443671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.498202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 760.505561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 760.513517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 760.559050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 760.566312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 760.576790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 760.685360] device bridge_slave_1 left promiscuous mode [ 760.690947] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.735394] device bridge_slave_0 left promiscuous mode [ 760.740876] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.805287] team0 (unregistering): Port device team_slave_1 removed [ 760.816330] team0 (unregistering): Port device team_slave_0 removed [ 760.827622] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 760.889388] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 760.964371] bond0 (unregistering): Released all slaves [ 761.163048] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.169500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.176230] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.182599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.190517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 761.214711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 761.548247] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.554706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.561373] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.567793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.575759] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 762.265121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 763.577854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.733096] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 763.750079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.889169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 763.895431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 763.906578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 763.917755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 764.053898] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.078610] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 764.085095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 764.099544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 764.250642] 8021q: adding VLAN 0 to HW filter on device team0 22:16:59 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mq_open(&(0x7f0000000000)='ppp0loselinux\x00', 0x800, 0x2, &(0x7f0000000040)={0x7, 0xc603, 0x7ff, 0x4, 0x1, 0x36, 0xffff, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:16:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000001000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x2}}, 0x18) pwritev(r2, &(0x7f0000000980)=[{&(0x7f00000002c0)="334923f32ff514fdf1058a13a93d6f1b8401dfc0185a04012239434a04768c7c5e81008f7ddd1aed2c8136a9719e04c5f01562ba1496e9a399964997c0d85f2d7dbbb9dfa9a5a48c349662cda11424cc78a6179594c27d36ab9ed4dd4310f19e92554c4ecd157e9a99bf2b5bbed386dac2084b16f1c343412589a2138d6ec1df265eda0eb899a8198720a155b03608663fc004b1740c964af7b01d8de56ae152126009cfa41aa12f0f0ef8de6ad473388c4dce1e7c7cfbe86b73c831b74c5961838909fa7cbaf884e89c749f", 0xcc}, {&(0x7f0000000680)="c91204e6c6f15acfa2ed9017e311a2edc1265377fe70df7805e3443174adb3cb77a6d2fc1237a6c7fdcfb437fed44ecd3efbcd17207ca2486bf0c64b67f23fd0335ceee6e97f19b630265dfe078eb215a5e37221c868a1fe1039e25113e02a15b6ba47125fd2b414f3d9b7990cfa945126092366566d52f6ad636b6b3d4834fa5e8f5dab7234f82d544bfa75d7e7fee93c9f4904e0d73a64b27838eb45689518714d3e39", 0xa4}, {&(0x7f0000000740)="882464c21c2592766c8a2b07c3ee130ff5f7419b5f69ecf13274a863be8bac8543188cdc92f0d9b6eab72d24298c766ca84b484f06113b21919f193b5cce737f60153ffbc068c00577a4fbfac6b5214aefd96882b75ef590cb924e243173628fe74fb36923cdefc328f11c918a7ce36849bb5ebde8c5", 0x76}, {&(0x7f00000007c0)="7fc17165ae2bfb2a954b6cc7c079cbfb2e98bed9a1d2f8bb463bb7996fa6f38ff258469dd934d681fcf02a91716c410915ca7cdf2f008f9c0a9f4a02699697a5efee7be5e0ac072f68fae0d1b6e47cc3d155e5bcd4119f89ee3f1249c5560b756332dd8e1764ed2525b367e61f9338012ea8b351db6749f51e59d50d1e1557196d3e7e0a1d3bdb3b86ecbc83f0", 0x8d}, {&(0x7f00000000c0)="77f34ecdb7bb4163b5a69b6b8dc4963b5d9f", 0x12}, {&(0x7f0000000880)="84fcb28f8e8a321f424b1eaf2f62426831501178aeeea93304fe83625d45b9be4ff3a253e91d2d4a222cc023f4668929e4f11af9d56a567e3b47e039ac4711b879658b14630b9645ccb670f1f02832ea0d0ba86f7055bfd403f82967b22043fe887ab2416b7c4bce2ff582a0e0ca400ac8cd2b3aa4444b3294ec03887c66dc551ecee126b903e950bb0055127c614119932c5b699965ca3508110a1b1ab043d089d032899bb62d140c8359cc43657a55bf240d12ac2c547e69aff46aa352f7f37ad99d59a277101d13234a713049fd0bb9ad5916ebfecf", 0xd7}], 0x6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000100)={{0x5, 0x2}, 'port1\x00', 0x21, 0x400, 0xfffffffffffffeff, 0x2, 0x81, 0xfffffffffffffff7, 0x1, 0x0, 0x0, 0x4}) [ 765.106112] binder_transaction: 6 callbacks suppressed [ 765.106124] binder: 22662:22665 got transaction with invalid data ptr [ 765.172918] binder_transaction: 43 callbacks suppressed [ 765.172936] binder: 22662:22665 transaction failed 29201/-14, size 24-0 line 2989 [ 765.221870] binder_alloc_mmap_handler: 22 callbacks suppressed [ 765.221890] binder_alloc: binder_alloc_mmap_handler: 22662 20001000-20004000 already mapped failed -16 [ 765.244189] binder: BINDER_SET_CONTEXT_MGR already set [ 765.249895] binder: 22662:22665 ioctl 40046207 0 returned -16 [ 765.256360] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 765.256369] binder_alloc: 22662: binder_alloc_buf, no vma [ 765.281356] binder: 22662:22682 transaction failed 29189/-3, size 24-0 line 2970 [ 765.298668] binder_release_work: 43 callbacks suppressed [ 765.298676] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.325125] binder: undelivered TRANSACTION_ERROR: 29189 22:16:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x8000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000020000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe90) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x1709) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xcd0f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0xba}, @in6={0xa, 0x4e24, 0x6, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x1ff}, @in6={0xa, 0x4e21, 0x2, @remote, 0x6}], 0xa0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r3 = mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x40000, &(0x7f0000000140)={0xcc}) fadvise64(r3, 0x0, 0x3, 0x5) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x5) 22:16:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) 22:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x600003) recvfrom(r2, &(0x7f0000000100)=""/190, 0xbe, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:16:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000006000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 765.403822] Unknown ioctl 35105 [ 765.424807] binder: 22695:22700 transaction failed 29189/-22, size 24-0 line 2855 [ 765.441644] binder: 22696:22697 got transaction with invalid data ptr [ 765.452201] Unknown ioctl 35105 [ 765.458744] binder: 22696:22697 transaction failed 29201/-14, size 24-0 line 2989 22:16:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xb00, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 765.476987] binder_alloc: binder_alloc_mmap_handler: 22695 20001000-20004000 already mapped failed -16 [ 765.481536] binder_alloc: binder_alloc_mmap_handler: 22696 20001000-20004000 already mapped failed -16 22:16:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 765.520112] binder_alloc: 22696: binder_alloc_buf, no vma [ 765.522401] binder: BINDER_SET_CONTEXT_MGR already set [ 765.535700] binder: 22696:22697 ioctl 40046207 0 returned -16 22:16:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x500, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 765.568503] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.573092] binder: 22695:22700 transaction failed 29189/-3, size 24-0 line 2970 [ 765.574124] binder: undelivered TRANSACTION_ERROR: 29189 [ 765.587955] binder_alloc: 22696: binder_alloc_buf, no vma 22:16:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000007300000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 765.614390] binder: 22696:22709 transaction failed 29189/-3, size 24-0 line 2970 [ 765.627817] binder: undelivered TRANSACTION_ERROR: 29189 [ 765.642349] binder: undelivered TRANSACTION_ERROR: 29189 22:16:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000030000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:16:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x300, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000, 0x0) r3 = getpgid(0xffffffffffffffff) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000240)=[0xee00, 0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000680)=0x0) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) r11 = getpgrp(0xffffffffffffffff) r12 = geteuid() r13 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f00)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000002ec0)='/dev/kvm\x00', 0xffffffffffffffff}, 0x30) r15 = getuid() getgroups(0x40000000000000fe, &(0x7f0000002f40)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0x0]) r17 = getpgid(0x0) lstat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = gettid() fstat(r1, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getgid() r23 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getegid() sendmmsg$unix(r2, &(0x7f00000037c0)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000180)="5c7224c69131ed3a22ac622590f8b3a61a8cd56396df3a9e0d622e44b0a06d167ebbf190e8f5a8d20b406f3525c86e5cccb0c2748237ff2a1855afb4de6f5023354b0245988beeaf578bdbadba6a31c5fb91728d87f0c1949cdc3c99b48928e36a3564ad0c380b91ff83431cfe9f0da74aa97162dee08692a337add4a3a97b7b0ed3bc32b9f8300327ada42c2738d38b9047847c41439a021a3da913a651eaba597f74eccd", 0xa5}, {&(0x7f00000002c0)="8c287cf3caec3620d9103ce6b711a316a2b7cd2232e13aaa49407c6f3b1a687936dafcbd9d60912918667ec17333751aeb78c540f27beea2e6553af4b4dfdea301b27bd9bf40f4bd754fb604fd719779f0230f1d471c4f9f5d7de1185bb4556b52615eb63cc0557dfe328042dbe94b5b79a0b680616b343a92d70fc51f8bf1b2925b2fe5fff20322bc19267e547f310572980247b9227afeea57e3e1b6ce55ae5a7b9717e52f81c8d124f5354a960e510d9c4599fdad0d85af18bebcafb4b0e5880365667ea6a421b8d58be3e85318443e4695fb95642b220b553fb72f", 0xdd}], 0x2, &(0x7f0000000780)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, 0xee00, r10}], 0xb0, 