cd84e94d13ea84e5fb9f99af8a439d70cfb0da3ac68ac7cafc15215030348b0e4cdbfe8106c16666379987d0aead98df3b19136c442b6a3abf79b5723844d792d418fc5bbbd531819677e3479307be6d57b6e5f4081ff00e7ad168c9011a6975bd83e8ce37c81c504836a030f5fd3acfd779a962ecadeaf5087a8efa0c32740ee4523198a1da3b4c43a0b5ffc82360fda55cab804a03906bd36c609abd998c40acb5b1bc5423bdd3bc4dbb335c0ae30591a15380e7da476a76dad9e45d315a9d60bbdbbe00d2ab485f1fc116c406eb9d40b34fc19fa9572d7ec238117d172dbf077d4ab061cd44f23989aada00e1ef37adc0e60042a2a8463766952f66a9bd171102fb1ea53728e5fa62f43ef212622ea663a8f54c96144c62e9bcfc9ab070529c7b6d808105f6b169f6f092e1fc8f986a7e641856724cbd1ee0000487a5c242c97a9452af7cd321a5599e39a631261d7f5821c4b6ae0282f2989be152bcac302dbc303165964300b8de44d20198b5d58c049766070517153cb793c3db780bcc7181671c86707f521523b7fc7ab3fee070e1c07b0e2db5d32efc418f9606ba8436f0cf59b690a078e7005b5ff3df9d75999dbb80703ed42ef1cedfe7628ec2f80543ce8d5f0a2a7fa4b85f801d50d8e243e3b5bd33de4fbcc7215b3cd746fe8d222eafa449dd7528da83942423e5f37a50389184284e5da9f40ab670d9a3a8079599a4c38b7affc2bdb9ce51d519345615da28f1dbec4df59120bbaf0e0f04cedc1903fca4aa4661c0115fac348dcbdafbd8677460e4e9980d0ce816082816500359a5d2c17799bf251fbf2f8ffd49ca61a678c1d597e8e7ca2afd32f23889f4a169a535af3b94fd218c482524f02d7be107f7f7bb2c613f16da2f74068da602b08b869e286e6c4fafc4884270735747e684edab47f1aa3fcbca95f0405246d2f86d3d7b503faf4b4b1143d5975574123b1ce4d778a79f1a4a4fc95c795d545af8826cf3498d8e1d6592fed5e59d5e9a72aea5ba3a4aff33f932b26bb2925ebd35757c56976e2a925d7d21235f3843a4e9cdaef9a8d94948953b1d52beaf259f3001f5e5a8e62219f7af3e127bbca83aa8e81a8c9dd2e4769d969e2b8230b79511f09929c48635ad1453377fb5faad45812bdba3a5fcd7c524f823dcc4614dd2574589c941a5d72321b7e7e8f7f760c311e95ae77569bed125bb4e26d94d145bcd5dc51df8fe7ce349bf69ef4554672f574a5ef2ccc387f6e7de89e3d69543caf74e8779fcb2decb36066c10709625118114a4dc10742b8a2fb0c810e732b521c17ad79d281b12509869043c22666fc52b1932f32953c2a2e4e7f296924385a1cf6b4d496ebba857f88e22cbf42e32e15f90e873f960a3cbd5f955da4df169cf1bd9ca2c2aba9c1456b12e2d1fb072cf9ef5f08a834d42588e9e0cb72a1abc7a95b827658948523148f09a11315b24bf3ceb8266237d1414e8d697a1a13eb4ad7d76757a97c852892efc17bb7c5a12fa78c6aecc071343fcce708f0ec6b387d07330d024801b24b248b91d46c2b7dc9d0be8cab1179e4ecb2ed828c08ba0fef55db6ace561752c7c8bf40c243f0da32a35f54fa00a46f30e04056e77ff492344495b46039c13254708478abd70a16f3ea25fc2e85de64bebd81e1d743887e7296b26e76554aa3451aaeedf580d31fd17c73a3cac351002dd7a969bf675ab5b112ed04fe12ebd50e32e2d0c1786bfbf66a9c6630976cffbbe31270329589b31e26ce52f11e165b0538f5e3bc54da53850540985121dd5f967dfeba26f7f65836b3ddb7041ca32998d6ad273a30c9e2cf7967a8f9f0c28639d81124c136e86b61d41a8dfcbf3b29b79a6e7ac7c3effd8275c2331b0c496fc4bbbe168c94dda174770f51c463b32a6a079f094ef460958709e212a79feca63b9ed650bdbf6e8570c9f00ce739739b8467a6deaa47d34daa6dd77434ab846ebc912291f8e55f6a2b41bce1e13273ff308623b842372ad8ea57024feecff74d84a402c244e1ebe74c7842b28048d340a6ca3bf06146c984bf912c50e5ccf127c5a0cf915b9a6228cca748d5734aab1f44c9de386e04bdcdbb25b8cc31ba5b5b438c1b710e3acc989b7b5313f5fbc559a31c49e3874bf7eadb2f710c23f850df0df03586e23f802c6facb2ca6ad2e302692d1e327c4d6ef2bae856fcf99948cd47d745d6805e79240fc63e4c3fe5ab4805c2ca3de4142a16716ae2a1cd82c977d7072fbc1f96da8cef400274f5b6a60ab52fdea0e887ac0aab63c6180a0947e8b343f86a8be0a0384ed29c586b3c251fbacaa87773c371aa793f82266f1f1ac4da01c120e8ce232e2581d53f1da130acf1ac62ae59ce868f11b7bca9b26276a3cc278f14a4ad7f97d01d641497f07242620035e73e606fa5c7faf4fdd40a2dc003844cc8092b56b8ea8b0bfab70d1fc8e074e181e54c7494cc1c0c42d627b9ec0f9510b5b852a6f20240da2905f2ecbfdbd7f4c7481851c072c1678199d4607407250e21370fba7a718d9de7616eaba5e9bcee3b17c54f61a8d3407d8dcbe300da0286dd99c6f3100597fd451fd57e56f03ab8174efc5a6f9e9c2c6ed3acd5672b2842fcc37dc7383d4fbdd3bfe3ddcea0cceaec10e9fa6f923fd853a6d3164c88a3e9f598eedfd2be792ada34ad22d0bf507b32ab55d37fb1a67b96493dc25ee7cbff69be6c2ee38e93cd7ee5aa48c25f487c98e4d8bbb593f7b4e03b5700f568bfb2ff3337600af62119810d758cd0bb5b30ce190542f6a1b2300ba47496bde14860f3a69ce5d06fb7f7dc2757a5b227ba52f71fdc790126b20f30a63b6bdc5a1316ea6734b69fe6790dfd854a16fa62235d52fcd32b81490480c8f8fd407153de9a39b933ff9e38c573f7ca7d25073e43257f6800946a1badee73a452866146b94e39c579ee0c18e1a8c3c838db37caa84af4e25794be35ce642f0f6b30b1e31babb6421b94e5daf1a0226aa8f68883750bca38cb589257ae5bd1cc10c2dbced653dd1ba1165a1c44fa433689d57f6996d66642f7d18acb057614637d6a7ab805270b911479d335fff2bb7bf475d811a1f9d38dd872a04e61459af1af221fd98ef49c2fcf65aaf5966cbaa6e161c6153750ab86ef321b7ecc39138a555e3024a3c5bcbeb94d91d93e0aab47c984517889cfd4b718476f1ff1ee66fb421c7fc3f8db4bb532fa9e82fbf11ce1d6d86d78ccb160a8fdb3d8579312c05ffbfdd311e147f2006c7b0baebd1918c97b3fb27199c5c8aa18d9b7893db357f1f83d289b8b1b2e9aceb97ef517a89570c41b76d6383b33863a0eba2815348eeb7214eaccdb6e03578949a6ff1ff76a21ec2b1c99d7e2f3cea3dc17b7427349f6db1d0dbd819642d9f335da2ff585bd3077b6bc88bd116b926b02bf3d5cb2880f199aaf81f064703d3617e722b85a85f9e1d46aa5602c75f7eb84187f526ed668415ba0f054aecd414500afeffc35057edf7dc2ecc46b15762a3ef7dacdfa038dbd3dea6a0f3cf98a56c1f08499966db0bd261d909fe661029228ff4854c453d90a287c1d77f37e30e5fbd602ed60c41144047bb84081c01460e89e8647ec3c73f2cc312d3bcbf4981908b9f961142035dcdca93e42bf510753632cbddeb8cd9d602920fae28d6c659ff9497f8109dabf97aa64e2ee722afb03cfd030f4584ed0ec907589fd12a2784cd9e5333612b9d9026c870e1a3e5ae6830a92bb7fe8e067625d8eeb24119c27ce3214dd2b3a3db71be25b50d2f10e436e5d41880e693a1fc6d90d65d6f6d6d570772ba0e6207ac0ea415557dcf546d7c1e44db596d759f13a93b78651267e819cd15f0a1f74d97f5ed9ef260c2ed788a9e7685e4bde012631bb3ca9309186c69c744b3cd501309d533ca78140657ff16be18d060abe09eb2b37de22c79b77758c755eef3b1030485ed24a2e174b7156b3864a37587862633353edfabcdcb18f7a0bee24f2f2831dd5b8e1788de742e3da24778632849e75941cf15cf40f7e0a44e54c6ac879f09711b1a1aabac74474acff094b5df8052cdc177e5dbe2a376df5a242dc32113a25a95a19424b5dcba02c15218845f662a5c6e58e68560c4ec7518ea94fd488a26ba714df18b0fcbba50175cb4280833c35f4447dd66c019bdcfced426920a3e9fe3b3dbf35a11a7d10d42a9f40d5650bfce5c51e30c5d04cd01168e36dbd00f9461c473d9f6944e5126da488917d597ba48c6c8770cc4ef8cabe84075de3f91e78ecee43e9baac23e1d94ba1a7ff5d104a2802cea7e5b092b6095314355080b7ebbf95dd4e4f3d93630994e4b14e017881a40fd2aeccd49cc6675376467c6df741d10640a265d252dbce71e6ac2f0680405bc012e0b57761a9a5dab9012c90455babb1ad914365020033343d913f2c530abf9ddf199e39082a707301f6ac1219493147dfbeef8e4e985684388ab86e852cf1ea77450e4ff5d4a8e61e929c763c4f827023c127a713a22a7e4c880892261294c81fb1961d524bae5ae54c5c6b32c3d059375c58970caf9cdd1e46c17f74c68ea0c7ac584382c9fac95dc5538f3e1e596cd3287f10b6cfdab4245356ad686ba39b3251a0f57cb3447281b3cbbb109786d7bd6a71da825728000c15c71e18d551ea541ad09171a458f4ec87c86a2dfa9b8d6a9b9d3c8864aa5718ab1caa71e28f772c3e64bdcf2044589f04361770d75b9325decda45d36bdcfb1b2148d8438fd1dbf8133eca8ef4009aebbbd5f93e37cf34153563578dd9b22d0b3cf268b608379d4652cbaea8e75922368a17f74a1ed09bbe6651f8fbbb0baba5a6f1e754cad1f429c8ba11dc8a434b93b8d4b8c6ad5d362f52c5123d009106c41173afbd06c83dd17c0a5b1589766e91501f92937c44662ca88ea81ff4aa796434451880eeb4eb6e5868ff4f251efb94057fb952e1097f3030a23e3aedf1c51a3cbb63504f3d", 0x1000}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:09:57 executing program 2: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:09:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x1c8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r2, 0x5, 0x9, [0x7, 0x8000000000000000, 0x401, 0x400, 0xca, 0x6, 0x80, 0x4, 0x6]}, &(0x7f0000000340)=0x1a) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xfe, 0x8e, &(0x7f0000000000)="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", &(0x7f0000000180)=""/142}, 0x28) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:09:58 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:09:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="4b3d563cd70576ecbeca5378b16fe73bf3442d98e8a09b62518aed5c2d8771c357b846b6ee119557fad656eb08ac995e4d8cbbf5bbe0018ef22e282fc091aca99571bac7dde9ec9b121b1053ba9a8fdd31f8686698c5821e63d00a9e2065a9b0be730ad1b74254b8868b3b1a3dca8b15a7f7c66ec68f373d8ca99f7badba26924ead082e079bb395eaad7ad8d0671f8b40e945e62be8b9622e44e462ca89f59303fdbc3219bf6362f475b4ebd522ddf5dadcee01485315f06b4b1b804f46a14eff56a7cece75c4620727f5ccec13a27575c6638f55e74e370ebb79f093ff7b111b34002510f22d2e877a32a26df9dc41a70aa6fd8e4e4bba4e7fa89c4e95240bfe832ac77cee1d63eb262db52cacbda5473f6cea9ffada7190cc5b0d5b32891ad46b8a57b8a8677db6f615aaea3e7a3f4337a7b76b99248434f9e145ec8409c85af32c51700223fd0b29a471bf657a4c708d240faa64726a38969b6b1746137d38cd4ff9ec6e5d22aa820e92a1a9ed732384d167201a3d6d80a7cb6b62fd6d49758cdb97e1b8a0d9963e9624394a72ad36469ce87b2deefe592203e859f106cfb4e9b0701e12922c2f31b714ffb12d3adf235038394185a639f3a787a583f9e274dd7c117ec23c7ac182f8a184edfb55873dcbd1ad05d2eb1168db4d9131133a77ec906502d12dc6fea2c6175dece4dd8a385d1a768268bba6b28a98fdc826f6bc4716ccac2658bacf1df16cad73a053af5eaf4d74af75f037f31a69a83beb06e062e3a15ba3f125754719c16aef266ea82127736701df2e8b75a4081fddfe2c82e76c13a884a493b99157cd84e94d13ea84e5fb9f99af8a439d70cfb0da3ac68ac7cafc15215030348b0e4cdbfe8106c16666379987d0aead98df3b19136c442b6a3abf79b5723844d792d418fc5bbbd531819677e3479307be6d57b6e5f4081ff00e7ad168c9011a6975bd83e8ce37c81c504836a030f5fd3acfd779a962ecadeaf5087a8efa0c32740ee4523198a1da3b4c43a0b5ffc82360fda55cab804a03906bd36c609abd998c40acb5b1bc5423bdd3bc4dbb335c0ae30591a15380e7da476a76dad9e45d315a9d60bbdbbe00d2ab485f1fc116c406eb9d40b34fc19fa9572d7ec238117d172dbf077d4ab061cd44f23989aada00e1ef37adc0e60042a2a8463766952f66a9bd171102fb1ea53728e5fa62f43ef212622ea663a8f54c96144c62e9bcfc9ab070529c7b6d808105f6b169f6f092e1fc8f986a7e641856724cbd1ee0000487a5c242c97a9452af7cd321a5599e39a631261d7f5821c4b6ae0282f2989be152bcac302dbc303165964300b8de44d20198b5d58c049766070517153cb793c3db780bcc7181671c86707f521523b7fc7ab3fee070e1c07b0e2db5d32efc418f9606ba8436f0cf59b690a078e7005b5ff3df9d75999dbb80703ed42ef1cedfe7628ec2f80543ce8d5f0a2a7fa4b85f801d50d8e243e3b5bd33de4fbcc7215b3cd746fe8d222eafa449dd7528da83942423e5f37a50389184284e5da9f40ab670d9a3a8079599a4c38b7affc2bdb9ce51d519345615da28f1dbec4df59120bbaf0e0f04cedc1903fca4aa4661c0115fac348dcbdafbd8677460e4e9980d0ce816082816500359a5d2c17799bf251fbf2f8ffd49ca61a678c1d597e8e7ca2afd32f23889f4a169a535af3b94fd218c482524f02d7be107f7f7bb2c613f16da2f74068da602b08b869e286e6c4fafc4884270735747e684edab47f1aa3fcbca95f0405246d2f86d3d7b503faf4b4b1143d5975574123b1ce4d778a79f1a4a4fc95c795d545af8826cf3498d8e1d6592fed5e59d5e9a72aea5ba3a4aff33f932b26bb2925ebd35757c56976e2a925d7d21235f3843a4e9cdaef9a8d94948953b1d52beaf259f3001f5e5a8e62219f7af3e127bbca83aa8e81a8c9dd2e4769d969e2b8230b79511f09929c48635ad1453377fb5faad45812bdba3a5fcd7c524f823dcc4614dd2574589c941a5d72321b7e7e8f7f760c311e95ae77569bed125bb4e26d94d145bcd5dc51df8fe7ce349bf69ef4554672f574a5ef2ccc387f6e7de89e3d69543caf74e8779fcb2decb36066c10709625118114a4dc10742b8a2fb0c810e732b521c17ad79d281b12509869043c22666fc52b1932f32953c2a2e4e7f296924385a1cf6b4d496ebba857f88e22cbf42e32e15f90e873f960a3cbd5f955da4df169cf1bd9ca2c2aba9c1456b12e2d1fb072cf9ef5f08a834d42588e9e0cb72a1abc7a95b827658948523148f09a11315b24bf3ceb8266237d1414e8d697a1a13eb4ad7d76757a97c852892efc17bb7c5a12fa78c6aecc071343fcce708f0ec6b387d07330d024801b24b248b91d46c2b7dc9d0be8cab1179e4ecb2ed828c08ba0fef55db6ace561752c7c8bf40c243f0da32a35f54fa00a46f30e04056e77ff492344495b46039c13254708478abd70a16f3ea25fc2e85de64bebd81e1d743887e7296b26e76554aa3451aaeedf580d31fd17c73a3cac351002dd7a969bf675ab5b112ed04fe12ebd50e32e2d0c1786bfbf66a9c6630976cffbbe31270329589b31e26ce52f11e165b0538f5e3bc54da53850540985121dd5f967dfeba26f7f65836b3ddb7041ca32998d6ad273a30c9e2cf7967a8f9f0c28639d81124c136e86b61d41a8dfcbf3b29b79a6e7ac7c3effd8275c2331b0c496fc4bbbe168c94dda174770f51c463b32a6a079f094ef460958709e212a79feca63b9ed650bdbf6e8570c9f00ce739739b8467a6deaa47d34daa6dd77434ab846ebc912291f8e55f6a2b41bce1e13273ff308623b842372ad8ea57024feecff74d84a402c244e1ebe74c7842b28048d340a6ca3bf06146c984bf912c50e5ccf127c5a0cf915b9a6228cca748d5734aab1f44c9de386e04bdcdbb25b8cc31ba5b5b438c1b710e3acc989b7b5313f5fbc559a31c49e3874bf7eadb2f710c23f850df0df03586e23f802c6facb2ca6ad2e302692d1e327c4d6ef2bae856fcf99948cd47d745d6805e79240fc63e4c3fe5ab4805c2ca3de4142a16716ae2a1cd82c977d7072fbc1f96da8cef400274f5b6a60ab52fdea0e887ac0aab63c6180a0947e8b343f86a8be0a0384ed29c586b3c251fbacaa87773c371aa793f82266f1f1ac4da01c120e8ce232e2581d53f1da130acf1ac62ae59ce868f11b7bca9b26276a3cc278f14a4ad7f97d01d641497f07242620035e73e606fa5c7faf4fdd40a2dc003844cc8092b56b8ea8b0bfab70d1fc8e074e181e54c7494cc1c0c42d627b9ec0f9510b5b852a6f20240da2905f2ecbfdbd7f4c7481851c072c1678199d4607407250e21370fba7a718d9de7616eaba5e9bcee3b17c54f61a8d3407d8dcbe300da0286dd99c6f3100597fd451fd57e56f03ab8174efc5a6f9e9c2c6ed3acd5672b2842fcc37dc7383d4fbdd3bfe3ddcea0cceaec10e9fa6f923fd853a6d3164c88a3e9f598eedfd2be792ada34ad22d0bf507b32ab55d37fb1a67b96493dc25ee7cbff69be6c2ee38e93cd7ee5aa48c25f487c98e4d8bbb593f7b4e03b5700f568bfb2ff3337600af62119810d758cd0bb5b30ce190542f6a1b2300ba47496bde14860f3a69ce5d06fb7f7dc2757a5b227ba52f71fdc790126b