0x20000000}, {&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)="211ad7f475658b5b4cba78bf20b288e1fe2eab5b3971f956101c1306e6483cd9e72a3f9b57a9a3d0a672e0f037be719709d051ce28408efbc1", 0x39}, {&(0x7f0000000900)="3d7686787c327133cc90f8e31f5e35f47804bb354f0e7844d4de3bf6ea876637d130fd6fc2d592b1532811857c559cea53be47b6471606ecbc22dcaa6574d991262385ad7bbac304c0f7d2cdcac2ee2ec069cd3181480732d18736eea82a1b2561792492f6ab0de767", 0x69}, {&(0x7f0000000980)="9a1a436dca62171f7f333e0356e65ac34ad6de8b4b4d719d0e03721f4018064b3fd96d28490aec40d89b9031da4b7700e1c4aaa8514c31381345051bfa2362484bd5d668faa87f0864986cead2e180c3ff7703c3426071c347735b8bb8b65e9cd317e5bb375dc0775c", 0x69}], 0x3, &(0x7f0000000a40)}, {&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000000b00)="781883508821d1c00219daa52d3d3effdec45b52be943970ec71c910458c9d8f4400bffd37e32e999596c34ec0d3290ddafc7b128a5fcb661aeb8ccecec1d311bb38c570b1934bd1b4f02441c6ebe6ff204b9be08e9ce51a779c4708090e783c0328b9f40a9798bc88f534dc3e02ab4fb5af819044dc1ae56549677789faa3ab2b23f2c129766e16692cf3581b6c17ff65254acef35252667c85fed9e2250fbbe6a7332af7d089940699a4679d424b6e45036e6ebea1ccd756d7ba4ae21cc6ae09901876cc41079422dbc9e6f130f130f59bf70c9da3dd8d", 0xd8}, {&(0x7f0000000c00)="0ce90f307e4b6a803151b19c537696590c29e79293592874ce4c71c961b85f12b139b7e26db2bb43d5fa65cd3dab52e60a215749216d0be77bdeca7f22b31d", 0x3f}, {&(0x7f0000000c40)="2f8c51a99722bf2607db8c1a5ac661ed94ec8aef1819e0b9408d67bbaf6eb8c4265f855994753a333de8ac644996e70840bb2a21d84bcb57f9d024b9de2fbf99708fb6a6922b8c184c0e7c2347ed16314a9d74fe90c92332801d1138bb6668a8cefb8f6f14e5750848984f3473c1ab4c67359995b28a2a935a73ddd93fbea4ac437d9c7bbac23421b19a09ae928cea950502b9205b80c4501b563710c15ca9289415193907f19c2e276efe589edfec1b6a52b55734ac3dd74566998acde9b04ed8d75bcb0fdf64d600bbfd0d31fb4362cf6af3c922490b7d9f2339627a08794c42eeded232959d17565e093a54ef448c842fe24f7665eb2747960550f058020444ba926d42e25075864a88864b8a04c40eb04f50219ae50186789fd48eb5511aa4f2885d06fed417170004c40eab815783cd6750e16a56738aca6e4b00d8d36c5b183343a529d4ec28bad23e93835dfcd7706d7a01e5ea2051bdfaeeec5833a2ced9e275bd8d0006601ab2a7fc09273bd2dcd68cea2770d5d4afb23bc1428f6c1f79f1d25b233cbede2b28cdfd80859092439de7179a50d106cc12a6f59b96f90e4206e2d94f8a5ce9d8df2c459d9bacd3e4cbc9bb983679480cd447bf1568e7be157dd94af6d6b3455ccfc57e26041c65d73c8115ded2b7296637830b0ade69728b509bfc4c40dc073429d206e1a5bb98b034e141a0533ee42eb4e1f49fd2605232397267ed322c2fdcb9e119d74932f575af2d644e7ff453134845c6577313f48dfbb9d052ec979dd9ef352e9adf39ac374cb0d2d44a46e179b963d7bfe43839f17f2293b764bb41c775c0320af92bb57d853f2a20079f6c4b6df05786b08c89281a059cc00bf2fbded855b54e45c78e58c9fa8e9d474193c8d56216b4ce4d9a57366b01255aadbe8114fbd1a84bcf274a9ac91e267a368f02e406fdbc19f62049e93013a3b39ddf83ef5a930ccce096834196abfc820b79fa109a93ad466aa86353dfae31a07f12984147096a62d01d58ab30637589302723350e8422d2489a0153f6434aff84523314ca0ff6a0e46b2bacab1bc19d5b333e44eb2fb00a3ad0b2ea3cd3decf7bade28652c1e1ba3cb3088a6e1fa4c57892c86786caca25210a5140bf0cc9257faf50217a4109ba437de8561e02dcd08cbad63c693da7e721278b0a7e466feca1a4eab30e531b4c69681b40f6887fdfab5246186619340e3ee547eac8227b968de9f4d1b97b5b4abf3dd8783ba082c1926a9ab2670b0668eaba17b5cff963b55e41978ce40e970c511b02a718d55799e4782ccd15d3a515a6e85b8d3ff3f213a3f16240788a5ab9f0668ec3ea16fec4045bda72dcb2c6ae9aba79f8fe24ac03e2262ca20da4bae919467eef3d061e06752ec4d3038a98d781490e2a0653a034675c4ff1328f09b3658b38e96a91931c065064d90a65a5efae26720e86fba61d8634126b8988ca5cde1e9b7ba5d409571888812a46682ac9795231e1d564f5580ad4628ee5accfe78af946d2569ddf814ee6e6d32c841f732ccfce84526a43b9d7c0e4a8424be36280d25b6d4c1f9aadd1cf59cca8ad267c9e9ba18ea8e3baab0e870b28323d636704b495754f17a26fe9a1323a9711ef6f3f4c3892498e8c195e6c5ad0e002ea40152106c787a443a996d7fbfb63a4f3d045439a253bd03913daabededff1fcdd0ca236d9bb860fa9280ee5f5298fe3be7421881935faa22f0c0e2332f272bf78d3df38374869c6bed96abfc8fb8c1720884707de9f06361ccc4f642c0a5abd568fecce4d8482dced7c36a4155efefa800d3ae7469fd0e4430fb8a40be6c16328686316808b9837db1978044adfe36cf350441727b2ad6748869b0cac933b1cafae6d1fd62454aed267f2e097112087f17818c4d3d15a19d64d381fab1e2232504de587b799f14079fec1605cfd8f2551d3332bc98402aef165bb356ac8d89686230a7260fae4ca8323ed7ee92f3fc63857155f45482183c221e39c2ac7ba1cc32ec28a35695255e19d435a8c30e87ea0b68a12c850ef691e44e818b094f7ff05c38618391aebaafe56621c45406342e0cb5120d36bd33f6877b74bf18cdf448fa241b91bc33e26cb55b5b959b3a2e94e24854a8526dea52ca2f2e38e09d50cdc423861895bf48fc4544f0c357944ac07b505a5924cb3b4171c825abb9df49a8996661725f7ffbd2498bd6fc1d7133c5cd40ff2a662d668660d7c3235151b920e87c8230b08249ddeab72e83cd53cc884c44f4fc03b5e57f5582ce203c001cbbe5a3ba76b8cfa8bda3b5385a05178812d42b5166027545318ed3ff828e58a34f333ccfae626c4a81079edcde9c14b752e1b46188fb73a4a4b307a165d43fc2e3ee7eb8274bf2629a8b08050cee319b14f902bbacf5c1d8de36d9b9deeb0ef1ea6adec40e78a4a8a462b3a74d33b675fc8ff8daef2c746866bd6d7149f691699c33c04a875d4e60a2df28adaf562abc6388475daeda4ac0fbca22b52b759d256eaa044e1c30f7b093e8a22a2a9b8490211307bdac5365f85cd7f132dec377611a8b9ebef51284c5cdc15f277844b71b31ebb1e8f5d20aa2eb922bbf05234969c102c0c373b00398541c0cd453dc13c3c1a459f96c2113e315a2e0faee28792834871929cd453184bc42c0c3240f2ba91c8f94172373c614d8b92df5f7c71b490e990693592085f3f7c90f18ac81c528d85375ae4ad839e1d3ebb769a6124ddfb239b3b2c3cd4661ca24e2111378dcbfd9657bccf63dec8fc66d0c03b6ee1256a0f3517e354c0ac977cb4dde89b6de640e1d9d9b5c4fa293be00160953dabc1ed82c361ee99e791d9ba5955b033cf2f5ee0e89b49f09758a82c118ea5a2bf7f6ef50b0eab44300a9d9d0ffca7939fd8731d64b30d32b278894e2692d33791b74ec5a748a4f5a0e14dec2f8b586e4f7a66dd09dacf4b3467b4d49361e4046380015560643a428b4765747edc05a4052dd4b09576916e19b5563834a44b4f02ce188e42b728e2b6a10295a93a35283723aa485e1734d988072f585686b7d0459d44283f10677a36f985d648f2a1368fae1174e9930fa86860b54cf8d3269fd3ae51154d6a55ecd2116cb8b193a36f9ded52cf72dafb679b2c5b64df2024d149598a47c1ff184c5e5a9337ba66708cd77252acb44b880aa913c574bcacf6de2592d974bed4bfdc89a249b5ddcf4a668920f008d8ebe195d421ed1a346fa2f43fed6e36dc6b100926b10158ac625d98bc60beff20b5de0761cdedfb38addb6882ae8f10f9a59a978d3cceb4889b660eaef1703e43464b7c3c374d24b3342ac184e94da2d1b25094213e85b76f7e5756a039b895db4b51defe9b04179fc1836f765c1874f58749a0d912e3e05ae74e038814ef48fa2d7c6f424c6e71b8d7166cae58dc54343d785d25e4e3354ace0af351f8abff46be6d881455a2b8923944e5cd1bbe4d7120de1fd1fdb2860a3e00e7dc1fb8a6b4e43c772b137b8ab850863af22135c4521fbf4e7fd6f077711171279bdb228389443654ad9be6261719d2e241785be305e9dd8069d890567637650320a32800dfa382337a96d0f52c68306f3484448b33f528b5fbf0c42b4b45a730c02d83c5e39bdeeec22327e228d7d13ece166ff407040a9ea3f94a92d92139494ec39068eaaf7a94c0c92cc0151dd911d09c7443a031e0230e15f1967a7377f9e0e3ca263e2ba2e7fcd95aa736151106d60f2eb3a4768f81d99c28141447552337f9797d27f2c9fc2962610a732e1eefbad6da8691af132d4090288e0d114555e70525d63ef388acb4eac986973ec27e73635e1c637100f8df79ca219497dd5a0391cc43b4128ee7c53825e73a458d03b5f49e0b5dddd6e3282da924b4fd78cd6eac7983eb86e94755af3f470e28e1b6b4d0036193f0ce6d4e33722f18b850628052ed4576058245f12f2599299cd748b181b8657b35905444e75f9298dfd7ce5c9753c7662f5cb3e24755a35b7016e09a4a7555b50bd82d39555ad2489964a8b110c3243f9f0ea3b2697df73fcfff6edc28485f3d9a8bf4370a7f0a9f6f846232d0955d2f81c7b444eb3026062d77b7e75f1aa6914e24c9a8fe32070993adcd77950e4f69728de14fc79760b1efafe7c1c70a7322c29a4728e816e9a5e92ccde13b152ddcdd1b5f548db4ebc227d2da3f24a807988f87b9eb4a9228f4fe9572a83bf92957b55fff83d39159e3280753b61c16c1cafdc367faa91870ce78490528a53d8828da3d193f86af61fbcb5a17163af0adb153e41f2c38d47a15192c43bf60cf5a100188d2c2f0fc04686d9e1d8e3e906e7654256443a3a52fc72a84a3687a286d59a7acbb67c06207e32f0ad9ff826ba5d7257dcc9ae2ced6b4cc97a2bbbcddfea9fb6085c92f8b71fc2b8ba6210cf3c90e1d1f788c42bfe42ea4d32001f42917f2bfde069b180fab72cfdeb8f6875bc9424847c3a519068b7bad6e37d56b150e32603cf6ecd0d06adedad26be3e7891553740121ea8a6a6081fb38feab622ff5229d575b1055a83c078efafd5a658eb55fbd00197556243f5f4a11c3be094ae6334b77848335e1d83e16056b71d6ef9d9fd747398bbbe7a5a1484b4f4d2f994ec484e9ecca6bb39baeed67f3ebf32bdf374bf78da96814ac734121412c4c113f9139f098f9e5cf7bb8e787afa70d7d32cb210a585c8d1280ac45c7a1bf5a825480f53beaac699adf65443e4a980675864b209ad4e910e526f56bec69766906473cc06cc36bca29ccffa6834c82bf1e61ff6868beb93b5ea43a4c8e1c090e5279de90531097a1dbe980f5ed84a1ca69a44d831422edeaaaa87b4a9e2b504a5ec1f89f0c2a1b0abc51fb928df8824ac0da1a1a9d765c47a319044383838ca70bb8a46217b39b6881aa20715a0516f3b15d9fae918e658f5047ab8bf13dcdefb2be37277154f4b57c3a6cc6f1f912d8afec2468051072c53cfb6bebe37d00802659001dc896f1131ca99541201d065792cc015edc12c4e1456974cbab493ef12108bc429b5c1b6e43e6d4461b6065d443a9bf28e3dbe39c0eb47a4e5a2fdb9026c4f82b209e3bede705a8a3a97dbdd61c5d42445d3693b4ea5957ae5956efd59eae507849da5b8872e0f25f82f2a47706c79b10ef890c40444ed62bea32bd52093e73884b2bbfb54fb711d86a0c4aa96cc8cdf404a6b44cc1a304159945feda37b34bfa4e8be35fe29dc786148dbdbbf025e7666ba70ce9d1712e834549a550497ac58aa05695e7c9af448ff9a490707019d5c3daa4064b5ca04ef3a15c09400bb41d6db52c96752ac3077a44e7c529b8f4f68efb266e0b30f7d7cafed76427e6e24c616ef1f153201bc63e57c764899579cd114fb3216b83ae94ce4fdb8f265cb55968b9ec787d1d5cf87fc905aebda680b5bc5c10a23fada320f619d979b0ba86e526ad7711c5644cda7fb9dc06cb2dc6ac3f54bc4a2383985df3e2e6ad4714d0d23c21279257508946cfa2355a1ba4c5ea5805e3327024f62223a0bf3eb5a6a8019bb9e97ecbcc0d366dcb81302a84d45f7de097b8d235ec0cd97a1966dcfdfdce09eea1105f2c36f74250314c645072e3e6cf279cc886e7f9a3ff9ae6c3f32cf64439c76136a6d127a1dfc808c3c248e33e395991e48bf3ebc29c02b2e2fa4eba38d46255e234ed963c88432672e4593721909307411da61d95a5953213fba18402a906311a6d2c8a65b381123502010ce9d7bb49a47c246f59b1d47e704239dbe4d4db2ba305a42feed356cf3073ec63eaf72f6bc8c4b8d8e9ad96e5516beda82", 0x1000}, {&(0x7f0000001c40)="62e6a0a6a22ff2cb2199ceef", 0xc}, {&(0x7f0000001c80)="04c5ec0d028bdfcca5c2d143de474d655df66cd18d97e00e94e4003262fbe5ef608e7b0c554f208e1367b14510885a411518657094c4d840683826f65c0f5779d758d80365b909d972166ff7d0f700c1c75afd7ee8fa64727ef732a40321b407265fab873e550994016db12b0fb2db12aa01", 0x72}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="5c7cf7cd55efda7e3e138b1911424a397807306a06e718439c089abd33af2e2afa175d84bef702221567f7c46335eb3df0676d4bd7aeb3", 0x37}, {&(0x7f0000002d40)="63084703bb3fc12809e7ba9444cf9051ef79b5b685982dffe52c7dd73baf5928f622aadd7af978a045307187b9e825946866b3c7d38bd8d97d5395d0aad3b6d3b12854cb5b49d399e8b22684c31fb84ede6c022ef885fe484bda3ad35db78c1b44c4450624d081d067dbd142e5acf02e86510260d093c6a3f70d29fcd23bddc294b68bc8ee42bfcb0b2d5e33ea9b2b578c1242f47262f82b427a1cee290f68e85b60c47cdf2f6799d9320bdd99da950345913e01eac73eaac2a549544f30f716a454bdc5c2b3f4fd2d85f711e6cdc716650bd9e44be4d7c9a2fcf712437a2f03d061e9cd0e435aa725923c494b21718a68e8", 0xf2}], 0x8, &(0x7f0000003ac0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="fd2aefd0336f3faca84185aaf48a39ae55eb18ad4cdc1547df4c3ad774723c38ed066f76d2d16de7788b36f50b2d6d3d10c175d0c262bed0affa491a39299d1bd2bc226801cfd6fb63fc575afa6e0f82af40ec5d1383f77b58d92af57a1a6d2c3fc38c8dd60471e59e993dcec9c497e45f906c0d007b0956580cbf18e0f7418d3db4020f608bec0f547550115f9822a3bacee1568d189a1fd99b050000003e4fdc1ec7badd9eaa3181041a4ff33601a19f9e5225e869d9c82a894b7ffca4cafa54d08fca2d46db4ba05acd2e14fa2f3e0cc7acc17b", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000020000000000000000100000001000000ce7a1d279b6062c5ad71e61b72f7e8382c34cfb4c3d0326e33966536da1f263855b421adafe125b2e8fa", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x100, 0x80}, {&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="1cc93ff07e95b86c5a6ab2df1a8cf99ae197607a29bb2eebb9a2e3532b8314234248133513fe", 0x26}, {&(0x7f00000032c0)="1d46380163ace5a7de8f34a445476af1956eefa0ccd739cfcdbb180f1ab55f422f1a724b49e1aa492348280462d9c101aa9abb6795d413ee83f63957bb52120a736ef4261aa806e42bb177399cd88b9cbec6d2ef08c56f827fbfbcec0b3ea73bf81e0bc875275cb38098d0a03eab89b24db925cc0a9dd21c065f234d57cb8413d79eb69816469fb24fa778719aad9f9486ddcdb114c5c28f0661a602bab23af9fe1acd5e3b861eb24e6e0e2dce3b697befb1b916b3ddf141e951b3c5a85dd85ed9ea4d793d1f3073fef3498855c382b32a11227cd2fa", 0xd6}, {&(0x7f00000033c0)="23e0f1fc1f7fe93c384223337302f69e9aa7cb50d79e184b9838311cecca2da83b578753b8012696647809b64b026601131f6272320df00175d34a44581e479f09d1aec03371795a7dc9506548b6683767944a1af84f39d73260038a4bcc7288cd0acd4db729f1f8c13e0f245a97c7e28124bf4fcc38e0d289d3fffffff4eabcf5547431ae1b06cbc19734d8d5d3b3dc27e54e28558ac8ac8386f4aaa2b52bf8", 0xa0}, {&(0x7f0000003480)="c822bcc295d6d54195151657fe42b0a140f2b681dc0c5496a6c415d333bbee6122b82c52db5dd44fd75dcd7a1b8866fd91b10d506a095c458bc40b9e256beec2b45d74bbaaf65821fd92f3e9f6ecd2d196bfe484b168b9905cb0adb0e288d362e21bba0e90626f32b9c9d3c84e7760bbf146c471c078c9ebc7ec4acfbf9bf65b7ae3a1ba69fb984f4fd3fd42641a4ee4b4dfdb18c1e74dccdfe0765dc7d7435e2106a4d0341145a0b84cfafadcb6cb1ed0f3e28e77b96b362e8b6580a827e52a038653b9ecb74cecfd242d", 0xcb}], 0x5, &(0x7f0000003740)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0x58, 0x800}], 0x4, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r26 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r26, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r26, 0xae80, 0x0) [ 765.745110] binder: 22731:22732 got transaction with invalid data ptr 22:16:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x80000000, 0x41ec}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0xc, &(0x7f00000000c0)='/dev/rfkill\x00'}, 0x30) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1000, &(0x7f0000000140)=""/18) socket$vsock_stream(0x28, 0x1, 0x0) [ 765.786393] binder: 22737:22738 got transaction with invalid data ptr [ 765.789213] binder: 22731:22732 transaction failed 29201/-14, size 24-0 line 2989 [ 765.806739] binder: 22737:22738 transaction failed 29201/-14, size 24-0 line 2989 [ 765.840189] binder_alloc: binder_alloc_mmap_handler: 22737 20001000-20004000 already mapped failed -16 [ 765.873256] binder_alloc: binder_alloc_mmap_handler: 22731 20001000-20004000 already mapped failed -16 [ 765.894525] binder_alloc: 22731: binder_alloc_buf, no vma [ 765.912153] binder: BINDER_SET_CONTEXT_MGR already set [ 765.926232] binder: 22731:22732 ioctl 40046207 0 returned -16 [ 765.933830] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.934811] binder: 22737:22738 transaction failed 29189/-3, size 24-0 line 2970 [ 765.955076] binder_alloc: 22731: binder_alloc_buf, no vma [ 765.972890] binder: undelivered TRANSACTION_ERROR: 29189 [ 765.981434] binder: 22731:22746 transaction failed 29189/-3, size 24-0 line 2970 [ 765.989537] binder: undelivered TRANSACTION_ERROR: 29201 [ 766.013506] binder: undelivered TRANSACTION_ERROR: 29189 22:17:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x4c0, 0x298, 0x160, 0x298, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fff, 0x68e53b6d, 0x4, 0x0, 0x0, "68b19e4b593ea37bd7c4a654894ef6a3a8886f2035e7ec5a4ac93dfad61d915ab233bcdd67b33fec309cfc745cdac5994b7b2b7231e034eedffcad7295cbef9f"}}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', 0x5}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="2a17fb1406d6", @multicast2, @broadcast, 0x2, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x510) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x24000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x110) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000006800000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x3, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000480000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x711671740e1e9960, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, {0xed, 0x7fff, 0x7f, 0x6, 0x8001, 0x4}, 0xcb58, 0x3}, 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x42000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xc00000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 766.388425] binder: 22768:22777 got transaction with invalid data ptr [ 766.399462] binder: 22769:22779 got transaction with invalid data ptr [ 766.419579] binder_alloc: binder_alloc_mmap_handler: 22769 20001000-20004000 already mapped failed -16 22:17:00 executing program 2: clone(0x20000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0xf0, 0x35, 0xffffffffffffffff, 0x401, 0xfffffffffffffeff, 0x8000, 0x7f, 0x1ff}, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x200000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 766.446905] binder_alloc: binder_alloc_mmap_handler: 22768 20001000-20004000 already mapped failed -16 [ 766.459104] binder_alloc: 22768: binder_alloc_buf, no vma 22:17:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x104, 0x200000000000006}) [ 766.515327] binder: BINDER_SET_CONTEXT_MGR already set [ 766.520697] binder: 22768:22777 ioctl 40046207 0 returned -16 [ 766.527358] binder_alloc: 22768: binder_alloc_buf, no vma 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xb000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000004c00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x19, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000100)=""/25}, &(0x7f00000001c0)=0x78) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0x100000, 0x100000, 0x80, 0xff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/39, 0x27) 22:17:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000730000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x5000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 766.671719] binder_alloc: binder_alloc_mmap_handler: 22813 20001000-20004000 already mapped failed -16 22:17:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000680000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @remote}}}, 0x84) [ 766.718071] binder: 22824:22826 got transaction with invalid data ptr [ 766.752847] binder_alloc: binder_alloc_mmap_handler: 22824 20001000-20004000 already mapped failed -16 22:17:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x600, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:00 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x49c842) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) getpeername$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 766.828700] binder: BINDER_SET_CONTEXT_MGR already set 22:17:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x8, {0x7, 0x1b, 0x7, 0x1, 0xae, 0x3, 0xfff, 0x80000001}}, 0x50) [ 766.882184] binder_alloc: 22824: binder_alloc_buf, no vma [ 766.888698] binder: 22824:22826 ioctl 40046207 0 returned -16 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xc00, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2a, 0x20000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:01 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 766.924856] binder_alloc: binder_alloc_mmap_handler: 22834 20001000-20004000 already mapped failed -16 22:17:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000004c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x6, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 767.045343] QAT: Invalid ioctl 22:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000007400000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x4, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 767.080224] binder: 22871:22874 got transaction with invalid data ptr [ 767.105158] QAT: Invalid ioctl [ 767.120235] binder: BINDER_SET_CONTEXT_MGR already set 22:17:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = memfd_create(&(0x7f0000004ac0)='user\x00', 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000004b00)=[@in6={0xa, 0x4e20, 0x20, @loopback, 0xb7}], 0x1c) 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x8, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 767.155543] binder_alloc: 22871: binder_alloc_buf, no vma [ 767.187009] binder: 22871:22874 ioctl 40046207 0 returned -16 22:17:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @rand_addr=0xa80d}}, 0x8001, 0x2, 0x1, 0x3, 0x91}, 0x98) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002b000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="0f01bb0b00f30f2a87ec9f660f381df7640f01c866670f08831df5906766660ff17c2cf70f015b000f0131", 0x2b}], 0x1, 0x40, &(0x7f0000000300)=[@flags={0x3, 0x2010}], 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:17:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) getgroups(0x2, &(0x7f00000005c0)=[0x0, 0x0]) r10 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) getgroups(0x8, &(0x7f0000000840)=[0xee00, 0x0, 0xee00, 0xee00, 0xee00, 0xee00, 0xee00, 0xee01]) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000000940)={0x3f8, 0x0, 0x8, [{{0x4, 0x3, 0x8001, 0x52d, 0x5, 0x7fff, {0x5, 0xfffffffffffffff7, 0x7, 0x6, 0x6, 0x8000, 0xffffffff, 0x7, 0x80000001, 0x8, 0x80000001, r4, r5, 0x2, 0x7}}, {0x5, 0x1000, 0x16, 0x800, '-selfvboxnet1#security'}}, {{0x3, 0x2, 0x80000000, 0x1ff, 0x80, 0x9, {0x4, 0x1, 0xff, 0x8, 0x401, 0x0, 0x100, 0x3, 0x8, 0x1ff, 0x4, r6, r7, 0x4, 0x3}}, {0x0, 0x6, 0x5, 0x0, 'lo!+{'}}, {{0x5, 0x0, 0x4000000, 0x40, 0x3, 0x5960, {0x0, 0x10001, 0x1, 0x6, 0x5, 0x3, 0x8, 0x80000000, 0x1ff, 0x100000001, 0x80, r8, r9, 0x4}}, {0x2, 0x819b, 0x1a, 0x401, '[{]{security:!md5sum.,GPL\\'}}, {{0x4, 0x3, 0xe71d, 0xfffffffffffffffc, 0x7, 0xff, {0x5, 0x3f, 0x1f, 0x6, 0xffffffffffffffff, 0x7fff, 0x3, 0x1, 0x5, 0x3, 0x8, r10, r11, 0x1000, 0x6}}, {0x1, 0xff, 0x3, 0x3, '..