20f30a63b6bdc5a1316ea6734b69fe6790dfd854a16fa62235d52fcd32b81490480c8f8fd407153de9a39b933ff9e38c573f7ca7d25073e43257f6800946a1badee73a452866146b94e39c579ee0c18e1a8c3c838db37caa84af4e25794be35ce642f0f6b30b1e31babb6421b94e5daf1a0226aa8f68883750bca38cb589257ae5bd1cc10c2dbced653dd1ba1165a1c44fa433689d57f6996d66642f7d18acb057614637d6a7ab805270b911479d335fff2bb7bf475d811a1f9d38dd872a04e61459af1af221fd98ef49c2fcf65aaf5966cbaa6e161c6153750ab86ef321b7ecc39138a555e3024a3c5bcbeb94d91d93e0aab47c984517889cfd4b718476f1ff1ee66fb421c7fc3f8db4bb532fa9e82fbf11ce1d6d86d78ccb160a8fdb3d8579312c05ffbfdd311e147f2006c7b0baebd1918c97b3fb27199c5c8aa18d9b7893db357f1f83d289b8b1b2e9aceb97ef517a89570c41b76d6383b33863a0eba2815348eeb7214eaccdb6e03578949a6ff1ff76a21ec2b1c99d7e2f3cea3dc17b7427349f6db1d0dbd819642d9f335da2ff585bd3077b6bc88bd116b926b02bf3d5cb2880f199aaf81f064703d3617e722b85a85f9e1d46aa5602c75f7eb84187f526ed668415ba0f054aecd414500afeffc35057edf7dc2ecc46b15762a3ef7dacdfa038dbd3dea6a0f3cf98a56c1f08499966db0bd261d909fe661029228ff4854c453d90a287c1d77f37e30e5fbd602ed60c41144047bb84081c01460e89e8647ec3c73f2cc312d3bcbf4981908b9f961142035dcdca93e42bf510753632cbddeb8cd9d602920fae28d6c659ff9497f8109dabf97aa64e2ee722afb03cfd030f4584ed0ec907589fd12a2784cd9e5333612b9d9026c870e1a3e5ae6830a92bb7fe8e067625d8eeb24119c27ce3214dd2b3a3db71be25b50d2f10e436e5d41880e693a1fc6d90d65d6f6d6d570772ba0e6207ac0ea415557dcf546d7c1e44db596d759f13a93b78651267e819cd15f0a1f74d97f5ed9ef260c2ed788a9e7685e4bde012631bb3ca9309186c69c744b3cd501309d533ca78140657ff16be18d060abe09eb2b37de22c79b77758c755eef3b1030485ed24a2e174b7156b3864a37587862633353edfabcdcb18f7a0bee24f2f2831dd5b8e1788de742e3da24778632849e75941cf15cf40f7e0a44e54c6ac879f09711b1a1aabac74474acff094b5df8052cdc177e5dbe2a376df5a242dc32113a25a95a19424b5dcba02c15218845f662a5c6e58e68560c4ec7518ea94fd488a26ba714df18b0fcbba50175cb4280833c35f4447dd66c019bdcfced426920a3e9fe3b3dbf35a11a7d10d42a9f40d5650bfce5c51e30c5d04cd01168e36dbd00f9461c473d9f6944e5126da488917d597ba48c6c8770cc4ef8cabe84075de3f91e78ecee43e9baac23e1d94ba1a7ff5d104a2802cea7e5b092b6095314355080b7ebbf95dd4e4f3d93630994e4b14e017881a40fd2aeccd49cc6675376467c6df741d10640a265d252dbce71e6ac2f0680405bc012e0b57761a9a5dab9012c90455babb1ad914365020033343d913f2c530abf9ddf199e39082a707301f6ac1219493147dfbeef8e4e985684388ab86e852cf1ea77450e4ff5d4a8e61e929c763c4f827023c127a713a22a7e4c880892261294c81fb1961d524bae5ae54c5c6b32c3d059375c58970caf9cdd1e46c17f74c68ea0c7ac584382c9fac95dc5538f3e1e596cd3287f10b6cfdab4245356ad686ba39b3251a0f57cb3447281b3cbbb109786d7bd6a71da825728000c15c71e18d551ea541ad09171a458f4ec87c86a2dfa9b8d6a9b9d3c8864aa5718ab1caa71e28f772c3e64bdcf2044589f04361770d75b9325decda45d36bdcfb1b2148d8438fd1dbf8133eca8ef4009aebbbd5f93e37cf34153563578dd9b22d0b3cf268b608379d4652cbaea8e75922368a17f74a1ed09bbe6651f8fbbb0baba5a6f1e754cad1f429c8ba11dc8a434b93b8d4b8c6ad5d362f52c5123d009106c41173afbd06c83dd17c0a5b1589766e91501f92937c44662ca88ea81ff4aa796434451880eeb4eb6e5868ff4f251efb94057fb952e1097f3030a23e3aedf1c51a3cbb63504f3d", 0x1000}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:09:58 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xd, 0x3}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x4}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RSTAT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r5, 0x2007fff) sendfile(r0, r5, &(0x7f0000d83ff8), 0x800000000024) 15:09:58 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x1, 0x208, [0x0, 0x20000880, 0x200008b0, 0x20000a58], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'ifb0\x00', 'bcsf0\x00', 'gre0\x00', 'rose0\x00', @empty, [], @dev, [0x0, 0x0, 0x0, 0xffffffffffffffff], 0xd0, 0x100, 0x178, [@m802_3={'802_3\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bde61f96ad140bf31c52adfce88ba14aaa5708b1e3b94b8fe5821cafe5683d4cae815faf77d30635b4d7e26ce8a6a975654dcf2bc4aaada7a86664db3dbde2bf"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x280) 15:09:58 executing program 2: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:09:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x19) [ 1225.242434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1225.298491] x_tables: eb_tables: redirect target: used from hooks FORWARD, but only usable from PREROUTING/BROUTING 15:09:58 executing program 2: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1225.482898] x_tables: eb_tables: redirect target: used from hooks FORWARD, but only usable from PREROUTING/BROUTING 15:09:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:09:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x806, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x80, 0x80000001, @value=0x3}) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000040)) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:09:58 executing program 0: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x0) 15:09:59 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:09:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="4b3d563cd70576ecbeca5378b16fe73bf3442d98e8a09b62518aed5c2d8771c357b846b6ee119557fad656eb08ac995e4d8cbbf5bbe0018ef22e282fc091aca99571bac7dde9ec9b121b1053ba9a8fdd31f8686698c5821e63d00a9e2065a9b0be730ad1b74254b8868b3b1a3dca8b15a7f7c66ec68f373d8ca99f7badba26924ead082e079bb395eaad7ad8d0671f8b40e945e62be8b9622e44e462ca89f59303fdbc3219bf6362f475b4ebd522ddf5dadcee01485315f06b4b1b804f46a14eff56a7cece75c4620727f5ccec13a27575c6638f55e74e370ebb79f093ff7b111b34002510f22d2e877a32a26df9dc41a70aa6fd8e4e4bba4e7fa89c4e95240bfe832ac77cee1d63eb262db52cacbda5473f6cea9ffada7190cc5b0d5b32891ad46b8a57b8a8677db6f615aaea3e7a3f4337a7b76b99248434f9e145ec8409c85af32c51700223fd0b29a471bf657a4c708d240faa64726a38969b6b1746137d38cd4ff9ec6e5d22aa820e92a1a9ed732384d167201a3d6d80a7cb6b62fd6d49758cdb97e1b8a0d9963e9624394a72ad36469ce87b2deefe592203e859f106cfb4e9b0701e12922c2f31b714ffb12d3adf235038394185a639f3a787a583f9e274dd7c117ec23c7ac182f8a184edfb55873dcbd1ad05d2eb1168db4d9131133a77ec906502d12dc6fea2c6175dece4dd8a385d1a768268bba6b28a98fdc826f6bc4716ccac2658bacf1df16cad73a053af5eaf4d74af75f037f31a69a83beb06e062e3a15ba3f125754719c16aef266ea82127736701df2e8b75a4081fddfe2c82e76c13a884a493b99157cd84e94d13ea84e5fb9f99af8a439d70cfb0da3ac68ac7cafc15215030348b0e4cdbfe8106c16666379987d0aead98df3b19136c442b6a3abf79b5723844d792d418fc5bbbd531819677e3479307be6d57b6e5f4081ff00e7ad168c9011a6975bd83e8ce37c81c504836a030f5fd3acfd779a962ecadeaf5087a8efa0c32740ee4523198a1da3b4c43a0b5ffc82360fda55cab804a03906bd36c609abd998c40acb5b1bc5423bdd3bc4dbb335c0ae30591a15380e7da476a76dad9e45d315a9d60bbdbbe00d2ab485f1fc116c406eb9d40b34fc19fa9572d7ec238117d172dbf077d4ab061cd44f23989aada00e1ef37adc0e60042a2a8463766952f66a9bd171102fb1ea53728e5fa62f43ef212622ea663a8f54c96144c62e9bcfc9ab070529c7b6d808105f6b169f6f092e1fc8f986a7e641856724cbd1ee0000487a5c242c97a9452af7cd321a5599e39a631261d7f5821c4b6ae0282f2989be152bcac302dbc303165964300b8de44d20198b5d58c049766070517153cb793c3db780bcc7181671c86707f521523b7fc7ab3fee070e1c07b0e2db5d32efc418f9606ba8436f0cf59b690a078e7005b5ff3df9d75999dbb80703ed42ef1cedfe7628ec2f80543ce8d5f0a2a7fa4b85f801d50d8e243e3b5bd33de4fbcc7215b3cd746fe8d222eafa449dd7528da83942423e5f37a50389184284e5da9f40ab670d9a3a8079599a4c38b7affc2bdb9ce51d519345615da28f1dbec4df59120bbaf0e0f04cedc1903fca4aa4661c0115fac348dcbdafbd8677460e4e9980d0ce816082816500359a5d2c17799bf251fbf2f8ffd49ca61a678c1d597e8e7ca2afd32f23889f4a169a535af3b94fd218c482524f02d7be107f7f7bb2c613f16da2f74068da602b08b869e286e6c4fafc4884270735747e684edab47f1aa3fcbca95f0405246d2f86d3d7b503faf4b4b1143d5975574123b1ce4d778a79f1a4a4fc95c795d545af8826cf3498d8e1d6592fed5e59d5e9a72aea5ba3a4aff33f932b26bb2925ebd35757c56976e2a925d7d21235f3843a4e9cdaef9a8d94948953b1d52beaf259f3001f5e5a8e62219f7af3e127bbca83aa8e81a8c9dd2e4769d969e2b8230b79511f09929c48635ad1453377fb5faad45812bdba3a5fcd7c524f823dcc4614dd2574589c941a5d72321b7e7e8f7f760c311e95ae77569bed125bb4e26d94d145bcd5dc51df8fe7ce349bf69ef4554672f574a5ef2ccc387f6e7de89e3d69543caf74e8779fcb2decb36066c10709625118114a4dc10742b8a2fb0c810e732b521c17ad79d281b12509869043c22666fc52b1932f32953c2a2e4e7f296924385a1cf6b4d496ebba857f88e22cbf42e32e15f90e873f960a3cbd5f955da4df169cf1bd9ca2c2aba9c1456b12e2d1fb072cf9ef5f08a834d42588e9e0cb72a1abc7a95b827658948523148f09a11315b24bf3ceb8266237d1414e8d697a1a13eb4ad7d76757a97c852892efc17bb7c5a12fa78c6aecc071343fcce708f0ec6b387d07330d024801b24b248b91d46c2b7dc9d0be8cab1179e4ecb2ed828c08ba0fef55db6ace561752c7c8bf40c243f0da32a35f54fa00a46f30e04056e77ff492344495b46039c13254708478abd70a16f3ea25fc2e85de64bebd81e1d743887e7296b26e76554aa3451aaeedf580d31fd17c73a3cac351002dd7a969bf675ab5b112ed04fe12ebd50e32e2d0c1786bfbf66a9c6630976cffbbe31270329589b31e26ce52f11e165b0538f5e3bc54da53850540985121dd5f967dfeba26f7f65836b3ddb7041ca32998d6ad273a30c9e2cf7967a8f9f0c28639d81124c136e86b61d41a8dfcbf3b29b79a6e7ac7c3effd8275c2331b0c496fc4bbbe168c94dda174770f51c463b32a6a079f094ef460958709e212a79feca63b9ed650bdbf6e8570c9f00ce739739b8467a6deaa47d34daa6dd77434ab846ebc912291f8e55f6a2b41bce1e13273ff308623b842372ad8ea57024feecff74d84a402c244e1ebe74c7842b28048d340a6ca3bf06146c984bf912c50e5ccf127c5a0cf915b9a6228cca748d5734aab1f44c9de386e04bdcdbb25b8cc31ba5b5b438c1b710e3acc989b7b5313f5fbc559a31c49e3874bf7eadb2f710c23f850df0df03586e23f802c6facb2ca6ad2e302692d1e327c4d6ef2bae856fcf99948cd47d745d6805e79240fc63e4c3fe5ab4805c2ca3de4142a16716ae2a1cd82c977d7072fbc1f96da8cef400274f5b6a60ab52fdea0e887ac0aab63c6180a0947e8b343f86a8be0a0384ed29c586b3c251fbacaa87773c371aa793f82266f1f1ac4da01c120e8ce232e2581d53f1da130acf1ac62ae59ce868f11b7bca9b26276a3cc278f14a4ad7f97d01d641497f07242620035e73e606fa5c7faf4fdd40a2dc003844cc8092b56b8ea8b0bfab70d1fc8e074e181e54c7494cc1c0c42d627b9ec0f9510b5b852a6f20240da2905f2ecbfdbd7f4c7481851c072c1678199d4607407250e21370fba7a718d9de7616eaba5e9bcee3b17c54f61a8d3407d8dcbe300da0286dd99c6f3100597fd451fd57e56f03ab8174efc5a6f9e9c2c6ed3acd5672b2842fcc37dc7383d4fbdd3bfe3ddcea0cceaec10e9fa6f923fd853a6d3164c88a3e9f598eedfd2be792ada34ad22d0bf507b32ab55d37fb1a67b96493dc25ee7cbff69be6c2ee38e93cd7ee5aa48c25f487c98e4d8bbb593f7b4e03b5700f568bfb2ff3337600af62119810d758cd0bb5b30ce190542f6a1b2300ba47496bde14860f3a69ce5d06fb7f7dc2757a5b227ba52f71fdc790126b20f30a63b6bdc5a1316ea6734b69fe6790dfd854a16fa62235d52fcd32b81490480c8f8fd407153de9a39b933ff9e38c573f7ca7d25073e43257f6800946a1badee73a452866146b94e39c579ee0c18e1a8c3c838db37caa84af4e25794be35ce642f0f6b30b1e31babb6421b94e5daf1a0226aa8f68883750bca38cb589257ae5bd1cc10c2dbced653dd1ba1165a1c44fa433689d57f6996d66642f7d18acb057614637d6a7ab805270b911479d335fff2bb7bf475d811a1f9d38dd872a04e61459af1af221fd98ef49c2fcf65aaf5966cbaa6e161c6153750ab86ef321b7ecc39138a555e3024a3c5bcbeb94d91d93e0aab47c984517889cfd4b718476f1ff1ee66fb421c7fc3f8db4bb532fa9e82fbf11ce1d6d86d78ccb160a8fdb3d8579312c05ffbfdd311e147f2006c7b0baebd1918c97b3fb27199c5c8aa18d9b7893db357f1f83d289b8b1b2e9aceb97ef517a89570c41b76d6383b33863a0eba2815348eeb7214eaccdb6e03578949a6ff1ff76a21ec2b1c99d7e2f3cea3dc17b7427349f6db1d0dbd819642d9f335da2ff585bd3077b6bc88bd116b926b02bf3d5cb2880f199aaf81f064703d3617e722b85a85f9e1d46aa5602c75f7eb84187f526ed668415ba0f054aecd414500afeffc35057edf7dc2ecc46b15762a3ef7dacdfa038dbd3dea6a0f3cf98a56c1f08499966db0bd261d909fe661029228ff4854c453d90a287c1d77f37e30e5fbd602ed60c41144047bb84081c01460e89e8647ec3c73f2cc312d3bcbf4981908b9f961142035dcdca93e42bf510753632cbddeb8cd9d602920fae28d6c659ff9497f8109dabf97aa64e2ee722afb03cfd030f4584ed0ec907589fd12a2784cd9e5333612b9d9026c870e1a3e5ae6830a92bb7fe8e067625d8eeb24119c27ce3214dd2b3a3db71be25b50d2f10e436e5d41880e693a1fc6d90d65d6f6d6d570772ba0e6207ac0ea415557dcf546d7c1e44db596d759f13a93b78651267e819cd15f0a1f74d97f5ed9ef260c2ed788a9e7685e4bde012631bb3ca9309186c69c744b3cd501309d533ca78140657ff16be18d060abe09eb2b37de22c79b77758c755eef3b1030485ed24a2e174b7156b3864a37587862633353edfabcdcb18f7a0bee24f2f2831dd5b8e1788de742e3da24778632849e75941cf15cf40f7e0a44e54c6ac879f09711b1a1aabac74474acff094b5df8052cdc177e5dbe2a376df5a242dc32113a25a95a19424b5dcba02c15218845f662a5c6e58e68560c4ec7518ea94fd488a26ba714df18b0fcbba50175cb4280833c35f4447dd66c019bdcfced426920a3e9fe3b3dbf35a11a7d10d42a9f40d5650bfce5c51e30c5d04cd01168e36dbd00f9461c473d9f6944e5126da488917d597ba48c6c8770cc4ef8cabe84075de3f91e78ecee43e9baac23e1d94ba1a7ff5d104a2802cea7e5b092b6095314355080b7ebbf95dd4e4f3d93630994e4b14e017881a40fd2aeccd49cc6675376467c6df741d10640a265d252dbce71e6ac2f0680405bc012e0b57761a9a5dab9012c90455babb1ad914365020033343d913f2c530abf9ddf199e39082a707301f6ac1219493147dfbeef8e4e985684388ab86e852cf1ea77450e4ff5d4a8e61e929c763c4f827023c127a713a22a7e4c880892261294c81fb1961d524bae5ae54c5c6b32c3d059375c58970caf9cdd1e46c17f74c68ea0c7ac584382c9fac95dc5538f3e1e596cd3287f10b6cfdab4245356ad686ba39b3251a0f57cb3447281b3cbbb109786d7bd6a71da825728000c15c71e18d551ea541ad09171a458f4ec87c86a2dfa9b8d6a9b9d3c8864aa5718ab1caa71e28f772c3e64bdcf2044589f04361770d75b9325decda45d36bdcfb1b2148d8438fd1dbf8133eca8ef4009aebbbd5f93e37cf34153563578dd9b22d0b3cf268b608379d4652cbaea8e75922368a17f74a1ed09bbe6651f8fbbb0baba5a6f1e754cad1f429c8ba11dc8a434b93b8d4b8c6ad5d362f52c5123d009106c41173afbd06c83dd17c0a5b1589766e91501f92937c44662ca88ea81ff4aa796434451880eeb4eb6e5868ff4f251efb94057fb952e1097f3030a23e3aedf1c51a3cbb63504f3d", 