\x00'}}, {{0x6, 0x1, 0xab6, 0x5, 0x7fff, 0x20, {0x6, 0x401, 0x8, 0x9, 0x101, 0x6, 0x0, 0x7f, 0x7ff, 0x6, 0x1, r12, r13, 0xd3e3, 0x40}}, {0x3, 0x3f, 0x1, 0xfffffffffffffffb, '\x00'}}, {{0x1, 0x0, 0x200, 0x80000001, 0x800, 0x2fbe, {0x6, 0xfffffffffffffff9, 0x8d82, 0x3, 0xff4, 0x2, 0x8, 0x5, 0x40000000, 0x2, 0x2, r14, r15, 0x8, 0x3}}, {0x0, 0x0, 0x8, 0x7, 'selinux('}}]}, 0x3f8) rt_tgsigqueueinfo(r0, r1, 0x1c, &(0x7f0000000080)={0x35, 0xd3, 0x0, 0x698}) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000070000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000300000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x500000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x11) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r3 = accept(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x10, r3, 0x0) [ 767.351720] binder: 22912:22913 got transaction with invalid data ptr 22:17:01 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x80000001) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040)="dc350410427e00e648f9ddbfff", 0xd, 0x7, 0x0) [ 767.414938] Unknown ioctl -2126991741 [ 767.420440] binder_alloc: 22912: binder_alloc_buf, no vma [ 767.424693] binder: BINDER_SET_CONTEXT_MGR already set [ 767.432908] binder: 22912:22913 ioctl 40046207 0 returned -16 22:17:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000705000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000060000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x404000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x90, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffff292}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x787}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc69}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 767.569536] Unknown ioctl -2126991741 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x600000000000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x20, 0xe21f, 0x8001, 0x6]}) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)=""/9, &(0x7f0000000080)=0x9) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 767.680043] binder: 22958:22959 got transaction with invalid data ptr [ 767.685733] binder: BINDER_SET_CONTEXT_MGR already set [ 767.719576] binder: 22957:22960 ioctl 40046207 0 returned -16 22:17:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2500, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x2004}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:17:01 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x10001) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x2000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000010000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000007fffffffefff0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/8, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)=0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000080)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x2, 0xfffffffffffffffc}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r4}}, 0x18) 22:17:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x28, 0x204000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x900, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 767.948659] binder: BINDER_SET_CONTEXT_MGR already set 22:17:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000002000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 767.978758] binder: 22998:22999 ioctl 40046207 0 returned -16 22:17:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000007a000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 2: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x80800) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0xc9, 0x6b6c, 0x55f2360c, 0xff, 0x8, 0x9, 0x3, 0x5, 0x601, 0x3], 0xa, 0x3ff, 0x3ff, 0xffffffffffffffff, 0x10000, 0x2, {0xb7bd, 0xeb62, 0x9, 0x27a6, 0x5, 0x2ae, 0x7, 0x3, 0x100, 0x2, 0x3, 0x8, 0x800, 0x6, "d6ce0c670c3cf9e4fcd388c2f19fea8f3373b204520b12b90c0bcbe86631fcde"}}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x8, 0x5, 0x8000, 0x6, 0x7, 0x1}) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xa00, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000080)={0xfe, 0x4, 0x3f, 'queue0\x00', 0x6}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x20082) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) 22:17:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006c00000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x200, 0x40240) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)=0x18) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x9, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 768.236297] binder: BINDER_SET_CONTEXT_MGR already set [ 768.241656] binder: 23028:23031 ioctl 40046207 0 returned -16 22:17:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000040000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000007000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0xa000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:02 executing program 2: clone(0x80000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) ptrace$setsig(0x4203, r0, 0x1ff, &(0x7f0000000000)={0x16, 0x80000001, 0x2c14, 0x81}) 22:17:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80, 0x200) r3 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x2042, {0x9, 0x2, 0xabc2}, 0x162, r3, r4, 0x5, 0xa52, 0x512, 0x100000001, 0x7ff, 0x327, 0x9, 0x800, 0x400, 0x80000000, 0x6, 0x101, 0x6, 0x7, 0x9}}, 0xa0) 22:17:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 768.499901] binder: BINDER_SET_CONTEXT_MGR already set 22:17:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = semget(0x0, 0x0, 0x2) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000680)=""/4096) 22:17:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000680000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x1000000, 0xffff, 0x0, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 768.530845] binder: 23071:23076 ioctl 40046207 0 returned -16 22:17:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000007a0000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8}) 22:17:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000050000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:02 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200, 0x0) io_submit(r2, 0x3, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7f, r1, &(0x7f0000000040)="19612373a5019d60c16b080dce9cf8527aa134bc106f67ff48f1e452d50c3a1f2e07c6dfcee37c1e285f7e130b082458a856b4b42424f4cfa63243c0ddf0d3e8d6a4f248989c8c2d52678859e29b00ba5e20b298058abc9a760f35254466b15e3283eafbb2ee0e039b06aa04ac328a7321f9b10aa1351514ac13245729e06346330c5cf01be7fe2adeea0db82cb66bde3b342b504ffc44f5178896b70e8eea481afa6e0e7d54b56d66928dd3a38958d56f566aa18e449adda204d8ab5b8f", 0xbe, 0xc728, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x34ae, r1, &(0x7f0000000240)="136ce78e4c62511e47d2836c037d1bda9b270bba940cedbcbe6122779104f32b6b5fa3c68d7404a3ddd0352fe67133b0ff41f10ec61d5ce3ca995c681f5b87bf92da95b08cbd24a4ab66335173c2348d054243d6da32662160aefbf4dc4e57edcd86440d1cca35a4afae2d078dabfa46c4fdb31dcec61f64d8da824e361394020fb104ca0dc7cd1ccdc9", 0x8a, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, r1, &(0x7f0000000300)="6e70f58173fc401fa44820c629aa35f21c523fd844574de4ddf899d3ddf12aa08a2e195044cb9e4f98a80269", 0x2c, 0x800, 0x0, 0x2, r3}]) r4 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x0, 0x60000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x5d1f81cd7154df69}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9f85}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe331}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) [ 768.741327] binder: BINDER_SET_CONTEXT_MGR already set 22:17:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xb, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 768.772848] binder: 23103:23104 ioctl 40046207 0 returned -16 22:17:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) init_module(&(0x7f0000000000)='/dev/kvm\x00', 0x9, &(0x7f0000000040)='/dev/kvm\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x5000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000010000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000fffffdfd0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x8001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000005c0)="cee82625717f3aeaf6defcc2e98447e96eb6f04ed9520aa920a19243e81a6104cd1d96ce3d3eaaae7848b9f76e6daaa434b526c02f71ec8cb07f89e733a7271935973582f5c19b3953e2eed99d84ec59185d4ff881cff71a77796b93d0d2b4028513ab32a14aaa5f6cd7e250c85754fa727056eb592134cef9b5db1f9948f3ecc9112fde38150f82d673ce54c9a62be979f6614d92a8d780f1c119d7a2e095dce8027e335432d3639bc89d19bb1e1a54a985876cf8c7fb9f39da1496973b3dc871065db4de02443f38c66bb4c4aa3c3250449bf09addce295e584375e4b67c7b2528fb02b9d8c64ab72ab52b20249a224281952377da22") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x3ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000c80), 0x4) r4 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) flistxattr(r5, &(0x7f0000000140)=""/173, 0xad) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x3, 0x2, 0x4, 0x4}}, 0x26) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000280)={0xffffffff, 0xfff, 0x10000}) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='status\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040), 0x0) setgroups(0x0, &(0x7f0000000200)) r8 = accept4(r7, 0x0, &(0x7f0000000040), 0x0) sendfile(r8, r6, &(0x7f0000000280), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000340)={0x1, 0x5, 0x7fffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000080)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000180)="495f59bbb125baa2d7d9202a8b93679ee1a898af7ed6aad15fe6c28ceaba6f44ca8518f40ef735d7efbe578949b2151b6a") 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x7000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:03 executing program 2: r0 = eventfd2(0x200, 0x801) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x1, 0x7, 0x9, 0x0, 0x3, 0x6, 0x88d, 0x221, 0x38, 0x9b, 0x1, 0x4, 0x20, 0x9, 0x9, 0x0, 0xfff}, [{0x70000003, 0xfffffffffffffffa, 0x10001, 0x1ff, 0x0, 0x9, 0x6}], "c94a319ea21d35593c7a033b731c4c17c09b4a64cd46f4ea90d28c5a2dd571fe5d9d766fb1e710b28763a1fcf87c260fd4bf680c52ccfd223650014652e472aa9783a20bd9c42d2ceb38f701d5d6ef963e627259c673bc931390f237b2b8717bbd9ee690dd329d2536b95da0bb48de03740b8f12b863226d83a4b81e8667a66abf84ece70dc26d36172267847c12af6aeba1794df18f5a4e54461e18548187266817303a988764ec48ba66c96d5814f5c52af6af0c72aece23983bc7518c14969e138b9afd8d94cbebd9e2440cf28e31eb6b5d94ddec8b716c277b5df95c86b87b0f44cdcd5ccff6dfd46f58", [[]]}, 0x244) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) [ 769.006096] binder: BINDER_SET_CONTEXT_MGR already set 22:17:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x300, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x2ce, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffd) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000019000/0x4000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x5d13fdfb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$pptp(0x18, 0x1, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0x0, 0x2, 0x1ff, 0x40}, {0xa, 0xff, 0xdcd, 0x0, 0x1}, {0x7, 0xa, 0x1, 0x2, 0x2c9}]}) [ 769.052230] binder: 23134:23135 ioctl 40046207 0 returned -16 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000003f0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000007fffffff000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000600000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x2000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x900000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) [ 769.276477] binder: BINDER_SET_CONTEXT_MGR already set [ 769.285386] binder: 23171:23172 ioctl 40046207 0 returned -16 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000002000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000012000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 769.473213] binder: BINDER_SET_CONTEXT_MGR already set [ 769.483685] binder: 23187:23188 ioctl 40046207 0 returned -16 22:17:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x880) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000000c0)=""/252) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)) 22:17:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x28) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000020000/0x3000)=nil, 0x1ff, 0x3, 0x20, &(0x7f0000000000/0x600000)=nil, 0x9}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xa00000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair(0x3, 0x2, 0x14, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x2, 0xfffffffffffffea3) r2 = geteuid() r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r2, r3) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000120000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000060000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 769.605487] binder: BINDER_SET_CONTEXT_MGR already set 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x6, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 769.637276] binder: 23199:23201 ioctl 40046207 0 returned -16 22:17:03 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/219, &(0x7f0000000040)=0xdb) 22:17:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000004c0000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000005000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x6400) timerfd_gettime(r0, &(0x7f0000000080)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, 0xe1, 0x8000}, 0x90) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x0, 0x0, &(0x7f0000000240)=[@cr4={0x1, 0x54080}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x5, 0x0, 0x400, 0x0, 0x7}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000024000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x1ff}, 0x8) 22:17:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x4, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 769.837191] binder: BINDER_SET_CONTEXT_MGR already set 22:17:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006800000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:04 executing program 2: clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x133000) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) [ 769.861305] binder: 23237:23238 ioctl 40046207 0 returned -16 22:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000048000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8}) 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x400000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000007fffffff00000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) getpid() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x1aa8) [ 770.117753] binder: BINDER_SET_CONTEXT_MGR already set 22:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x7048, 0x6, 0x9e5c, 0xb1a}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.145232] binder: 23265:23271 ioctl 40046207 0 returned -16 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x100000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000006c000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 770.194386] binder_transaction: 54 callbacks suppressed [ 770.194403] binder: 23281:23282 transaction failed 29189/-22, size 24-0 line 2855 22:17:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:04 executing program 2: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_open(&(0x7f0000000100)='..\x00', 0x0, 0x0, &(0x7f0000000140)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0x106) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x7, 0x9}, &(0x7f0000000380)=0x18) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) [ 770.246270] binder_alloc_mmap_handler: 29 callbacks suppressed [ 770.246297] binder_alloc: binder_alloc_mmap_handler: 23281 20001000-20004000 already mapped failed -16 [ 770.303780] binder_transaction: 11 callbacks suppressed [ 770.303790] binder: 23294:23296 got transaction with invalid data ptr [ 770.343097] binder_release_work: 54 callbacks suppressed [ 770.343105] binder: undelivered TRANSACTION_ERROR: 29189 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x600, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup3(r1, r1, 0x80000) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.358703] binder: 23281:23282 got transaction with invalid data ptr [ 770.370432] binder: 23294:23296 transaction failed 29201/-14, size 24-0 line 2989 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x700, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 770.411897] binder: 23281:23282 transaction failed 29201/-14, size 24-0 line 2989 [ 770.414507] binder_alloc: binder_alloc_mmap_handler: 23294 20001000-20004000 already mapped failed -16 22:17:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) [ 770.473195] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.474534] binder: BINDER_SET_CONTEXT_MGR already set 22:17:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) rt_sigaction(0xc, &(0x7f00000002c0)={&(0x7f0000000240)="c4e1495c352a0000008fe84095fc04660f381574ab050f1b05462935d4c4236d3817008f69c092266442d00a0f0d0cd166420f38dc255396cb2ff30f2a82762f0000", {0x1000}, 0x88000006, &(0x7f00000000c0)="8fc97882dd660f7dd4440f946ff73e419dc481f92b9062283b0e36f241ab099b00100000260f85ffefffffc4c10973d416660feca17b000000"}, &(0x7f0000000380)={&(0x7f0000000300)="8f49600274dcb7c4235d40e300c442c9be200f380316d91da7079d4dc422ed97748452470f381ddb416a4a41ddcac4a1485d39", {}, 0x0, &(0x7f0000000340)="0f18bc29113f0000a5f04283050d00000000c4227d2a2d05000000c4a109664fc8460f4ca1000000000bccc4a3994964d7c710c4c3617a730000c4e3194b3f76"}, 0x8, &(0x7f00000003c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = accept$inet6(r0, 0x0, &(0x7f0000000000)) recvfrom$inet6(r2, &(0x7f0000000140)=""/196, 0xc4, 0x5ad611875093f2ad, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @mcast1, 0x7}, 0x1c) 22:17:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000500000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 770.513728] binder: 23294:23296 ioctl 40046207 0 returned -16 [ 770.534387] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 770.534395] binder_alloc: 23294: binder_alloc_buf, no vma [ 770.541292] binder: 23294:23323 transaction failed 29189/-3, size 24-0 line 2970 [ 770.555703] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.562243] binder: undelivered TRANSACTION_ERROR: 29189 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x3, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000030000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 770.622989] binder: 23324:23325 transaction failed 29189/-22, size 24-0 line 2855 22:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000018000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.686892] binder_alloc: binder_alloc_mmap_handler: 23324 20001000-20004000 already mapped failed -16 22:17:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) [ 770.739200] binder: 23340:23344 got transaction with invalid data ptr [ 770.765192] binder: 23324:23325 got transaction with invalid data ptr [ 770.778878] binder: 23340:23344 transaction failed 29201/-14, size 24-0 line 2989 22:17:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x8, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x8}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x2) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x1, 0xffff, 0x0, 0x7}) [ 770.791328] binder: undelivered TRANSACTION_ERROR: 29189 [ 770.797564] binder: 23324:23325 transaction failed 29201/-14, size 24-0 line 2989 [ 770.858386] binder_alloc: binder_alloc_mmap_handler: 23340 20001000-20004000 already mapped failed -16 [ 770.866114] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.909427] binder: BINDER_SET_CONTEXT_MGR already set 22:17:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000400000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x80047456, &(0x7f0000000100)=""/174) 22:17:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xb00000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 770.939103] binder: 23340:23344 ioctl 40046207 0 returned -16 [ 770.946235] binder_alloc: 23340: binder_alloc_buf, no vma [ 770.964030] binder: 23340:23366 transaction failed 29189/-3, size 24-0 line 2970 [ 771.008240] binder: undelivered TRANSACTION_ERROR: 29201 [ 771.014770] binder: undelivered TRANSACTION_ERROR: 29189 [ 771.040144] binder_alloc: 23340: binder_alloc_buf, no vma 22:17:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 22:17:05 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/19, 0x13, 0x1, 0x400, 0x8000, 0x1ff, 0x5}, 0x120) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:17:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000507000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xc00000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 771.064125] binder: 23372:23373 transaction failed 29189/-3, size 24-0 line 2970 [ 771.087744] binder_alloc: binder_alloc_mmap_handler: 23372 20001000-20004000 already mapped failed -16 22:17:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 771.151558] binder: 23372:23373 transaction failed 29189/-22, size 24-0 line 2855 [ 771.187928] binder: undelivered TRANSACTION_ERROR: 29189 [ 771.194812] binder: undelivered TRANSACTION_ERROR: 29189 22:17:05 executing program 0: semget(0x0, 0x0, 0x82) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 771.220344] binder: 23389:23390 got transaction with invalid data ptr 22:17:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000040000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 