0x1000}, {0x0}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:09:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x8) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="d63b810a965c7d874bc783f4d2a93b65e41de73e81c2174b549ed0cb6ae9444afa20c9f3855d1cb85c36ddb43299f469df07da86c6a0affe23cbf578f972054452f60d4ba16d72abc227132726d6175dfc", 0x51}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000200)="a7ce2f487667c49bd41bfb520640efd4ae620c50efdb8ac1441ead0789cd1fadd340e5f299f3772ff7ca06d786a2e7d0f6655c6890338b3bf621ec67bcb3c2a2b1ff6caded40fb1e55373fd222d0e4665aeea93569268196fb73b75715c1433d1a755ba12b3c3f89ebe0f254cc9a8c3e19a28c960f086dae85a418a584c50ea7f43f13e3eb282b3236d766a2b20d1b01509783e7a196b2a4627959cce8d6383f78598b89e15932aad80213975b03a98b39343e48be8b355756fd6db5c7f54631204bdc43bc934755c6d1f2847c1554", 0xcf}], 0x3, 0x1) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000008}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0x401, 0x8, 0x5}) 15:09:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={{0x0, 0x2, 0x4, 0x7, 0xfffffffffffffffe, 0x8dc}, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:09:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RSTAT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r3, 0x2007fff) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r6 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000080)='fuse\x00', 0x4080, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 15:09:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000004000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)) 15:09:59 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:09:59 executing program 3: personality(0xc8d64f0a52c4539f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @local}, 0x56) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/210, 0xd2}], 0x6, &(0x7f0000000400)=""/17, 0x11, 0x743}, 0x3f}, {{&(0x7f0000000440)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000640)=""/156, 0x9c}], 0x3, &(0x7f0000000740)=""/89, 0x59, 0xc89d}, 0xa4}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000009c0)=""/229, 0xe5}], 0x3, &(0x7f0000000b00)=""/117, 0x75, 0x51cfdc38}, 0x2}, {{&(0x7f0000000b80)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/232, 0xe8}], 0x1, &(0x7f0000000d40)=""/164, 0xa4, 0x9}, 0x8}, {{&(0x7f0000000e00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f0000000f40)=""/130, 0x82}, {&(0x7f0000001000)=""/255, 0xff}, {&(0x7f0000001100)=""/15, 0xf}, {&(0x7f0000001140)=""/54, 0x36}], 0x5, &(0x7f0000001200)=""/217, 0xd9, 0x8001}, 0xb38}, {{&(0x7f0000001300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002440)=""/237, 0xed}], 0x1, &(0x7f0000002580)=""/2, 0x2, 0x9}, 0x94}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000025c0)=""/235, 0xeb}, {&(0x7f00000026c0)=""/188, 0xbc}], 0x2, &(0x7f00000027c0)=""/77, 0x4d, 0x8}, 0x1f}, {{&(0x7f0000002840)=@generic, 0x80, &(0x7f0000003980)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/140, 0x8c}], 0x2, &(0x7f00000039c0)=""/162, 0xa2, 0x6}, 0x3}, {{&(0x7f0000003a80)=@ipx, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003b00)=""/37, 0x25}, {&(0x7f0000003b40)=""/160, 0xa0}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/186, 0xba}, {&(0x7f0000003d40)=""/218, 0xda}, {&(0x7f0000003e40)=""/179, 0xb3}, {&(0x7f0000003f00)=""/39, 0x27}, {&(0x7f0000003f40)=""/32, 0x20}], 0x8, &(0x7f0000004000)=""/172, 0xac, 0x8000}, 0x800}], 0xa, 0x0, &(0x7f0000004340)={0x0, 0x1c9c380}) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) prctl$PR_SVE_SET_VL(0x32, 0x18d66) [ 1226.696802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:10:00 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RSTAT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) socket$inet6_sctp(0xa, 0x1, 0x84) ftruncate(r3, 0x2007fff) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x1, 0x0, 0xffff000000000}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x53, 0x101000) 15:10:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x0, 0x3f09531e, 0x6, 0x3, 0x40}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800004010005fba000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RSTAT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r3, 0x2007fff) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) socket$inet_udp(0x2, 0x2, 0x0) 15:10:00 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000000, 0x204000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) fanotify_mark(r2, 0x20, 0x20, r3, &(0x7f00000000c0)='./bus\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010030000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RSTAT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r5, 0x2007fff) sendfile(r0, r5, &(0x7f0000d83ff8), 0x800000000024) 15:10:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:01 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) fsetxattr$security_smack_transmute(r2, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) 15:10:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="4b3d563cd70576ecbeca5378b16fe73bf3442d98e8a09b62518aed5c2d8771c357b846b6ee119557fad656eb08ac995e4d8cbbf5bbe0018ef22e282fc091aca99571bac7dde9ec9b121b1053ba9a8fdd31f8686698c5821e63d00a9e2065a9b0be730ad1b74254b8868b3b1a3dca8b15a7f7c66ec68f373d8ca99f7badba26924ead082e079bb395eaad7ad8d0671f8b40e945e62be8b9622e44e462ca89f59303fdbc3219bf6362f475b4ebd522ddf5dadcee01485315f06b4b1b804f46a14eff56a7cece75c4620727f5ccec13a27575c6638f55e74e370ebb79f093ff7b111b34002510f22d2e877a32a26df9dc41a70aa6fd8e4e4bba4e7fa89c4e95240bfe832ac77cee1d63eb262db52cacbda5473f6cea9ffada7190cc5b0d5b32891ad46b8a57b8a8677db6f615aaea3e7a3f4337a7b76b99248434f9e145ec8409c85af32c51700223fd0b29a471bf657a4c708d240faa64726a38969b6b1746137d38cd4ff9ec6e5d22aa820e92a1a9ed732384d167201a3d6d80a7cb6b62fd6d49758cdb97e1b8a0d9963e9624394a72ad36469ce87b2deefe592203e859f106cfb4e9b0701e12922c2f31b714ffb12d3adf235038394185a639f3a787a583f9e274dd7c117ec23c7ac182f8a184edfb55873dcbd1ad05d2eb1168db4d9131133a77ec906502d12dc6fea2c6175dece4dd8a385d1a768268bba6b28a98fdc826f6bc4716ccac2658bacf1df16cad73a053af5eaf4d74af75f037f31a69a83beb06e062e3a15ba3f125754719c16aef266ea82127736701df2e8b75a4081fddfe2c82e76c13a884a493b99157cd84e94d13ea84e5fb9f99af8a439d70cfb0da3ac68ac7cafc15215030348b0e4cdbfe8106c16666379987d0aead98df3b19136c442b6a3abf79b5723844d792d418fc5bbbd531819677e3479307be6d57b6e5f4081ff00e7ad168c9011a6975bd83e8ce37c81c504836a030f5fd3acfd779a962ecadeaf5087a8efa0c32740ee4523198a1da3b4c43a0b5ffc82360fda55cab804a03906bd36c609abd998c40acb5b1bc5423bdd3bc4dbb335c0ae30591a15380e7da476a76dad9e45d315a9d60bbdbbe00d2ab485f1fc116c406eb9d40b34fc19fa9572d7ec238117d172dbf077d4ab061cd44f23989aada00e1ef37adc0e60042a2a8463766952f66a9bd171102fb1ea53728e5fa62f43ef212622ea663a8f54c96144c62e9bcfc9ab070529c7b6d808105f6b169f6f092e1fc8f986a7e641856724cbd1ee0000487a5c242c97a9452af7cd321a5599e39a631261d7f5821c4b6ae0282f2989be152bcac302dbc303165964300b8de44d20198b5d58c049766070517153cb793c3db780bcc7181671c86707f521523b7fc7ab3fee070e1c07b0e2db5d32efc418f9606ba8436f0cf59b690a078e7005b5ff3df9d75999dbb80703ed42ef1cedfe7628ec2f80543ce8d5f0a2a7fa4b85f801d50d8e243e3b5bd33de4fbcc7215b3cd746fe8d222eafa449dd7528da83942423e5f37a50389184284e5da9f40ab670d9a3a8079599a4c38b7affc2bdb9ce51d519345615da28f1dbec4df59120bbaf0e0f04cedc1903fca4aa4661c0115fac348dcbdafbd8677460e4e9980d0ce816082816500359a5d2c17799bf251fbf2f8ffd49ca61a678c1d597e8e7ca2afd32f23889f4a169a535af3b94fd218c482524f02d7be107f7f7bb2c613f16da2f74068da602b08b869e286e6c4fafc4884270735747e684edab47f1aa3fcbca95f0405246d2f86d3d7b503faf4b4b1143d5975574123b1ce4d778a79f1a4a4fc95c795d545af8826cf3498d8e1d6592fed5e59d5e9a72aea5ba3a4aff33f932b26bb2925ebd35757c56976e2a925d7d21235f3843a4e9cdaef9a8d94948953b1d52beaf259f3001f5e5a8e62219f7af3e127bbca83aa8e81a8c9dd2e4769d969e2b8230b79511f09929c48635ad1453377fb5faad45812bdba3a5fcd7c524f823dcc4614dd2574589c941a5d72321b7e7e8f7f760c311e95ae77569bed125bb4e26d94d145bcd5dc51df8fe7ce349bf69ef4554672f574a5ef2ccc387f6e7de89e3d69543caf74e8779fcb2decb36066c10709625118114a4dc10742b8a2fb0c810e732b521c17ad79d281b12509869043c22666fc52b1932f32953c2a2e4e7f296924385a1cf6b4d496ebba857f88e22cbf42e32e15f90e873f960a3cbd5f955da4df169cf1bd9ca2c2aba9c1456b12e2d1fb072cf9ef5f08a834d42588e9e0cb72a1abc7a95b827658948523148f09a11315b24bf3ceb8266237d1414e8d697a1a13eb4ad7d76757a97c852892efc17bb7c5a12fa78c6aecc071343fcce708f0ec6b387d07330d024801b24b248b91d46c2b7dc9d0be8cab1179e4ecb2ed828c08ba0fef55db6ace561752c7c8bf40c243f0da32a35f54fa00a46f30e04056e77ff492344495b46039c13254708478abd70a16f3ea25fc2e85de64bebd81e1d743887e7296b26e76554aa3451aaeedf580d31fd17c73a3cac351002dd7a969bf675ab5b112ed04fe12ebd50e32e2d0c1786bfbf66a9c6630976cffbbe31270329589b31e26ce52f11e165b0538f5e3bc54da53850540985121dd5f967dfeba26f7f65836b3ddb7041ca32998d6ad273a30c9e2cf7967a8f9f0c28639d81124c136e86b61d41a8dfcbf3b29b79a6e7ac7c3effd8275c2331b0c496fc4bbbe168c94dda174770f51c463b32a6a079f094ef460958709e212a79feca63b9ed650bdbf6e8570c9f00ce739739b8467a6deaa47d34daa6dd77434ab846ebc912291f8e55f6a2b41bce1e13273ff308623b842372ad8ea57024feecff74d84a402c244e1ebe74c7842b28048d340a6ca3bf06146c984bf912c50e5ccf127c5a0cf915b9a6228cca748d5734aab1f44c9de386e04bdcdbb25b8cc31ba5b5b438c1b710e3acc989b7b5313f5fbc559a31c49e3874bf7eadb2f710c23f850df0df03586e23f802c6facb2ca6ad2e302692d1e327c4d6ef2bae856fcf99948cd47d745d6805e79240fc63e4c3fe5ab4805c2ca3de4142a16716ae2a1cd82c977d7072fbc1f96da8cef400274f5b6a60ab52fdea0e887ac0aab63c6180a0947e8b343f86a8be0a0384ed29c586b3c251fbacaa87773c371aa793f82266f1f1ac4da01c120e8ce232e2581d53f1da130acf1ac62ae59ce868f11b7bca9b26276a3cc278f14a4ad7f97d01d641497f07242620035e73e606fa5c7faf4fdd40a2dc003844cc8092b56b8ea8b0bfab70d1fc8e074e181e54c7494cc1c0c42d627b9ec0f9510b5b852a6f20240da2905f2ecbfdbd7f4c7481851c072c1678199d4607407250e21370fba7a718d9de7616eaba5e9bcee3b17c54f61a8d3407d8dcbe300da0286dd99c6f3100597fd451fd57e56f03ab8174efc5a6f9e9c2c6ed3acd5672b2842fcc37dc7383d4fbdd3bfe3ddcea0cceaec10e9fa6f923fd853a6d3164c88a3e9f598eedfd2be792ada34ad22d0bf507b32ab55d37fb1a67b96493dc25ee7cbff69be6c2ee38e93cd7ee5aa48c25f487c98e4d8bbb593f7b4e03b5700f568bfb2ff3337600af62119810d758cd0bb5b30ce190542f6a1b2300ba47496bde14860f3a69ce5d06fb7f7dc2757a5b227ba52f71fdc790126b20f30a63b6bdc5a1316ea6734b69fe6790dfd854a16fa62235d52fcd32b81490480c8f8fd407153de9a39b933ff9e38c573f7ca7d25073e43257f6800946a1badee73a452866146b94e39c579ee0c18e1a8c3c838db37caa84af4e25794be35ce642f0f6b30b1e31babb6421b94e5daf1a0226aa8f68883750bca38cb589257ae5bd1cc10c2dbced653dd1ba1165a1c44fa433689d57f6996d66642f7d18acb057614637d6a7ab805270b911479d335fff2bb7bf475d811a1f9d38dd872a04e61459af1af221fd98ef49c2fcf65aaf5966cbaa6e161c6153750ab86ef321b7ecc39138a555e3024a3c5bcbeb94d91d93e0aab47c984517889cfd4b718476f1ff1ee66fb421c7fc3f8db4bb532fa9e82fbf11ce1d6d86d78ccb160a8fdb3d8579312c05ffbfdd311e147f2006c7b0baebd1918c97b3fb27199c5c8aa18d9b7893db357f1f83d289b8b1b2e9aceb97ef517a89570c41b76d6383b33863a0eba2815348eeb7214eaccdb6e03578949a6ff1ff76a21ec2b1c99d7e2f3cea3dc17b7427349f6db1d0dbd819642d9f335da2ff585bd3077b6bc88bd116b926b02bf3d5cb2880f199aaf81f064703d3617e722b85a85f9e1d46aa5602c75f7eb84187f526ed668415ba0f054aecd414500afeffc35057edf7dc2ecc46b15762a3ef7dacdfa038dbd3dea6a0f3cf98a56c1f08499966db0bd261d909fe661029228ff4854c453d90a287c1d77f37e30e5fbd602ed60c41144047bb84081c01460e89e8647ec3c73f2cc312d3bcbf4981908b9f961142035dcdca93e42bf510753632cbddeb8cd9d602920fae28d6c659ff9497f8109dabf97aa64e2ee722afb03cfd030f4584ed0ec907589fd12a2784cd9e5333612b9d9026c870e1a3e5ae6830a92bb7fe8e067625d8eeb24119c27ce3214dd2b3a3db71be25b50d2f10e436e5d41880e693a1fc6d90d65d6f6d6d570772ba0e6207ac0ea415557dcf546d7c1e44db596d759f13a93b78651267e819cd15f0a1f74d97f5ed9ef260c2ed788a9e7685e4bde012631bb3ca9309186c69c744b3cd501309d533ca78140657ff16be18d060abe09eb2b37de22c79b77758c755eef3b1030485ed24a2e174b7156b3864a37587862633353edfabcdcb18f7a0bee24f2f2831dd5b8e1788de742e3da24778632849e75941cf15cf40f7e0a44e54c6ac879f09711b1a1aabac74474acff094b5df8052cdc177e5dbe2a376df5a242dc32113a25a95a19424b5dcba02c15218845f662a5c6e58e68560c4ec7518ea94fd488a26ba714df18b0fcbba50175cb4280833c35f4447dd66c019bdcfced426920a3e9fe3b3dbf35a11a7d10d42a9f40d5650bfce5c51e30c5d04cd01168e36dbd00f9461c473d9f6944e5126da488917d597ba48c6c8770cc4ef8cabe84075de3f91e78ecee43e9baac23e1d94ba1a7ff5d104a2802cea7e5b092b6095314355080b7ebbf95dd4e4f3d93630994e4b14e017881a40fd2aeccd49cc6675376467c6df741d10640a265d252dbce71e6ac2f0680405bc012e0b57761a9a5dab9012c90455babb1ad914365020033343d913f2c530abf9ddf199e39082a707301f6ac1219493147dfbeef8e4e985684388ab86e852cf1ea77450e4ff5d4a8e61e929c763c4f827023c127a713a22a7e4c880892261294c81fb1961d524bae5ae54c5c6b32c3d059375c58970caf9cdd1e46c17f74c68ea0c7ac584382c9fac95dc5538f3e1e596cd3287f10b6cfdab4245356ad686ba39b3251a0f57cb3447281b3cbbb109786d7bd6a71da825728000c15c71e18d551ea541ad09171a458f4ec87c86a2dfa9b8d6a9b9d3c8864aa5718ab1caa71e28f772c3e64bdcf2044589f04361770d75b9325decda45d36bdcfb1b2148d8438fd1dbf8133eca8ef4009aebbbd5f93e37cf34153563578dd9b22d0b3cf268b608379d4652cbaea8e75922368a17f74a1ed09bbe6651f8fbbb0baba5a6f1e754cad1f429c8ba11dc8a434b93b8d4b8c6ad5d362f52c5123d009106c41173afbd06c83dd17c0a5b1589766e91501f92937c44662ca88ea81ff4aa796434451880eeb4eb6e5868ff4f251efb94057fb952e1097f3030a23e3aedf1c51a3cbb63504f3d", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r2 = shmget(0x0, 0x4000, 0x7c000108, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000200)=""/116) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x9f0000, 0x4, 0x2, [], &(0x7f0000000080)={0x9b097f, 0x101, [], @string=&(0x7f0000000040)=0x4}}) r5 = socket$packet(0x11, 0x803, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RSTAT(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e904650c574e0c3635e19020d5f8fd2d8ba1fe50f087f46545a9370adb8c680595ba85d4899e12862e28084f8841511e1b443f7aaec7c7e"], 0x17) ftruncate(r4, 0x2007fff) sendfile(r0, r4, &(0x7f0000d83ff8), 0x800000000024) 15:10:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000000, 0x204000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) fanotify_mark(r2, 0x20, 0x20, r3, &(0x7f00000000c0)='./bus\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010030000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RSTAT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r5, 0x2007fff) sendfile(r0, r5, &(0x7f0000d83ff8), 0x800000000024) [ 1228.382898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:10:01 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:01 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000180)=""/129) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x5) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) epoll_create1(0x80000) listen(r2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r4 = getegid() write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x4, {0x4, 0x0, 0x10001, 0x1, 0x4, 0x2, {0x5, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x100000000, 0x37, 0x8, 0x0, 0x4, r3, r4, 0x10000, 0x2}}}, 0x90) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x400) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000040)=0x4) r7 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0xffffffffffff40fc, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x4012, 0x1, 0x4, 0x101, 0x193, 0x3, 0xcf, 0xffffffff00000000, 0x80, 0x80000001, 0x5, 0x41, 0x1b4, 0x3ff, 0x7, 0x9, 0x80, 0x684, 0x0, 0x3, 0xff, 0x6, 0x1, 0x7f, 0x400, 0xea2f, 0x4, 0x2, 0x4, 0x401, 0x0, 0x101, 0x2, @perf_config_ext={0x8000000000000, 0x8000}, 0x80, 0xe9, 0xfffffffffffffd1e, 0x4, 0x2e, 0x3, 0x6}, r7, 0xd, r6, 0x2) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0xffffffb7) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)="4bdd8185e83f3f8ec09090f8072b3e34e6caa8e290fb51236f7e104ec04be296c0da78f447a793cb9a11c4413012ff5255db255cef835c1ecc45703cfb9be207bda1ca9cd8db4c5bc15f", 0x4a}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:01 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xb6, 0x6, 0x0, 0x1000000000000000, 0xee, 0x4, 0x1f, {0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x1}}, 0x7, 0x2, 0x5, 0xe6, 0xfff}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)={r5, 0x3f3f, 0xf1, "930eac64c097d8e32be748bc8d8ac87689bb98aa03370ec00fad50862df1223d62c1a6ea78e3d419f0b24fe9c804d9c9aa967828a2bf8acfc2a0a04075889afa31d021d9c5ff967ab02b9cc94384e692ac554de68ff3d620dec53b7cf3b40de6653012cda7a8dd3dd1e470a93891c3a8840f99eaf03bea74363bbe67e1dbafdd612950d73f3f695c4bc6f8c6e10fce0e4ecd859bdc3c6c17e8df740b2d775123e3d7ab63ffa7d35156dcbd12a2cdf4dd50dd20873437e64deb993a8522b0093dd93cc4fce6d7c52ef852d2d68f473ab9d102f5c01d4b60d6872cc13dbe7bbad9653154af914649833754b20c7b86d51cac"}, 0xf9) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RSTAT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0x1, 0x2) write$P9_RRENAMEAT(r4, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) ftruncate(r6, 0x2007fff) sendfile(r0, r6, &(0x7f0000d83ff8), 0x800000000024) 15:10:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)='K', 0x1}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1229.106426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:10:02 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x1, 0x0, 0x3037, 0x1}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x1fc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffb, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000040)=""/229) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) ioctl$KDSETLED(r3, 0x4b32, 0x2) 15:10:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:02 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RSTAT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e0000007d020000004700030009b0cdb159cefb3e9046"], 0x17) ftruncate(r3, 0x2007fff) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x90800, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 15:10:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x646752904fa1484f) dup2(r0, r1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:02 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1229.850133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:10:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000500)=@add_del={0x2, &(0x7f00000004c0)='team_slave_0\x00', 0x3f}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000700)={0x51, 0x1f, 0x2, {0x6a, 0xef}, {0xffffffff, 0x9}, @ramp={0x6, 0x8, {0xfffffffffffffff8, 0x0, 0x100000001, 0x6}}}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000900)=""/149) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000480)) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000880)={@ipv4, r4}, 0x14) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x3, 0x1000, 0x3f3a, 0x3, 0x3, 0x6399, 0x8a, 0x3f, 0x771, 0x40, 0x7b30, 0x11a, 0xd2, 0x5, 0x1, 0x5}}) listen(r3, 0x4) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) flistxattr(r1, &(0x7f0000000180)=""/120, 0x78) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000400)) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000440)=0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000540)={0x1, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000240)={0x7fffffff, 0x7, 0x9, [], &(0x7f0000000200)=0x80000003}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000102000500130e0100547c0500"], 0x10) pselect6(0x40, &(0x7f0000000280)={0x6, 0x5, 0x435, 0x9, 0x2, 0x0, 0xffffffffffff8001, 0x3}, &(0x7f00000002c0)={0x0, 0x101, 0x6, 0x1, 0x5e, 0x5, 0x6, 0x1}, &(0x7f0000000300)={0x7fffffff, 0x3ff, 0x80, 0x1, 0x25be, 0xcf, 0x7, 0x80}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={0x8000}, 0x8}) prctl$PR_SET_ENDIAN(0x14, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 15:10:03 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)}, {0x0}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:03 executing program 5 (fault-call:5 fault-nth:0): syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$getenv(0x4201, r3, 0x0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xe28e) write$UHID_INPUT(r1, &(0x7f0000000600)={0x8, "45e8521e5ac0ec12e898464e93565a365e830ed1c7a22d7ab6bdd4fabe50508d55a81a2e8a39bc601adde5a163c022837b7b761bfedb2e8e232c2388c725f3490db7a2e58577ee5c51b3c3f6539eeb7a5334ddb1810d770c7e3ed45709096bb16bf5bd5983f2cac61e70c558ced14d45b12855843e75892dec8be2d2d0583b0b77c8a82e1ceea2daa725b55d6cbd3dfd17995feabba28db415dcf6b205e33b32666a9bb0676e042a1d2f0cdea31f423eae205e49efe2eb77df8be3871766ea7900fe32dc3d57c90912818de67a133c3678cd3bcd3ca8c1543a60cedc986533934898bbee28ca2e276424baa8fed176d18fa90966deb0b1564b2ce34c0e569156686e5d5c9354de34946d0cd7eb1b46c13ee4ee9de7cd604e8013f5bc5e5a9b1c9f0ab088a83d5366aed3e2ee595bd6ea79be34b444d3966f2043ac8c6f930898ea3f164a36fa2e34ce1301d2ead376e2249879e603327e782a716097373890856eca63d57b88e4fdaf650ecabd6671fce4f731b47a705a8679e01376573a7e3b86ad46abbc7d47acfdd1f13dc17a8da531f95ea3a2d445b89beb62d0d3c85e683a57224acbaef7594ea11a0f55927a4a3bd31820557f1389f02bd7001db7032d67d952942156849e85fb8d331e9b4e8b0fb3a294569723b2e04bc0053f069d1d90ab7713cf503f1c57e3eb0711d7aef11e7df012eb9580f51caa56dbf4da153265d7fecf37d1342d6b9f1c07663a49f5049d73436613d6efef55c837c26f0b4ee8dddc8f9e10f138f5255a32f6703dc9510ef45b6f4a93bda95584f8111bb390784801e1f9180f63b04ccb30b3de1903aaf07c8aec171acd49efd66fb09eb9bbcb77b6d4a6ef45671070bff3ed916fef097d9b2b77a8039bba8360cd1b0df3c7a4ff25bced37d074635f8277377abefab6fcc84586ea0c6ad82159b863b5c39a5cd3dee41b9030976c5ee2b66ebe43b19d1709a45742bb759723f92419c043e540f92c9c131f4631fab584a6d16bfdb556bc5e900aaa84712a68ce5d8b5aa6c653b8e2bf83f871cad796a82dc37c03b5b7ef9633b65c0454f84d96f1eb4c0a145cba2e5780f0c09e252889f9fb3619c452c321eeb2234814b94e26336d50b349f33779b09a2f1de9717d3c434afea6841b23aa18385f642c98c302f298290386620dfc1d269e72f7e264fd82c987ec433981aedf91aa6e5a909398d98745348272074c10deca4bae3b55c7c28af75ff79fba149ea1073ec57a062c1e4e88ae0ffab9064369ca0fb16e9c71b929f2f86c85d9b36a8f83a6f1b710ebf20b4012a93acc47ff40b41fdb7edaf3448cd998e833d6bae2169a085a08ccf519efff43b17b01ec852c3c3f6adba6edb78a8abc27dd72ada70c6da5bf120e2cdbe150a683639d671a0e525682431ba590d819ffd8bfb25c8493c9b10cb63a667bf521e53d0dd93a61e2aeb653f6135deb83659746e775da83d79379b0cafc29a7b1ff64819da458424537c2cd10468145cebcdcc3fd96ccd047bee2fe3432837c49e81c362f93377a69777cbc0f84cb13ca461b2203521fe8b3a7938ea23840f25ddfb9521a3850e6b0c6d8daf9ac9aff13d03a391fe54bb324b5ba3a04048c8931964647d47c49b3ae934033ebd439228f8b52ff1eee15768efc88b806f39483d4dc8370b587baac829ee7563d82419fd12444bd99b65734165a8268cb5449a3e34695635fe9aa61d15b0119cbc8c0e3ab5eee4d2f172c642d2fd8f9ee3b7409c47e516126032f9bdedce1091e948563569f4a5d802be2ee051abd2fa39dd409459bb45cac9e967714c4601d6b98f0d43a38d38255167e92a39d234e76ef3776abc64ad83f1411eda31dc574664ea3fa13afb5bb3efb3563eccaa8ec36dfa30d9f7582307cdf564fc9b989b994dc5f46f94d9dd326c5c7eed76dcc7509a576b660d55a78dc32aaa0d87345b9b72b323b2977a30c163c270309f9db91291fe00850c71a2e709995e6e2429e2bb84047d788d71a616b7f95811313bfd9f7eec7d14c9211b50d1a0c3b1401f46a1d04765e0ac11fbdf263674b57f1f878e9d65bc8e405a7b6c4e6c636ff6208bdbd9217d49b423e351e73874b6810217c20f7e70e6c596ee806365b952e3de147955ff49dfcbdead73ada6dbe1e85ce991a0a8791a469488429c82b22a325f63b0997e161e2dd83e7336680ad121d1f69ea61b1dfd47eea4e83419babcee207fef464a6c20068ee284becbc1e5a48dcd882922a844bb9321858a61643b5434cec08dc6f7b269f4d42e2d863ea197ac63ff3fa585568de8aaaad6026a99c8dc0c3886691f91bf81b42edb7b5813352240fb5e0d3e43b8df841b16f7e6c3accc7ecd7ab64aec42c8b17c53c69dda4c440d25d3bbc91bfa40e4af5a2fafef98fcfcf5dc201921867b515082d03bfe2a88f96a35ef7d33dc4143af5434a18122fcbf22484d56f981f3fc79b0f99ebebb99c0cc14a1b486be18a13b1682636dea8430d51591a769abe598cd71cacea92b6f6e83a2ae3c97a7f2ea05ff587ef5d06dc0c1c5ba958b6e826e23b81fc417c258dc190533bc4a77741e2d0ddc852091437ea31aa445c3ec2cb1a65b0a6c9daa7dbf53a696d6b4052ca152b7a879bfb3c52fb6d08f680239616b3443b941c5e7272ef89dde5b517dafcfae0795078ae799831d7e4cf928e3b60dfc12bf2c946bfdb36b3c0dc3dc066d15b57ffa4589ef9c68a5e58dae693f049363de6d26b36e3b8fdcb7bb80424475c07f71b8c33962d7ed4afbd81b5de5d77340fbc90d16bc604d974d378626772df9247b2cedb33286146c2d59a204ae1d12b761c465411edc1f511048c2537b24db06031f67b2d89e5554c0921a3208543f59246ea3a499e813bfb182b6609ab7367a7e358c1eb862113ecb188ed8b9a3c2003c640dee0567ec6e278248e5e5d9eeac802b8fba485e24b53a727d607e5ac6056582930622b9058e218b9b0b6adaad250c145d406bcee71552f076a292b2a05ef9839a620c9d56d05f4999ae96c1a407b6f5e374154ad7b866a3ec7929ac12f6060276296cee2829388c3a4107989e4215dd6c1ac4dbed09b5a82dda5af8e1c47131dffa17bd1491c88dd269fc608a1dc532987ae82cfc1d93bf7dea471893fdf5b06a5ad5c6c72cf0713e9936907259536652c5e2c8a8d3f05cd935b82b5cd49fd33012e5737172695b9d5ae4322829af5898120d9d998a076b35052c2ca13ecca0e9a406d5c4390099ae0482ed038978c44e4c9196ddffdfdaa43cebfc17c95aaa33a697a1cc471e484c6b29fd532634ede530eac48a34ab7e7bcad9d2439fa61eda4b44191a4966ef092b792f85dc87c8f08d9a638e1b1fc8f536f0f3981eefcabd88bfca4289b38f881e958cb89fa768896adfcd5f1c9af4c4f820f4e56c277b1db5dcf153dcec22fe63fd37d920d28b23176ceb9142cd7e50266dc93ef94c726b1688843f83909c6c32f70c4b997cfaf183cf4773e51120800bcb6794ddc707087fa2072589ebff00eb9a06c69b92fd3b51f458e43569f9aa125f448c9508800abec39633d4d1c428ef92cdd0cccee56d2fbf5e19670017b4cc5f77960696d60bf64d9d6a413587bd797aec9c12f79fda5c7bf420b0012be793dbf63dff4285eb0abcef2e2b3756012b6ae51082e6386d763cac1df9a0b04cfa883cb4b4eaaa2f040cfa15aa7d6dd1e6ffb4d846af0dd1a2d9996deadb7121018fa878ba3b3b6d9a65ae134fadd6298ffe376e16546bd965ead1091d92426841c2678cf4f3b5569ed2bc3b76aed3eaaac21fa16587a725560401b68e4f69837cbec34d3eb3659155c06269b2de6889baf11aee3b0da9c2d6e57f999274073f0ee5975b452d076cfe111617d33eaadf26dd7f7f5bc3ba8b1dba79cf9c3dc8782a97ad0cccae0926a8302c721cc1a43ab1aafd86a26274aacf9ab