771.265230] binder_alloc: binder_alloc_mmap_handler: 23389 20001000-20004000 already mapped failed -16 22:17:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xa00, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 771.307944] binder: BINDER_SET_CONTEXT_MGR already set 22:17:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') read$FUSE(r2, &(0x7f0000001000), 0x1000) listen(r1, 0xdae7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) [ 771.329050] binder: 23389:23390 ioctl 40046207 0 returned -16 22:17:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:17:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x40400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x2, 0x2, 0x8}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="0fc75cf96436260fae8b0300c1d9fd66b9ed0a00000f320fc79f000066b95f0200000f32b83b018ec8b8e7000f00d00f20d86635200000000f22d89a66003501", 0x40}], 0x1, 0x22, &(0x7f0000000140), 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 771.419115] binder_alloc: 23389: binder_alloc_buf, no vma [ 771.472281] binder_alloc: 23389: binder_alloc_buf, no vma [ 771.486745] binder_alloc: binder_alloc_mmap_handler: 23410 20001000-20004000 already mapped failed -16 22:17:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000fdfdffff000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x200000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4000000000000000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:17:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000004c0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 771.712817] binder: 23431:23433 got transaction with invalid data ptr 22:17:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 22:17:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x500000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 771.811744] binder_alloc: binder_alloc_mmap_handler: 23431 20001000-20004000 already mapped failed -16 [ 771.846806] binder_alloc: 23431: binder_alloc_buf, no vma 22:17:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@sco, &(0x7f0000000100)=0x80) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 771.888138] binder_alloc: binder_alloc_mmap_handler: 23440 20001000-20004000 already mapped failed -16 [ 771.903192] binder: BINDER_SET_CONTEXT_MGR already set [ 771.918988] binder: 23431:23433 ioctl 40046207 0 returned -16 22:17:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x3000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000100000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:06 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)="97", 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@dellink={0x28, 0x11, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0xd0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) 22:17:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x3f, 0x3, 0x7}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x91a, 0x8, [0x6, 0x5, 0xc4, 0xfbf, 0x8, 0xffffffffffffffff, 0x100, 0x1]}, &(0x7f0000000100)=0x18) 22:17:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000030000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x6000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 772.109781] binder_alloc: binder_alloc_mmap_handler: 23475 20001000-20004000 already mapped failed -16 [ 772.149621] binder: 23477:23479 got transaction with invalid data ptr 22:17:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x10040) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r3 = getuid() ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000980)={{&(0x7f000001e000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000940)={0x7, 0x4, 0x6000, 0xfffffffffffffff8, 0x204, 0x8, 0x4, 0x7, 0xfffffffffffffffa, 0x3}) r6 = getegid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [{0x2, 0x0, r3}, {0x2, 0x7, r4}], {0x4, 0x4}, [{0x8, 0x3, r5}, {0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x2, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x3, r11}, {0x8, 0x2, r12}], {0x10, 0x1}, {0x20, 0x6}}, 0x74, 0x2) times(&(0x7f0000000140)) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000880)) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 22:17:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000003f000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 772.201062] binder: BINDER_SET_CONTEXT_MGR already set [ 772.234925] binder: 23477:23479 ioctl 40046207 0 returned -16 22:17:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xb000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80000001}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000050000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000002000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 772.437523] binder: 23507:23510 got transaction with invalid data ptr 22:17:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 772.480272] binder: BINDER_SET_CONTEXT_MGR already set 22:17:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ustat(0x0, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 772.508409] binder_alloc: 23507: binder_alloc_buf, no vma [ 772.530961] binder_alloc: 23507: binder_alloc_buf, no vma [ 772.545368] binder: 23507:23511 ioctl 40046207 0 returned -16 22:17:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 22:17:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000007fffffff00000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000480000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x102000}) 22:17:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x1, 0x100000, 0x1000, 0x6e52, 0x7, 0x100000001, 0x6, 0x4, 0x2, 0x9}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x63, 0x200000) 22:17:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xc000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 773.323908] binder: 23533:23535 got transaction with invalid data ptr [ 773.347193] binder: 23538:23539 got transaction with invalid data ptr [ 773.364528] binder: BINDER_SET_CONTEXT_MGR already set 22:17:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000004c000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) flistxattr(r1, &(0x7f0000000080)=""/97, 0x61) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x100, 0x7f, 0x1, 0x7fffffff]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000180)="7c63f1af3c1e6f8e27de2dfd45732beb38a8595314652ecd9f11cfe5f950d38b995d9919c48e53fc9bdacfec5ad09e6bd9a6887160398e1fbf39bbcef4ff8772149474721f70adede303a49f6d5a5e3d20fa0c477e35f45d9f61a842b74f379bb7d9f3b28b33f4559f06b80a49d224de3ecc26a863e263bce8def578b0d01975053231ed9cc6f55892b01ebc", &(0x7f0000000000)="c94c6b4172c40e474a051e6a1f79d949fa"}}, &(0x7f00000002c0)) [ 773.400343] binder: 23533:23535 ioctl 40046207 0 returned -16 [ 773.400500] binder_alloc: 23533: binder_alloc_buf, no vma [ 773.425117] binder_alloc: 23533: binder_alloc_buf, no vma 22:17:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006340400000000000000000000000000000000a0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x10000, 0x972, 0x7ff, 0x9]}) 22:17:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x4, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101100) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x9, @empty, 0x4}, {0xa, 0x4e21, 0x800, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0xffffffff}, 0x4, [0x5, 0x1, 0x8, 0x8, 0x8000, 0x61d, 0x2, 0x5]}, 0x5c) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000180)) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) [ 773.629213] IPVS: ftp: loaded support on port[0] = 21 [ 773.644532] binder: BINDER_SET_CONTEXT_MGR already set [ 773.660323] device bridge_slave_1 left promiscuous mode [ 773.663478] IPVS: ftp: loaded support on port[0] = 21 [ 773.666751] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.710897] binder: 23558:23559 ioctl 40046207 0 returned -16 [ 773.749158] device bridge_slave_0 left promiscuous mode 22:17:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000fffffdfd0000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 773.760577] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.853426] team0 (unregistering): Port device team_slave_1 removed [ 773.867783] team0 (unregistering): Port device team_slave_0 removed [ 773.881821] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 773.919880] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 773.993182] bond0 (unregistering): Released all slaves [ 774.073141] binder: BINDER_SET_CONTEXT_MGR already set [ 774.089730] binder: 23575:23578 ioctl 40046207 0 returned -16 [ 775.449701] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.474818] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.482258] device bridge_slave_0 entered promiscuous mode [ 775.530112] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.539972] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.548712] device bridge_slave_1 entered promiscuous mode [ 775.558066] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.564550] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.574216] device bridge_slave_0 entered promiscuous mode [ 775.647227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 775.661285] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.667905] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.677074] device bridge_slave_1 entered promiscuous mode [ 775.689238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 775.724297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 775.798468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 775.896966] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 776.162967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 776.174527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 776.342789] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 776.496098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 776.503264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.515258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 776.524187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 776.669790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 776.677016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 777.002024] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 777.009586] team0: Port device team_slave_0 added [ 777.173700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 777.180969] team0: Port device team_slave_1 added [ 777.186738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 777.194205] team0: Port device team_slave_0 added [ 777.347134] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 777.354719] team0: Port device team_slave_1 added [ 777.360291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.509859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 777.517471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 777.524352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.534791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.542463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.551425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 777.560110] device bridge_slave_1 left promiscuous mode [ 777.566342] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.625955] device bridge_slave_0 left promiscuous mode [ 777.631408] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.663338] team0 (unregistering): Port device team_slave_1 removed [ 779.673437] team0 (unregistering): Port device team_slave_0 removed [ 779.684816] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 779.728653] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 779.796413] bond0 (unregistering): Released all slaves [ 779.863416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 779.870886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.879103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.889117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 779.896594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.908409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.934857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 779.942047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.952016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.962810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 779.970109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.980141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 780.024075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 780.045688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.053813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 780.706387] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.712809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.719555] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.725971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.755539] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 780.874743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 781.021067] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.027533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.034242] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.041098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.055523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 781.945270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 783.082234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.247318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 783.282371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.413869] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 783.420798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.436865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.446726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 783.587696] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.600472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 783.607166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.614288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.774215] 8021q: adding VLAN 0 to HW filter on device team0 22:17:18 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) fallocate(r0, 0x30, 0x0, 0xfff) 22:17:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x9fffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40840, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @loopback}, 0x1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x4}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000200)={0x5, 0x0, 0x4, 0x3, 0x3, 0x2, 0x8, 0xbf}, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x2, 0x3, 0xffff, 0x7920, 0x3}, &(0x7f00000002c0)={0x3d72731f, 0x7, 0x8c9, 0x3, 0x6, 0x1, 0x3, 0x20}, &(0x7f0000000300)={0x77359400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:17:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000006000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000004000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x12000) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000002c0)={0x2, 0x0, 0x2080, {0x2000, 0x3000, 0x2}, [], "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", "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"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4080, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 22:17:18 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x4000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:18 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xb00, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) [ 784.783549] binder_transaction: 22 callbacks suppressed [ 784.783567] binder: 24099:24114 transaction failed 29189/-22, size 24-0 line 2855 [ 784.800222] binder_transaction: 3 callbacks suppressed [ 784.800232] binder: 24102:24109 got transaction with invalid data ptr [ 784.816951] binder: 24102:24109 transaction failed 29201/-14, size 24-0 line 2989 [ 784.828149] binder_alloc_mmap_handler: 10 callbacks suppressed [ 784.828167] binder_alloc: binder_alloc_mmap_handler: 24099 20001000-20004000 already mapped failed -16 [ 784.849846] binder: 24099:24114 got transaction with invalid data ptr [ 784.859174] binder_alloc: binder_alloc_mmap_handler: 24102 20001000-20004000 already mapped failed -16 [ 784.869312] binder_release_work: 22 callbacks suppressed [ 784.869320] binder: undelivered TRANSACTION_ERROR: 29189 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x9, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x400) io_setup(0x7, &(0x7f0000000140)=0x0) io_destroy(r3) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000200)={r2, r0}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="bd1a09a9e5450dd81a7809a590c78a7e364721c936ff", 0x16}], 0x1, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000080)={{0x1, 0x37174216}, {0x1, 0x5}, 0xf48, 0x4, 0xffffffffffffffff}) [ 784.872131] binder: 24099:24114 transaction failed 29201/-14, size 24-0 line 2989 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) [ 784.920551] binder: undelivered TRANSACTION_ERROR: 29201 [ 784.949710] binder: BINDER_SET_CONTEXT_MGR already set 22:17:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000a00000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 784.975680] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 784.975689] binder_alloc: 24102: binder_alloc_buf, no vma [ 784.997139] binder: undelivered TRANSACTION_ERROR: 29201 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x2, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) [ 785.040247] binder: 24102:24109 ioctl 40046207 0 returned -16 [ 785.066883] binder: 24102:24125 transaction failed 29189/-3, size 24-0 line 2970 22:17:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000200000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x300000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 785.089423] binder: 24151:24152 transaction failed 29189/-22, size 24-0 line 2855 [ 785.091272] binder: undelivered TRANSACTION_ERROR: 29189 22:17:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) membarrier(0x61, 0x0) 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x100, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xfc, r4, 0x224, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd98}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf41}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x4, [0xd1, 0xf95, 0xf1c, 0xffffffff7fffffff]}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 785.183874] binder: 24162:24163 got transaction with invalid data ptr [ 785.199806] binder_alloc: binder_alloc_mmap_handler: 24151 20001000-20004000 already mapped failed -16 [ 785.204058] binder: 24162:24163 transaction failed 29201/-14, size 24-0 line 2989 [ 785.218563] binder: 24151:24152 got transaction with invalid data ptr 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x9000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 785.237406] binder: undelivered TRANSACTION_ERROR: 29189 [ 785.243838] binder: 24151:24152 transaction failed 29201/-14, size 24-0 line 2989 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getpid() lseek(r0, 0xfffffffffffffffe, 0x3) [ 785.299293] binder_alloc: binder_alloc_mmap_handler: 24162 20001000-20004000 already mapped failed -16 [ 785.307094] binder: undelivered TRANSACTION_ERROR: 29201 22:17:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000700000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 785.361015] binder: BINDER_SET_CONTEXT_MGR already set 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xc00, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 785.393384] binder: 24162:24163 ioctl 40046207 0 returned -16 [ 785.419971] binder_alloc: 24162: binder_alloc_buf, no vma 22:17:19 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x200000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x300, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 785.468306] binder: undelivered TRANSACTION_ERROR: 29201 [ 785.476960] binder: 24162:24196 transaction failed 29189/-3, size 24-0 line 2970 [ 785.512538] binder: undelivered TRANSACTION_ERROR: 29189 [ 785.523127] binder: 24200:24201 transaction failed 29189/-22, size 24-0 line 2855 22:17:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000600000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) [ 785.561869] binder_alloc: binder_alloc_mmap_handler: 24200 20001000-20004000 already mapped failed -16 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x900, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x3) [ 785.608156] binder: undelivered TRANSACTION_ERROR: 29189 22:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x2cc, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="0f00133e660f38820e36660f38829f00800000b805000000b907bd00000f01d9c744240000000000c7442402b5000000c7442406000000000f011424260f01b3e606b23466b836000f00d0b8010000000f01d90f019ef5ffffff0f32", 0x5c}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000480)={0x2, 0x0, 0x2080, {0x3004, 0x4, 0x2}, [], "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", "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"}) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000240)=""/172) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x900000000000}, &(0x7f0000000100)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@mcast1}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x1, 