0afe98d0fae83d88492520e9edf74ecc3efe1e4d281a12ce9955b393f50e42339ab0e00b371f4921eea81d351fab023431121213fc52e245e5f9165a55bcdc355b32e88009bb946b7b9a066265b42e9be2e87453e1b213cb066641d72bc3c9196841d15b262fe03a0e3a4f798b1d888add26e748985a3fe9321f18e89880f2133ade31a5203058c05f0b8b098127117b7182755eebd824f158dc1d2e8e631535ce0d6f51a9eb47d05bf577461e2796f2e4b1d7d4894fc9c449fc4f7a3e32bb95e8d897bd39f7abe9939de05cb2282a128095d120c25d48bae2702ada6723ccb7032a2d7f3a3001bb2db96d6e160581f1e56bbbf3c2c656260ddef57d1108383d16f4f9b21daa87ae9e6c314dd9b3343da343075e9429580141e0f5cf0129ebc60b9011274ee4d18c1b76c6241bef2eb48c396fd01af0c0b58aa7d8f1ea3ef1907888b1adb521462a0f3581160641f64073a84e2a0f02e7727847885c3560aa103152eaefa0a7aa8c2b6fd3a197909d9fbe7c9a4c32bedeaafc3db44d1e53ddca95dd38a6c1d61aa3c827477698434ee4f6ed5492b7d7dea9c98d6e12e0e5f2d25a0c8e7a2e935cef3da787c01ecf33b78f76e34d7019e79555c6e654604cc12cd09269eae5a24a514fedb00653e58d9cc9e3b5fa5638da21caf8e39ef211d53ba459baf8a5de83c18932ac7f43544f8f6f6d176b29e751fcd28634e0c376469c59c961532a8eb28af9f8144f926e0f5ed944da814eccbb35914f46ce7b470a2ed6cb847a4e8283ceb593b06b9fe33b4d433e7bbe19bbbcc981d8b16fd5f797cbae4f16f653c36b918255876a5b6e40b9b245a3f558d0d01f94355dcbc300ec003e0b7948134c8a309799317654842de90f4f9f120ab37543e2df02c8afd9c438509e87d26c7cdfcc531973d3f921870fdca8f134f8a31bff9cdf829c327579a916de6e5d4d4c425a44cff0d4c70f80d4bbcf5f6f2c415e63557e7fb284e7e99bf961d20a7c5153f6d0a53f7172e8d79e53b8da0145248b7d7068d6488746f9c77bfb89d62baef9392d560265c5038c47bd19b8a5d1c9cfdc9ea7603ae359891e9cdebfc15771b7adf14acc53075a692a4e319eeba3f353fc87497353814d03f83670011478f9b64ed372abf9f6a5598ac4a8ec46d8963d663fe06d178f6c9a3f7770beb5ef1b77e982ee46c77557e87c366a42d9bdaae9796f77d2997394ab57adabf7c09fdf7e6f8bc683367ef83d9044466a0d726c4dcc118c6933a03f4a39792176edf7dc3f91b9a8031db8de8e5071c06fa1c32d316a732b0a5d11eab1ff988e55a7563fce2b351df588de29b5ed5265097d6035bebba1cd2c25347120b126a5be0016d6ce8ad2291f16422187a71793ae05c85bfb4f3484f35ec450b36c7c8c5e9cd760c854a5b8de6e8bd52aefb5cf8d40ad0957c2c79c68e24ab8d6e7534b93e7392db80c8325687f0a17101995802c2fda3e070d73d79f2da0c9873abdb71b848dee45a3ea3850c6380feacddbec6b574c521b8047b7119e0acce0fde47fa091255c57c698eb60b16bdefc09ad8fdbe89c41174970b7ce0a3ebbf4424697be6d677035e37184c7640882f2849c882d458d5a1510bfd294fe7d8826145cc8c1b890f53b0360c1f80816db8d8d78f5df90a9b3a5c1696a18d9144fa93da087b7c2652ebfb3bffb9666cb52a364453c83ad77265e636092e9b888cb29f4f8cbae1cc9eb665654d24380aa625b2f01c6b8c9b38c1ab069d5f2cef00659d7469f661a81a8274e69a757ec7f4b5f8f156ec15740f35f6433275511e4057f41cd232cdb8cf0639b92b7702ff1cb8c91b6b3bbc02998910e8a03", 0x1000}, 0x1006) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x334, 0xffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:03 executing program 0 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x7}, 0x28, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x309203) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r1, r4}) 15:10:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {&(0x7f0000000240)='K', 0x1}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1230.568367] binder: 28208:28209 ERROR: BC_REGISTER_LOOPER called without request 15:10:03 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1230.652946] binder: 28209 RLIMIT_NICE not set [ 1230.657742] binder: 28208:28209 ioctl c0306201 2000efd0 returned -11 [ 1230.809129] binder: 28213:28214 ERROR: BC_REGISTER_LOOPER called without request [ 1230.870392] binder: release 28213:28225 transaction 785 out, still active [ 1230.877920] binder: undelivered TRANSACTION_COMPLETE [ 1230.889220] FAULT_INJECTION: forcing a failure. [ 1230.889220] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.901025] CPU: 0 PID: 28225 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #95 [ 1230.908382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.917823] Call Trace: 15:10:03 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1230.920520] dump_stack+0x32d/0x480 [ 1230.924325] ? __should_failslab+0x278/0x2a0 [ 1230.928895] should_fail+0x11e5/0x13c0 [ 1230.932897] __should_failslab+0x278/0x2a0 [ 1230.937275] should_failslab+0x29/0x70 [ 1230.941279] __kmalloc+0xcf/0x4d0 [ 1230.944842] ? binder_get_thread+0x46d/0x1210 [ 1230.949490] binder_get_thread+0x46d/0x1210 [ 1230.953917] ? binder_poll+0xbd0/0xbd0 [ 1230.957926] binder_ioctl+0x629/0x3040 [ 1230.961941] ? do_vfs_ioctl+0x184/0x2f70 [ 1230.966134] ? __se_sys_ioctl+0x1da/0x270 [ 1230.970427] ? binder_poll+0xbd0/0xbd0 [ 1230.974397] do_vfs_ioctl+0xfbc/0x2f70 [ 1230.978455] ? security_file_ioctl+0x92/0x200 [ 1230.983045] __se_sys_ioctl+0x1da/0x270 [ 1230.987111] __x64_sys_ioctl+0x4a/0x70 [ 1230.991091] do_syscall_64+0xcf/0x110 [ 1230.994979] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1231.000240] RIP: 0033:0x457569 [ 1231.003519] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.022508] RSP: 002b:00007fbb0e0bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.030323] RAX: ffffffffffffffda RBX: 00007fbb0e0bbc90 RCX: 0000000000457569 [ 1231.037665] RDX: 000000002000efd0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1231.044997] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.052343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb0e0bc6d4 [ 1231.059670] R13: 00000000004be918 R14: 00000000004ceeb8 R15: 0000000000000007 15:10:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000b80)={@empty, r2}, 0x14) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x4, [0x6, 0x10000, 0x1, 0x3]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x1}, 0x8) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 1231.067314] binder: 28213:28225 ioctl c0306201 2000efd0 returned -12 15:10:04 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1231.190562] binder: 28229:28230 ERROR: BC_REGISTER_LOOPER called without request [ 1231.226003] binder: 28230 RLIMIT_NICE not set [ 1231.230868] binder: 28229:28230 ioctl c0306201 2000efd0 returned -11 15:10:04 executing program 0 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1231.424813] binder: send failed reply for transaction 785, target dead 15:10:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsync(r0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) fdatasync(r0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:04 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x8, 0xfffffffffffffffd}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000180)="74dfe6019e0f62ad0541fec2b6cb4391c4cd839a750d405a6e4f6997e4f8cf56cfbf1e1bfb3c8af0ad28669600d80f6855e5784be97e29b66ee5c36e402a72d567439c273e9b6f25904fbdf1ab125e00c3777f778e91202a7598cbecfea271abca15ef7b21ca898726f1a0237fc3962bae4a4d2c9b0192fbe9a1031a7fb001b777015b7f604a5e0c332d34720c4487502afea4c64c3b6fc48b5f4f5f42d7689afc474f5a5c9c723d1b6e684ed817db2933fcdc8aca1343355c4ba2cc58a01b074af9", 0xc2) listen(r3, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 1231.626116] binder: 28239:28242 ERROR: BC_REGISTER_LOOPER called without request 15:10:04 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1231.697038] binder: release 28239:28242 transaction 787 out, still active [ 1231.704320] binder: undelivered TRANSACTION_COMPLETE [ 1231.710771] binder: 28242 RLIMIT_NICE not set [ 1231.715764] binder: 28242 RLIMIT_NICE not set [ 1231.720366] binder: send failed reply for transaction 787, target dead [ 1231.727300] binder: 28239:28242 ioctl c0306201 2000efd0 returned -14 [ 1231.786176] binder: 28245:28247 unknown command 0 [ 1231.791276] binder: 28245:28247 ioctl c0306201 204edfd0 returned -22 [ 1231.868924] binder: 28245:28247 ioctl c0306201 2000efd0 returned -11 15:10:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000180)={0x0, 0xffff, 0x4, &(0x7f0000000140)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bfb242a4356cf1190a6e355c5eec3efdc90a2229f2cf4d28ad664592462b", 0x3b}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:05 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:05 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=""/158, 0x9e, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r0, 0x4) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x40) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8001, 0x4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @local}}, 0x1, 0x9}, &(0x7f0000000280)=0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1a9, 0xfdfd, &(0x7f00000000c0)="efc6b93bb6897e8ff1569367acdf9d400c7c0b241a9e48c86df8a85004419b6b12f5941988222ab4097263534a559096acebaec2c462c9c78235031d46eb1e83d3ac04b9e730aac206142587fe4f4d7ee4ad5bd27214b62a8c7ef4e305847c00000000"}) 15:10:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000080)=0xc) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x3, @remote}}, [0x3f, 0x2, 0x8001, 0x6, 0x8000, 0x4, 0x9, 0x8000000000000, 0x1, 0x9, 0xccf9, 0x8, 0x2, 0x4, 0xb57]}, &(0x7f0000000200)=0x100) 15:10:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') sendfile(r1, r2, &(0x7f0000000000), 0x800000bf) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x448595ae6f8833c2, 0x401, [], @bt={0x2, 0x81, 0x10000, 0x0, 0x6, 0x3, 0x10}}) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1ff, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000001c0)={0xad, 0x9, 0x4, [], &(0x7f0000000180)=0xd2c}) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:05 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1232.377863] binder: 28269:28272 ERROR: BC_REGISTER_LOOPER called without request [ 1232.402245] binder: 28268:28270 ERROR: BC_REGISTER_LOOPER called without request [ 1232.411142] binder: release 28269:28272 transaction 789 out, still active [ 1232.418440] binder: undelivered TRANSACTION_COMPLETE [ 1232.442875] binder: 28272 RLIMIT_NICE not set [ 1232.447555] binder: 28272 RLIMIT_NICE not set [ 1232.452331] binder: send failed reply for transaction 789, target dead [ 1232.459053] binder: 28269:28272 ioctl c0306201 2000efd0 returned -14 15:10:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1232.501821] binder: 28270 RLIMIT_NICE not set [ 1232.506397] binder: 28268:28270 ioctl c0306201 20000140 returned -11 15:10:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:05 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x5, 0x1, &(0x7f0000000200), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x3}], 0xfffffcd4, 0x0, 0x0}) r2 = accept(r1, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0xfffffffffffffcd3) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x3, 0x8, 0x5, @remote, 'veth1_to_bridge\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) write$evdev(r3, &(0x7f00000002c0)=[{{0x0, 0x7530}, 0x17, 0x3, 0x5}, {{}, 0x17, 0x5, 0x4}, {{0x77359400}, 0x16, 0x80, 0x7}, {{}, 0x16, 0x8e7, 0x2}, {{0x77359400}, 0x7, 0x7f, 0x20}], 0x78) 15:10:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:06 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1233.031307] binder: 28290:28298 ERROR: BC_REGISTER_LOOPER called without request [ 1233.099537] binder: release 28290:28302 transaction 791 out, still active [ 1233.106781] binder: undelivered TRANSACTION_COMPLETE [ 1233.155252] binder: 28301:28304 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 1233.163377] binder: 28301:28304 ioctl c0306201 20000280 returned -14 [ 1233.203453] binder: 28301:28304 ioctl c0306201 2000efd0 returned -11 15:10:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 15:10:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) fcntl$setpipe(r0, 0x407, 0x9) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:06 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:06 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:06 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 1233.674630] binder: 28320:28322 ERROR: BC_REGISTER_LOOPER called without request 15:10:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0bc10000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:07 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000080)={0x7, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000ef8bdb513aa983071ef0a210d40a0c34209a6f60003e333753303360151928db28de453d1efaf433957c3ca46612a7fa896c3063d2117509d24abff222c60905506f4f5b7c308407ca23930d43c42d704b2db0607b69b44d9a08207648d8170573e004cb35f99898e5d06f2d9c3fdbc76337bcfe6c7597f3b506419729acc127cc18f5b5d89a5dde556feac07901808e254817c2e7b258a8f26ba141e80d5ec7499c953b0f72d277e99bfc9ebed75cf21bc93921e88aa439ef7f49d8dde4a5bc8ea685dc566dad40420e08607cc775af724388ceabc3874b969e5d8240e01e1825a2797799cf175dcbf62051ddee4426ee2ba3be62f4c8f2459afd37e343b009f39164031d7ef6325d827449ca9493171054c4210735329f294b5cdc0b4764935c8e60ee25384c03cce3606533939ca46079b99ee14db38e72eae3c0b929250e49ab27e5bc97ea8a8ba2d7eee045fad9c4ab0ddebe6c0d5c2828d6a16a2ae2dcf1ef1994861d647b235ac32198b4ebf3b5aaf1efabe3321b5b92189c09a0d2f802de4eb30003e512328837adf4e28374641e8e2bc03c470244f3272665bdef795799002c6eef0b29f980e19e67318dbaac872fa72d013a986ead5f348661e8602d2c0c086dad02e4b4a83f2e03a2e05e55d798896a7d2f144bba4ac166d09a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) 15:10:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1234.058249] binder: send failed reply for transaction 791, target dead 15:10:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1234.220715] binder: 28339:28341 unknown command 0 [ 1234.225927] binder: 28339:28341 ioctl c0306201 204edfd0 returned -22 [ 1234.343296] binder: 28345:28347 unknown command 49419 [ 1234.348746] binder: 28345:28347 ioctl c0306201 204edfd0 returned -22 [ 1234.413282] binder: release 28345:28353 transaction 793 out, still active [ 1234.420388] binder: undelivered TRANSACTION_COMPLETE 15:10:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x3c, 0x1907, 0x3, 0x7fff, 0xff, 0x10001, 0xffe00, 0x3, 0x1, 0x8, 0x1f, 0x3}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000600)={0x1000, ""/4096}) 15:10:07 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @ipv4={[], [], @local}, 0x1}, {0xa, 0x4e23, 0x9, @mcast2, 0x80}, r1, 0x88f3}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xaa4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000300)={{0x3, 0xffffffff}, {0x3, 0x8}, 0x81, 0x2, 0x80}) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x4) r4 = memfd_create(&(0x7f0000000000)='mime_type-\\%\x00', 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x1, @ib={0x1b, 0x4, 0x6, {"c3073ce85c71bf40a4de75c08fa054db"}, 0x2, 0xff, 0x5}}}, 0xa0) getsockopt(r3, 0x6, 0x5, &(0x7f0000000240)=""/121, &(0x7f0000000100)=0x79) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:07 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {0x0}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1234.763983] binder: 28363:28367 ERROR: BC_REGISTER_LOOPER called without request [ 1234.791596] binder: 28367 RLIMIT_NICE not set [ 1234.796458] binder: 28363:28367 ioctl c0306201 2000efd0 returned -11 15:10:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:08 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x4) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:08 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b630052aacb36e253eeddfcefb653cfa42b9d8c2baec3304d758d18f59d6563a2991e4ef7b715f19059c851ec78171496ee6d08216f545fc51bc9e753037053408f620d3e78177690b8284bff76eeeda87dada774c06edd66c230b005a04ef4d65ef3197a8338a0bb57ec62f60a64be3804e34552ea8ca27f8adaed33d586a3b7bd4e051e84728ca0d7575826afb295f1fbfe12f2b3d2715c66e0c6d78df9f3d7ba25e14496d13db51b6e494c5ce7c9f9a35a0000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:08 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1235.377490] binder: send failed reply for transaction 793, target dead [ 1235.537538] binder: 28393:28396 unknown command 1375757067 [ 1235.543504] binder: 28393:28396 ioctl c0306201 204edfd0 returned -22 [ 1235.571232] binder: 28393:28396 ioctl c0306201 2000efd0 returned -11 [ 1235.623204] binder: 28397:28401 ERROR: BC_REGISTER_LOOPER called without request [ 1235.694943] binder_alloc: 28397: binder_alloc_buf, no vma [ 1235.700699] binder: 28397:28401 transaction failed 29189/-3, size 0-0 line 2973 [ 1235.719794] binder: undelivered TRANSACTION_ERROR: 29189 [ 1235.734665] binder: 28401 RLIMIT_NICE not set 15:10:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000), 0x2f3, 0x2) 15:10:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1ff, 0x105000) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000300)={0x1fd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0x7, 0x4) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000040)="e8ce46fbbff1ddeb77f070425c55771c0f019e3ac1b43a3b03ddb6fe4db315ba3580b3473f392a8a351fa976e5c1dbd5a573ac6738d1f5e27618866dd67525ae81d98f6201db2394b1833ff7eb52050423490a17a403c4ac5bebef5dd2bc6289f3345dd06601cc1cb2324f9dafce34ad6f081b46ef3926ee56e0756caafcb7cb6657d2edca4f34a5075801", &(0x7f0000000180)="5984e777db262813eb595a04915e71f12f7f2b2ceff3cd2cb048bf667b041e56f47748dd32e4f13c396cf88af6216ba38f77de493982d53874565df67aaac56cfced33dc574e4f184261bf4eea45422f11bb0dbe5b0ef8f04526c0ae2d65bdbf2dab7ce017d2644c4ce8a8c822d9faba0d47f01b4deabfa64470b35a6056dfa1311e1dfb5cc6dc275f7d8039cc046bd8e5d7823216544d5b2464c495098b69dac9f2e80b3ba296b88986b861e18a542918ffa911f84dae", 0x2}, 0x20) socket$kcm(0x29, 0x7, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 15:10:08 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1cc, 0x30, 0x200, 0x70bd26, 0x25dfdbfd, {0x1e}, [@generic="73d306263cac5f1ef4d23b2f3900d2ad8f63d97b94565e682652653e7cf6132f8ee09eabb072011f873c241e73aed91bc29a6f62b7056b318a53b9520a136732392ca68780d12dc24b9462a97043aea3eaedfbdfe36651ee8472f03a3cc5070a6b844a15d053", @typed={0x8, 0x2b, @fd=r0}, @nested={0xa0, 0x22, [@typed={0xc, 0xa, @u64=0x7}, @generic="ee37bb99d53ff4fbf90108e6f0be66821962f7b5d9e4232578b0a34cc975660d34c79823ed589bc44975248bea3c4b15764e968037a6028ef2d656d020565a2aead1cbfbfcd53ec156d6ccf7fe624f33b0ac9e38a8100e38e47be55b1459d8cd53569be9da6e26a80957ad0c1c0dbaa4bd6a5c6d27aaac7c311232c6f8c520507528457a2bcb3056eabf1e0c1e"]}, @typed={0x8, 0x6d, @ipv4=@broadcast}, @nested={0xc, 0x19, [@typed={0x8, 0x15, @binary="b8a5"}]}, @generic="a785ba8fb4dcc0d3c1d54f6b63a793f59f62316fa3eebc0c6c16ca45fd289fb5faf13886a9b87592fefecddf1739b4bd5d3a2976b35d7efcd5cff0c05c6ed1439d86a764367f19ccc62000851fb6345426eed46e87d33eefa253829f6f452c915e8bfb29384d33741077999e190965f9074f9f32868c97e5e78e0a0efa266cad83bb6f82e17216488216dfe2d69f4120db0ccf841bec"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000055bb75e363429034a62301ecb7066b3eda9562278a560600a5335610811621eba0055b141b41441a8d707279be1f65428368a9c3c846e91c5f362b5f49454179d7613a37b5a4225ff120cb52b532c479bdb051611c44caeb4afe682a8d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x1, 0x2, 0x7, 0x7}}) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 1236.065472] binder: 28416:28418 unknown command 1426063360 [ 1236.071430] binder: 28416:28418 ioctl c0306201 204edfd0 returned -22 [ 1236.103019] binder: 28416:28418 ioctl c0306201 2000efd0 returned -11 15:10:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1ba4357104f74b04b64d665d93f4e58d4cbce8104836c70ebeaef375f2bf", 0x1e}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) r2 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r4 = dup3(r0, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000200)={r4, r0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x121040, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0]}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfff, 0x280) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x142, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:09 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x0) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x1b) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000ae4872ecf4a5b67dc3665c08209a3d13ea81f6fee9b424a0f196af9ac423579d8bdd04fc87d7ca58ac9b62e62715ff8f2da26492d4e43de9a7b33d89a1f5fc0c571e8f182cf8a902796a9e5ee2a943ac86c729f14108d78f9328d12d995794840a50aeeb5269b41b8ff9d5b1c223582fc55117cd9b14ddcbc6cbff7ad8b4d99626f3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x100, 0x8b1}) [ 1236.535428] binder: 28430:28432 ERROR: BC_REGISTER_LOOPER called without request [ 1236.562545] binder: 28432 RLIMIT_NICE not set 15:10:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0xfffffffffffffc8e) 15:10:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1236.779044] binder: 28438:28439 ERROR: BC_REGISTER_LOOPER called without request [ 1236.806426] binder: release 28438:28439 transaction 797 out, still active [ 1236.813820] binder: undelivered TRANSACTION_COMPLETE [ 1236.823294] binder: 28439 RLIMIT_NICE not set [ 1236.827972] binder: 28439 RLIMIT_NICE not set [ 1236.832801] binder: send failed reply for transaction 797, target dead [ 1236.839563] binder: 28438:28439 ioctl c0306201 2000efd0 returned -14 [ 1236.871015] binder: 28438:28439 ioctl 127f 20000000 returned -22 15:10:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="3269aa9febe1a3fa8e68104fa65e57f57dab10589bd9561560f6e9f85ac4f09f9409d55884d5f76a5cda34f6a794f565447f446771bac794d91f4710c26a0ddf7fb97048253f12776550c8e4a13219b3f2f59d8cedfb47d93d828a7ea20655bcbfe246f0d7dab836fc1b6817c41b1738dbc61cbf4d8113ca30085d624ab4873d714608fa56bcf7524f77a6580767d29711d9d0bc7a959034a1198d", 0x338524af) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)) r4 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffd54) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)) epoll_wait(r4, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:10 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1237.285879] binder: 28452:28454 ERROR: BC_REGISTER_LOOPER called without request [ 1237.356937] binder: release 28452:28454 transaction 799 out, still active [ 1237.364181] binder: undelivered TRANSACTION_COMPLETE [ 1237.371055] binder: 28454 RLIMIT_NICE not set [ 1237.375911] binder: 28454 RLIMIT_NICE not set [ 1237.380495] binder: send failed reply for transaction 799, target dead [ 1237.387342] binder: 28452:28454 ioctl c0306201 2000efd0 returned -14 15:10:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:10 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) msgget(0x2, 0xaa) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:10 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{&(0x7f0000004340)=@pppol2tpv3, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="219eb028a8c62b37e6aa73cc0373309de6a3444b1f537b0628c543d7fe31d3baadd7047e03a0227d79e965d016ad85049eb5b4393e7529de365c27af60b458c545ff970277c901727b4677c7940b9e6c58e461791c281a5071758d782a0f665b5b2c197b9f0c25ae97096e15ce72c310240a2ea45f2c22ac3387d2d308f43bf20f", 0x81}, {&(0x7f0000000200)}, {0x0}, {0x0}], 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1237.818469] binder: 28470:28471 ERROR: BC_REGISTER_LOOPER called without request 15:10:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfffffffffffffe36, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x181000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) [ 1237.877310] binder: 28471 RLIMIT_NICE not set [ 1237.882230] binder: 28470:28471 ioctl c0306201 2000efd0 returned -11 [ 1238.080278] binder: 28481:28485 unknown command 875837489 [ 1238.086253] binder: 28481:28485 ioctl c0306201 200000c0 returned -22 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:11 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b6300008f03b73728025577f37038cc3fc49ae063667f9f73a0cd5597256bfd131009f7417126b26e452b15e6886d48b77f753c0e7b660c12fcf796ba98df3b6e812abd5e3276941083f778fbdafa3a785e3b1c27c9cc5e1cc0013448b72613d70a2759d3f0758a29d1de364c43d1549e72edcdcfebc647bef209b004b3a634640b0042e45490e97335de61af96b54687ccc3a7373bb29354d5cc3018989c9e3b2975727a6febd5b22c7b88d0b13b1944fcc102a04f4afa1b82d3e408b7e01397051c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1238.154662] binder: release 28481:28487 transaction 801 out, still active [ 1238.161825] binder: undelivered TRANSACTION_COMPLETE 15:10:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000280)={0x2, 0x2, 0x0, 0x83, 0x7f, 0xfffffffffffffff8, 0x2a, 0x9, 0xffffffffffffff7f, 0x4}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xce4, 0x1, 0x6, 0x1, r3}, &(0x7f00000001c0)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000200)={{0x5c, @loopback, 0x4e22, 0x1, 'nq\x00', 0x20, 0x4, 0x7a}, {@remote, 0x4e24, 0x10001, 0x401, 0x6, 0x8}}, 0x44) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000600)={r3, 0x1000, "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"}, &(0x7f00000002c0)=0x1008) fchmod(r0, 0x10) 15:10:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1238.455891] binder: send failed reply for transaction 801, target dead 15:10:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:11 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x108, "fc469c8a6942b92414c63e9f7a4abbc788df5ad84acc865e6f6de1aa20f46bb5", 0x800, 0x3, 0x6, 0x8, 0x8, 0x3, 0x7ff, 0x100, [0x248a2b5d, 0x7fff, 0x4, 0x3ff]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x103000, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000000c0)={0x4}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12010, r1, 0x0) [ 1238.683335] binder: 28504:28505 ERROR: BC_REGISTER_LOOPER called without request [ 1238.746016] binder: release 28504:28505 transaction 803 out, still active [ 1238.753230] binder: undelivered TRANSACTION_COMPLETE [ 1238.759335] binder: 28505 RLIMIT_NICE not set [ 1238.764199] binder: 28505 RLIMIT_NICE not set [ 1238.768795] binder: send failed reply for transaction 803, target dead [ 1238.775648] binder: 28504:28505 ioctl c0306201 2000efd0 returned -14 [ 1238.919682] binder: 28515:28516 ERROR: BC_REGISTER_LOOPER called without request 15:10:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r4 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x0, {0x88, 0x0, 0x2}, 0x22, r4, r5, 0x0, 0x4, 0x1, 0x7, 0x10001, 0x8fe8, 0x4f, 0x24, 0x6, 0x0, 0x2000000000000000, 