0xfff) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0x8}, 0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x100, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x3f, 0x1, 0x6, 0x9}) 22:17:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000003000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 785.663143] binder: 24225:24226 got transaction with invalid data ptr [ 785.693803] binder: 24225:24226 transaction failed 29201/-14, size 24-0 line 2989 22:17:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x5, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) readahead(r0, 0x2, 0x3f) [ 785.743781] binder_alloc: binder_alloc_mmap_handler: 24225 20001000-20004000 already mapped failed -16 [ 785.780280] binder_alloc: 24225: binder_alloc_buf, no vma [ 785.791008] binder: BINDER_SET_CONTEXT_MGR already set 22:17:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0xa, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 785.851269] binder: 24225:24226 ioctl 40046207 0 returned -16 [ 785.854416] binder_alloc: 24225: binder_alloc_buf, no vma [ 785.859585] binder_alloc: binder_alloc_mmap_handler: 24235 20001000-20004000 already mapped failed -16 [ 785.863806] binder: undelivered TRANSACTION_ERROR: 29201 22:17:20 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000004000000000000000000000000000000000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 785.979000] kasan: CONFIG_KASAN_INLINE enabled [ 785.983679] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 785.991306] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 785.997564] CPU: 0 PID: 24243 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #247 [ 786.004931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.014314] RIP: 0010:finish_task_switch+0x599/0x900 [ 786.019441] Code: 89 e1 48 c1 e9 03 42 80 3c 39 00 0f 85 a7 01 00 00 4d 8b 24 24 4d 85 e4 0f 84 ad fc ff ff 49 8d 7c 24 10 48 89 f9 48 c1 e9 03 <42> 80 3c 39 00 74 a5 e8 2b cb 6c 00 eb 9e 49 8d 7d 78 48 b8 00 00 [ 786.020783] kobject: 'kvm' (00000000db1f8e4b): kobject_uevent_env [ 786.038345] RSP: 0018:ffff8801bd92f028 EFLAGS: 00010a06 [ 786.038358] RAX: 0000000000000000 RBX: ffff8801dae2cb40 RCX: 1bd5a00000000022 [ 786.038366] RDX: 000000000000a5d6 RSI: ffffffff810f036e RDI: dead000000000110 [ 786.038372] RBP: ffff8801bd92f110 R08: ffff8801d9664100 R09: fffff52001dd9846 [ 786.038380] R10: fffff52001dd9846 R11: ffffc9000eecc237 R12: dead000000000100 [ 786.038386] R13: ffff880196292580 R14: 0000000000000000 R15: dffffc0000000000 [ 786.038398] FS: 00007fb474720700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 786.038406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.038413] CR2: 00007fb4746dc0b8 CR3: 000000019b049000 CR4: 00000000001426f0 [ 786.038425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.038441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 786.048707] kobject: 'kvm' (00000000db1f8e4b): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 786.050025] Call Trace: [ 786.050047] ? __switch_to_asm+0x34/0x70 [ 786.050070] ? preempt_notifier_register+0x200/0x200 [ 786.074782] binder: 24271:24272 got transaction with invalid data ptr [ 786.079139] ? __switch_to_asm+0x34/0x70 [ 786.079155] ? __switch_to_asm+0x34/0x70 [ 786.079175] ? __switch_to_asm+0x40/0x70 [ 786.089297] binder_alloc: binder_alloc_mmap_handler: 24271 20001000-20004000 already mapped failed -16 [ 786.094678] ? __switch_to_asm+0x34/0x70 [ 786.094690] ? __switch_to_asm+0x40/0x70 [ 786.094702] ? __switch_to_asm+0x34/0x70 [ 786.094714] ? __switch_to_asm+0x40/0x70 [ 786.094734] ? __switch_to_asm+0x34/0x70 [ 786.100792] binder: BINDER_SET_CONTEXT_MGR already set [ 786.107888] ? __switch_to_asm+0x34/0x70 [ 786.107901] ? __switch_to_asm+0x40/0x70 [ 786.107912] ? __switch_to_asm+0x34/0x70 [ 786.107923] ? __switch_to_asm+0x40/0x70 [ 786.107936] ? __switch_to_asm+0x34/0x70 [ 786.107954] ? __switch_to_asm+0x40/0x70 [ 786.115444] binder_alloc: 24271: binder_alloc_buf, no vma [ 786.122509] __schedule+0x874/0x1ed0 [ 786.122531] ? __sched_text_start+0x8/0x8 [ 786.122550] ? check_preemption_disabled+0x48/0x200 [ 786.131702] binder: 24271:24272 ioctl 40046207 0 returned -16 [ 786.134135] ? find_held_lock+0x36/0x1c0 [ 786.134153] ? try_to_wake_up+0x10a/0x12f0 [ 786.134174] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 786.259199] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 786.264306] ? lockdep_hardirqs_on+0x421/0x5c0 [ 786.268894] ? preempt_schedule+0x4d/0x60 [ 786.273049] preempt_schedule_common+0x1f/0xd0 [ 786.277657] preempt_schedule+0x4d/0x60 [ 786.281666] ___preempt_schedule+0x16/0x18 [ 786.285909] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 786.290846] try_to_wake_up+0x10a/0x12f0 [ 786.294911] ? do_raw_spin_unlock+0xa7/0x2f0 [ 786.299325] ? migrate_swap_stop+0x930/0x930 [ 786.303732] ? find_held_lock+0x36/0x1c0 [ 786.307811] ? __mutex_unlock_slowpath+0x430/0x8c0 [ 786.312754] ? lock_downgrade+0x900/0x900 [ 786.316907] ? debug_mutex_lock_common+0x130/0x130 [ 786.321848] ? kasan_check_read+0x11/0x20 [ 786.326093] ? do_raw_spin_unlock+0xa7/0x2f0 [ 786.330504] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 786.335093] wake_up_q+0xa4/0x100 [ 786.338559] __mutex_unlock_slowpath+0x43c/0x8c0 [ 786.343322] ? wait_for_completion+0x8a0/0x8a0 [ 786.347906] ? consume_skb+0x1bb/0x570 [ 786.351798] ? refcount_add_not_zero_checked+0x330/0x330 [ 786.357256] ? netlink_has_listeners+0x2cb/0x4a0 [ 786.362014] ? netlink_tap_init_net+0x3d0/0x3d0 [ 786.366694] mutex_unlock+0xd/0x10 [ 786.370250] kobject_uevent_env+0x9e9/0x1360 [ 786.374682] kvm_uevent_notify_change.part.33+0x2f8/0x440 [ 786.380223] kvm_dev_ioctl+0x15e6/0x1b10 [ 786.384287] ? is_bpf_text_address+0xac/0x170 [ 786.388791] ? kvm_debugfs_release+0x90/0x90 [ 786.393197] ? graph_lock+0x170/0x170 [ 786.397002] ? do_futex+0x249/0x26d0 [ 786.400717] ? rcu_bh_qs+0xc0/0xc0 [ 786.404260] ? rcu_bh_qs+0xc0/0xc0 [ 786.407806] ? unwind_dump+0x190/0x190 [ 786.411699] ? find_held_lock+0x36/0x1c0 [ 786.415764] ? __fget+0x4aa/0x740 [ 786.419217] ? lock_downgrade+0x900/0x900 [ 786.423364] ? check_preemption_disabled+0x48/0x200 [ 786.428399] ? kasan_check_read+0x11/0x20 [ 786.432555] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 786.437843] ? rcu_bh_qs+0xc0/0xc0 [ 786.441396] ? ksys_dup3+0x680/0x680 [ 786.445116] ? kasan_check_write+0x14/0x20 [ 786.449357] ? trace_hardirqs_off+0xb8/0x310 [ 786.453772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 786.459317] ? check_preemption_disabled+0x48/0x200 [ 786.464345] ? check_preemption_disabled+0x48/0x200 [ 786.469371] ? kvm_debugfs_release+0x90/0x90 [ 786.473791] do_vfs_ioctl+0x1de/0x1720 [ 786.477690] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 786.482978] ? ioctl_preallocate+0x300/0x300 [ 786.487392] ? __fget_light+0x2e9/0x430 [ 786.491365] ? fget_raw+0x20/0x20 [ 786.494822] ? putname+0xf2/0x130 [ 786.498275] ? rcu_read_lock_sched_held+0x108/0x120 [ 786.503301] ? kmem_cache_free+0x24f/0x290 [ 786.507544] ? __x64_sys_futex+0x47f/0x6a0 [ 786.511785] ? do_syscall_64+0x9a/0x820 [ 786.515767] ? do_syscall_64+0x9a/0x820 [ 786.519749] ? lockdep_hardirqs_on+0x421/0x5c0 [ 786.524347] ? security_file_ioctl+0x94/0xc0 [ 786.528773] ksys_ioctl+0xa9/0xd0 [ 786.532232] __x64_sys_ioctl+0x73/0xb0 [ 786.536125] do_syscall_64+0x1b9/0x820 [ 786.540044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 786.545418] ? syscall_return_slowpath+0x5e0/0x5e0 [ 786.550352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 786.555206] ? trace_hardirqs_on_caller+0x310/0x310 [ 786.560233] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 786.565258] ? prepare_exit_to_usermode+0x291/0x3b0 [ 786.570281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 786.575135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 786.580336] RIP: 0033:0x457679 [ 786.583541] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 786.602452] RSP: 002b:00007fb47471fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 786.610186] RAX: ffffffffffffffda RBX: 00007fb4747206d4 RCX: 0000000000457679 [ 786.617465] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 786.624739] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 786.632014] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 786.639289] R13: 00000000004cfc28 R14: 00000000004bfd60 R15: 0000000000000000 [ 786.646564] Modules linked in: [ 786.649884] ---[ end trace 9d9d86e34ca4ca57 ]--- [ 786.654706] RIP: 0010:finish_task_switch+0x599/0x900 [ 786.659835] Code: 89 e1 48 c1 e9 03 42 80 3c 39 00 0f 85 a7 01 00 00 4d 8b 24 24 4d 85 e4 0f 84 ad fc ff ff 49 8d 7c 24 10 48 89 f9 48 c1 e9 03 <42> 80 3c 39 00 74 a5 e8 2b cb 6c 00 eb 9e 49 8d 7d 78 48 b8 00 00 [ 786.678824] RSP: 0018:ffff8801bd92f028 EFLAGS: 00010a06 [ 786.684206] RAX: 0000000000000000 RBX: ffff8801dae2cb40 RCX: 1bd5a00000000022 [ 786.691564] RDX: 000000000000a5d6 RSI: ffffffff810f036e RDI: dead000000000110 [ 786.698908] RBP: ffff8801bd92f110 R08: ffff8801d9664100 R09: fffff52001dd9846 [ 786.699882] kobject: 'kvm' (00000000db1f8e4b): kobject_uevent_env [ 786.706245] R10: fffff52001dd9846 R11: ffffc9000eecc237 R12: dead000000000100 [ 786.706255] R13: ffff880196292580 R14: 0000000000000000 R15: dffffc0000000000 22:17:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7f, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x200, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000000c0)={0xb, 0x9, 0x81}) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x8}) 22:17:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92017, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x66f, 0x0, 0xffff, 0x700000000000000, 0x400}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:17:20 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffffe, 0x3) 22:17:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x25, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000007fffffff000000000000000018"], 0x0, 0x0, &(0x7f00000003c0)}) [ 786.706269] FS: 00007fb474720700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 786.706285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.725378] binder_alloc: binder_alloc_mmap_handler: 24277 20001000-20004000 already mapped failed -16 [ 786.727175] CR2: 00007fb4746dc0b8 CR3: 000000019b049000 CR4: 00000000001426f0 [ 786.748755] kobject: 'kvm' (00000000db1f8e4b): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 786.750845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.770919] Unknown ioctl -1072933430 [ 786.774521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 786.774531] Kernel panic - not syncing: Fatal exception [ 786.775617] Kernel Offset: disabled [ 786.795717] Rebooting in 86400 seconds..