0x9d, 0xad, 0x3fff80000, 0x4}}, 0xa0) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:12 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40c000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x72a6dda9, 0x2) r4 = dup(0xffffffffffffff9c) renameat(r3, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00') ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f2292c4c17d6f2ac4e28996cb67660f38801e5e9ec4c1975a7500b91c080000b8e9b30000ba000000000f300f009200680000f083b2fb12153baef30f0d47360f01cb", 0x43}], 0x1, 0x24, &(0x7f0000000180), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1239.269726] binder: 28523:28527 ERROR: BC_REGISTER_LOOPER called without request [ 1239.336452] binder: release 28523:28531 transaction 805 out, still active [ 1239.343684] binder: undelivered TRANSACTION_COMPLETE [ 1239.349638] binder: 28527 RLIMIT_NICE not set [ 1239.354367] binder: send failed reply for transaction 805, target dead [ 1239.361123] binder: 28523:28527 ioctl c0306201 2000efd0 returned -14 15:10:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1239.458959] binder: 28533:28537 ERROR: BC_REGISTER_LOOPER called without request 15:10:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) arch_prctl$ARCH_SET_GS(0x1001, 0x4e) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1240.003302] binder: 28555:28558 transaction failed 29189/-22, size 0-0 line 2834 [ 1240.028091] binder: 28561:28563 ioctl 6609 0 returned -22 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) [ 1240.122411] binder: 28561:28563 ERROR: BC_REGISTER_LOOPER called without request [ 1240.168521] binder: 28561:28563 ioctl c0306201 2000efd0 returned -11 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:13 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x20800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000000c0)="2324b0bf8a904cffaa29c101a7d42cf000f97215eef3a480929b60ba73f3bf2451fa21fde561571c6d0a37d2b5fb3bbcbe25c4ff7c302964f7827858ccd39cdbb733f0373985e173d6f783", &(0x7f0000000140)=""/21}, 0x18) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f4f75b7b6cf981b1cd490b0a6df5de60f05850c20800b91bada78a000000000000e5ce87a08187"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1240.426921] binder: undelivered TRANSACTION_ERROR: 29189 [ 1240.659934] binder: 28577:28581 unknown command 2069624820 [ 1240.666082] binder: 28577:28581 ioctl c0306201 204edfd0 returned -22 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1240.705625] binder: 28580:28582 ERROR: BC_REGISTER_LOOPER called without request [ 1240.746057] binder: release 28580:28582 transaction 808 out, still active [ 1240.753167] binder: undelivered TRANSACTION_COMPLETE [ 1240.759212] binder_set_nice: 2 callbacks suppressed [ 1240.759229] binder: 28582 RLIMIT_NICE not set [ 1240.769291] binder: 28582 RLIMIT_NICE not set [ 1240.774085] binder: send failed reply for transaction 808, target dead [ 1240.780826] binder: 28580:28582 ioctl c0306201 2000efd0 returned -14 15:10:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce5) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000000c0)="68b2ff98a8843a0a8c301807fa6cfeb7db20", 0xffffff8c) r2 = epoll_create(0x2) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x7fe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="9b85c28b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x22480, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000140)={0x8001, 0x8, 0x3, [], &(0x7f0000000100)=0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x10000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1015c62245359d87f20700fbfbb9c6ea367c057d3ed00037d463eaf595f27ff3e9a8fcc04f82a99baf36d18c849ef6"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x5, 0x1, 0x7, 0x9}]}, 0x10) 15:10:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockname(r1, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @multicast1}, &(0x7f00000004c0)=0xc) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000200)='./file0\x00', r6, r7) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000740)=""/22, 0x16}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/170, 0xaa}, {&(0x7f0000001840)=""/9, 0x9}, {&(0x7f0000001880)=""/158, 0x9e}, {&(0x7f0000001940)=""/221, 0xdd}, {&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/115, 0x73}, {&(0x7f0000001b40)=""/128, 0x80}, {&(0x7f0000002400)=""/4096, 0x1000}], 0xa, 0x0, 0x0, 0x9}, 0x9}, {{&(0x7f0000001c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001d00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/95, 0x5f}, {&(0x7f0000001e40)=""/175, 0xaf}, {&(0x7f0000001f00)=""/139, 0x8b}, {&(0x7f0000001fc0)=""/123, 0x7b}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000002100)=""/3, 0x3}, {&(0x7f0000002140)=""/240, 0xf0}], 0x8, 0x0, 0x0, 0xfff}, 0x2}, {{&(0x7f00000022c0)=@ipx, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/16, 0x10}, {&(0x7f0000002380)=""/59, 0x3b}, {&(0x7f0000003400)=""/103, 0x67}], 0x3, &(0x7f00000034c0)=""/110, 0x6e, 0x7}, 0xfff}, {{&(0x7f0000003540)=@can, 0x80, &(0x7f0000003700)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/46, 0x2e}, {&(0x7f0000003600)=""/155, 0x9b}, {&(0x7f00000036c0)}], 0x4, &(0x7f0000003740)=""/80, 0x50, 0x2}, 0x3}], 0x4, 0x10002, &(0x7f00000038c0)={0x0, 0x989680}) getsockname(r1, &(0x7f0000003b40)=@ll={0x11, 0x0, 0x0}, &(0x7f0000003bc0)=0x80) getsockname$packet(r2, &(0x7f0000003d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006ac0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006b00)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000006c00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006c40)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000006d40)=0xe8) getpeername$packet(r1, &(0x7f0000006d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006dc0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006ec0)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006f00)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000007000)=0xe8) getsockname$packet(r1, &(0x7f0000007040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007080)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000070c0)={@mcast2, 0x0}, &(0x7f0000007100)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000077c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000007780)={&(0x7f0000007140)={0x610, r3, 0x26, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x668}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x21c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}]}}, {{0x8, 0x1, r16}, {0x1ac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0xffffff02, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1241.448892] binder: 28609:28610 ERROR: BC_REGISTER_LOOPER called without request 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x181, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x101000) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="5e000000558695f567fe791ae43ab8bb515bb35bffa9930398e83fd4c20754fcffe100686bd3b080a5c7798363c4cbed186f89244163eab400ea8d8fc063d4bf745127ec9d2921bde5c6373aa8d80b43360f69ab526837f43bde5f642e995412dadc"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000140)={{0x2, 0x1, 0xf2a, 0x1, 0x8}, 0x2, 0x1, 0x8}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000100)={0x4, 0x86, 0x9, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1e3) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, [], 0x1d}, 0x7fffffff}}, [0xffffffffffffffe0, 0x8, 0x20, 0x0, 0x1, 0x80000001, 0x81, 0x550, 0x9658, 0x8, 0x4, 0x0, 0x100000001, 0x6, 0x6]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={r6, 0xffff}, &(0x7f00000004c0)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r7, 0x4, 0x7fffffff}, &(0x7f0000000300)=0xc) [ 1241.750693] binder: 28614:28617 ioctl 8933 20006ac0 returned -22 [ 1241.798229] binder: 28614:28617 ioctl 8933 20006ec0 returned -22 [ 1241.855276] binder: 28614:28617 ERROR: BC_REGISTER_LOOPER called without request [ 1241.863295] binder: 28614:28617 ioctl c0306201 20000100 returned -14 15:10:15 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1241.947172] binder: 28621:28623 ERROR: BC_REGISTER_LOOPER called without request [ 1241.992577] binder: release 28621:28623 transaction 811 out, still active [ 1241.999678] binder: undelivered TRANSACTION_COMPLETE [ 1242.008622] binder: 28623 RLIMIT_NICE not set [ 1242.013489] binder: 28623 RLIMIT_NICE not set [ 1242.018106] binder: send failed reply for transaction 811, target dead [ 1242.024956] binder: 28621:28623 ioctl c0306201 2000efd0 returned -14 15:10:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x2, 0x5, 0x3, 0xfff}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000100)={0x2000}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:15 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1242.142932] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.148423] binder: 28621:28632 ioctl 40046207 0 returned -16 [ 1242.232800] binder_alloc: binder_alloc_mmap_handler: 28621 20010000-20014000 already mapped failed -16 [ 1242.285035] binder: 28621:28623 ERROR: BC_REGISTER_LOOPER called without request [ 1242.323617] binder_alloc: 28621: binder_alloc_buf, no vma [ 1242.329424] binder: 28621:28641 transaction failed 29189/-3, size 0-0 line 2973 15:10:15 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x7, @mcast1, 0x1}, {0xa, 0x4e24, 0xffff, @remote, 0x6}, 0x6, [0x1f, 0x5, 0x100000001, 0x7f5, 0x7, 0x7, 0xe51, 0x2]}, 0x5c) [ 1242.377228] binder: 28638:28639 unknown command 6 [ 1242.382334] binder: 28638:28639 ioctl c0306201 204edfd0 returned -22 [ 1242.396288] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.403480] binder: 28623 RLIMIT_NICE not set [ 1242.413431] binder: 28638:28639 ioctl c0306201 2000efd0 returned -11 15:10:15 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000080)={0xa, [0x40, 0x5, 0x6, 0x81, 0x0, 0x1, 0x1, 0x0, 0x4, 0xc41]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:15 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1242.841120] binder: 28655:28659 ERROR: BC_REGISTER_LOOPER called without request 15:10:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b8866b688d66efbafc0cb000eebaf80c66b8e03a1f8066efbafc0c66ed0f01cabaf80c66b810545e8f66efbafc0c66edf2f0806be6740f2162360f225066b9f40a00000f320f0766b98802000066b80900000066ba000000000f30"}], 0x0, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x53, 0x4d0, 0x6, {0x5, 0x10000}, {0x3, 0x1}, @period={0x5b, 0x1, 0x100000000000000, 0xb00, 0xbf, {0x5, 0x5, 0x8, 0x5}, 0x5, &(0x7f0000000040)=[0x4, 0x2, 0x6, 0x10001, 0xfff]}}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1243.046385] binder: 28663:28664 ERROR: BC_REGISTER_LOOPER called without request 15:10:16 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1243.098584] binder: release 28663:28666 transaction 814 out, still active [ 1243.105974] binder: undelivered TRANSACTION_COMPLETE [ 1243.119570] binder: 28664 RLIMIT_NICE not set [ 1243.124474] binder: 28664 RLIMIT_NICE not set [ 1243.129054] binder: send failed reply for transaction 814, target dead [ 1243.135985] binder: 28663:28664 ioctl c0306201 2000efd0 returned -14 [ 1243.342085] binder: 28674:28678 ioctl c0306201 2000efd0 returned -11 15:10:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000200)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:16 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x9) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:16 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1243.675340] binder: 28684:28685 ERROR: BC_REGISTER_LOOPER called without request 15:10:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={r3, 0x10}) 15:10:16 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x2) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7, 0x0, 0x1, 0xfffffffffffff2f8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3cb) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x7, {{0xa, 0x4e24, 0x5, @loopback, 0x5}}}, 0x88) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1243.727429] binder: release 28684:28685 transaction 816 out, still active [ 1243.735091] binder: undelivered TRANSACTION_COMPLETE [ 1243.740761] binder: 28685 RLIMIT_NICE not set [ 1243.745570] binder: 28685 RLIMIT_NICE not set [ 1243.750149] binder: send failed reply for transaction 816, target dead [ 1243.757226] binder: 28684:28685 ioctl c0306201 2000efd0 returned -14 15:10:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x1) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1244.020764] binder: 28700:28701 ERROR: BC_REGISTER_LOOPER called without request 15:10:17 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1244.246071] binder: 28706:28707 ERROR: BC_REGISTER_LOOPER called without request 15:10:17 executing program 5: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'bond_slave_0\x00', 0x4}) keyctl$set_reqkey_keyring(0xe, 0x2) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r3, 0xc66, 0x78, "3c306336f393e5ea5a745cd34ca838cf37d19f5046aff74f02294ea7f9b2aebb51c7d450f31d3a6e32f03082fc25f3ef386430e651e1e365caba7624e9333158acb6e7b7fe7ea3a24af80171985fd01d53309dd90de0f8885d277b2c5b26dbdc85c0fa32f31b9dbc56351e397875d071633c417bb0fe88d5"}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b630000f26e5e4c0e06cc5f425141e3a70ca2cdde14c81d146eb9a80379f0b8490e86e711a297091716cf7af237d2ce761447785a0c88563fadba804d6cb7b510d3388e1e8df4ff697eab423c5abee231c293f51816c10d1262a2f1fffedc724f39f5cae700365c0a457d5a817c752a2c0000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:17 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1244.524586] binder: 28714 RLIMIT_NICE not set [ 1244.529548] binder: 28713:28714 ioctl c0306201 2000efd0 returned -11 15:10:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x90000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000100)={0x1, 0x5, 0x5d, &(0x7f0000000080)="d6ae0b96fa4ac191bc1af7d581dc4be8615dce9ce3bda15b3e8e551b851186df3b2653190747896dc47c77231a803ae777bc3aa1db671375417e99224bdbca8ce742897155c37e94a0da1c7c0e26f9e3de22e0b8cf4f2e22cfb3a3dedc"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r4 = memfd_create(&(0x7f0000000140)='\x00', 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x81}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xdf79, 0x1, 0x1, 0x40, 0x4, 0x5, 0x6, 0x7, 0x0}, &(0x7f0000000280)=0x20) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000003c0)={0x1000, 0xd02, 0x3}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={r5, 0x9, 0x31954749, 0x0, 0x9, 0x7, 0x7f, 0x7, {r6, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x7}}, 0x40, 0x3ff, 0x5ed58520, 0xee, 0xca}}, &(0x7f0000000380)=0xb0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x1, 0xc, [0xaade, 0x2, 0x4]}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1b, 0x20000081) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1244.872290] binder: 28726:28728 ioctl 80045626 20000400 returned -22 [ 1244.980658] binder: release 28726:28728 transaction 819 out, still active [ 1244.987859] binder: undelivered TRANSACTION_COMPLETE [ 1245.000558] binder: send failed reply for transaction 819, target dead [ 1245.007616] binder: 28726:28728 ioctl c0306201 2000efd0 returned -14 15:10:18 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1245.104479] binder: 28736:28737 ioctl c0306201 2000efd0 returned -11 15:10:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:18 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:18 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1245.580401] binder: 28753:28756 ioctl c0306201 2000efd0 returned -11 [ 1245.592663] binder: release 28750:28754 transaction 821 out, still active [ 1245.599959] binder: undelivered TRANSACTION_COMPLETE [ 1245.606052] binder: send failed reply for transaction 821, target dead [ 1245.613167] binder: 28750:28754 ioctl c0306201 2000efd0 returned -14 15:10:18 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x20006, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1245.937818] binder_thread_write: 5 callbacks suppressed [ 1245.937845] binder: 28763:28765 ERROR: BC_REGISTER_LOOPER called without request 15:10:19 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x2, 0x90200) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5f7, 0x0, 0x8, 0x3f}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x7fffffff}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1246.129350] binder: 28768:28773 ERROR: BC_REGISTER_LOOPER called without request [ 1246.177928] binder: release 28768:28773 transaction 823 out, still active [ 1246.185167] binder: undelivered TRANSACTION_COMPLETE [ 1246.191126] binder_set_nice: 6 callbacks suppressed [ 1246.191143] binder: 28773 RLIMIT_NICE not set [ 1246.201159] binder: 28773 RLIMIT_NICE not set [ 1246.205941] binder: send failed reply for transaction 823, target dead [ 1246.212819] binder: 28768:28773 ioctl c0306201 2000efd0 returned -14 15:10:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) 15:10:19 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:19 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1246.435239] binder: 28781:28782 ERROR: BC_REGISTER_LOOPER called without request [ 1246.464584] binder: 28782 RLIMIT_NICE not set [ 1246.469275] binder: 28781:28782 ioctl c0306201 2000efd0 returned -11 15:10:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='ppp0{\x00'}, 0x30) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x6, 0x0, [{0xade, 0x0, 0x390c}, {0x3d6, 0x0, 0x1000}, {0x82b, 0x0, 0x7}, {0xc0000bed, 0x0, 0x80000001}, {0xbcc, 0x0, 0x3}, {0x0, 0x0, 0x7}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x8001, 0x401, 0x0, 0x5, 0x0, 0x85, 0x1, 0x0, 0xff, 0x8, 0x9, 0x81, 0x5b82, 0x9, 0x3, 0x81, 0x4, 0xa9d, 0x80000001, 0x7, 0x9, 0xb0b, 0x100000000, 0x9, 0x0, 0x7, 0x5, 0x7, 0x40, 0x10000, 0x1, 0x0, 0xc8d7, 0x1, 0x6, 0x85, 0x0, 0x80, 0x4, @perf_config_ext={0x35, 0x10001}, 0x4000, 0x8, 0x100000001, 0x1, 0x7, 0x5, 0x4e0}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x100) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @empty, 0xfffffffffffffff7}, {0xa, 0x4e21, 0x81, @mcast2, 0x10000}, 0x100, [0x3, 0x4, 0x9, 0x1, 0x9, 0x1, 0x86a, 0x3]}, 0x5c) write$P9_RATTACH(r4, &(0x7f0000000280)={0x14, 0x69, 0x2, {0x40, 0x0, 0x1}}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:19 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:19 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1246.894120] binder: 28796:28799 ERROR: BC_REGISTER_LOOPER called without request [ 1246.945073] binder: 28800:28803 ERROR: BC_REGISTER_LOOPER called without request [ 1246.955077] binder: release 28796:28804 transaction 825 out, still active [ 1246.962357] binder: undelivered TRANSACTION_COMPLETE [ 1246.969275] binder: 28799 RLIMIT_NICE not set [ 1246.974260] binder: 28799 RLIMIT_NICE not set [ 1246.978897] binder: send failed reply for transaction 825, target dead [ 1246.982823] binder: 28803 RLIMIT_NICE not set [ 1246.985812] binder: 28796:28799 ioctl c0306201 2000efd0 returned -14 [ 1246.997101] binder: 28800:28803 ioctl c0306201 2000efd0 returned -11 15:10:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1247.041089] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.046871] binder: 28796:28804 ioctl 40046207 0 returned -16 [ 1247.106790] binder: 28796:28804 ERROR: BC_REGISTER_LOOPER called without request [ 1247.137218] binder_alloc: 28796: binder_alloc_buf, no vma [ 1247.143240] binder: 28796:28799 transaction failed 29189/-3, size 0-0 line 2973 [ 1247.201888] binder: undelivered TRANSACTION_ERROR: 29189 15:10:20 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getcwd(&(0x7f0000000200)=""/4096, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x505000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000001200)=[{}]}) 15:10:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:20 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x1, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sched_rr_get_interval(r3, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x3, 0x4) [ 1247.554489] binder: 28817:28818 unknown command 0 [ 1247.559562] binder: 28817:28818 ioctl c0306201 204edfd0 returned -22 15:10:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:20 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x12, 0x321201) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0x2, "e44c60ece2438a6a053b14395ebec814d59b317f2503834fe240fb30b06d4f17", 0x2, 0x1}) ioctl$TIOCCBRK(r2, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1247.847284] binder: 28835:28837 ERROR: BC_REGISTER_LOOPER called without request [ 1247.952504] binder: release 28835:28837 transaction 828 out, still active [ 1247.959631] binder: undelivered TRANSACTION_COMPLETE [ 1247.973496] binder: 28837 RLIMIT_NICE not set [ 1247.978228] binder: 28837 RLIMIT_NICE not set [ 1247.983465] binder: send failed reply for transaction 828, target dead [ 1247.990212] binder: 28835:28837 ioctl c0306201 2000efd0 returned -14 15:10:21 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1248.098560] binder: 28845:28846 ERROR: BC_REGISTER_LOOPER called without request [ 1248.134742] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.140095] binder: 28835:28848 ioctl 40046207 0 returned -16 15:10:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000200)={0xeb, "d021f2702b6a2b9e0676042969825d819a453f6d34486cd90753f4b0e973c2cec4213765810d73480576f8f0b811f9c276a53b3514b29407a02fc0de02346e06dd3b20b4b3aebbd2c6955c2669f96d3ff98cf29362439c52850f65b0f6040cd24baf683cc63165071dd440a54b92c38b73fc146347a7e9cc51b6fcd9926f88bc13031c1d5a02fb26bfa5f00e384f20438cd2b889d12538b398a0666ec34a335d5701aa02154e81262a7dd043174757fe2b8da57cab23166bfec8d97ca48933b5b62596bc8b92c73b63f576e881b92ff076d37551e8e7a6843748707d0cca8e0ece62114f35d5db5da7b5d8"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x0, 0x400, 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1248.179807] binder: 28835:28837 ERROR: BC_REGISTER_LOOPER called without request [ 1248.206276] binder_alloc: 28835: binder_alloc_buf, no vma [ 1248.212203] binder: 28835:28848 transaction failed 29189/-3, size 0-0 line 2973 [ 1248.277394] binder: undelivered TRANSACTION_ERROR: 29189 15:10:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, 0x0, 0x0, 0x0) 15:10:21 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:21 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) flock(r0, 0xa) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000063bf1bef187d46fcd3245458254e8e2929b78aabdc9edc9d1631f414a0f71b3bc99fd479a1dd26d342f5eddcf338e8879b691f6082a354a22f94e5ab63bf389285d0fe7418695da0dfb58f54784e460f0453c81831585090269cf44922b8590d54d7bb87d0b34bb2dd881425610d74347544a55b86741faf23a42276512c568c72a93b732b56f7033012a2f16a271dcd6ba2e08824c1ad31a279d5ab0861948c1b027f78af8322d5a4aa9d684d2296418f38f370be5af6bb9bef8f4f1cf1d8ba0288ee2a26411c9c669f175c674e9a9f000853b443675cac345b31227d3be8"], 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x408000) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x101) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x7, 0x0, 0xffffffffffffffff, 0x0, 0x6}) 15:10:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000064fda502fa972848cd1f6d0000000083f9ae85705a3eaf"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, 0x0, 0x0, 0x0) [ 1248.753924] binder: 28872:28873 unknown command -43778048 [ 1248.759702] binder: 28872:28873 ioctl c0306201 204edfd0 returned -22 [ 1248.775355] binder: 28870:28874 unknown command 21 [ 1248.780440] binder: 28870:28874 ioctl c0306201 204edfd0 returned -22 15:10:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x500, 0x11, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, {0xc, 0x0, 0x7}, [@generic="38b1d34526639f13285be87dda57ab0bb5fe9d46ca525729bf7fcb52c0cfa963a68ffdeeb4070f00e971a3a39003100e8cb7745126abeb69a30ca9afafd6e48dedd4a61b1c108488e80b5fcb663d667e143521e8f961e47c3c3d3ff35e844717ca40ab68", @nested={0x2f8, 0x42, [@generic="de42ed65a4af6bb5d9a09a4f4ce09546fcaec2f2c73947c3a7355b8a9c85d2e718b32c663d4d616dfc6168ca22d11ff5c622425a07e9ca39334dd0def18183465d5211e397936f5ce32c61261a6d99856e3c54c03abaf220866183def6878404618c0bfc5a38f3f36ff52e9a42372fed44bab9dd76dc64ea7a2859b65232deef9c74e892a2d927e1cf2b3476d9be29a84bf676ce9b153a428e8789d12abb27e3ea9c6cb9f760e2f6846c9db1b5d369", @generic="6dfcbca0b8e479035e72ba5c0506574006114eaf92b86e77f0e16c432e6172505f1f822a905508c1f7ce8363bd8a26ea6efc90211e869fb6abdae348900a6f", @generic="2c96528d04caa2f87a9e7140a34429afb01f3dc6f465a7a99e1cb242195236b78e2617aebaf6c1e5651d63fce79b5ec4eb154b173530c32203fe5fcaf7626782a0ee21a66f01af80af7d68956967bd43ac9b679c2a5cd7b67851637125490cda552a7570e3eb6140c19c8713c92041c429ecd775a8dfb93ef1777d4c862231f998bdb57f62084b3f857efbad014839a5784d0824f8b37d09bbfc218856c554c08d636d0a5d22aebd7bd73e075dcfd9b171e3460c2f6cd16bed7c1c1b4663bc9b", @generic="d029b2b01e0582267f597e20ca269a60deda47777ddb824475b310aac418dcdd04a1c469c6743b92d19bd346098154044ffff1d75b06353603b0898a8124eb099c60f662b790e1e6d7d5c172567fac62a44dd474069e099b5ff4aa542a9822c2e156f875b63655910469c43ea05b9bd0c65e90db4ed339c37e18f71fe6acf775177d72974236392048c45947e4bfdd2d1405f349c64bf028d1e5591fff1ac2bcf9b94a1c32fed60042b413aeb08ac1e04f107e3aae2156e2", @generic="1209fd70b07eaa036a56c4c35f9500b3886e46f92ab1e1cbd26d10a474c1d043a3408e43863c71c9916f8b3f437eda67a8eb54fdc05036be49c82a145cad43b18f136c6403cc6eb24bc7f372807da7515f17d313ae27c6584cf35635706b39125c96a78b84da0633fec9afb972e0e99ca24d9d3fbeac2fd63b42849de4ddc711a2e21fbb9792d789c302172e"]}, @generic="1d4382e207e28d08fea8188af9e63f1742be2ef73790dca7ab472e63a410f39ffbbca3d92adb315847dae2fa65b60454c8e4c1caecf1d888555f5fb290c4e96987f4af07ca7e15cd294d7a8bc7439062f219747b116a32dea7ecc364bc30cb160f08d01e5788b15e61f4bb4fb1191a94eacb3dd7a1709a45d263a0cb8452ca1f2050fe1e4888e5af6e266e55248e56f86735285d67a099b3904c82ea793ade29", @typed={0x14, 0x2d, @ipv6=@local}, @generic="e642fe16ca6da43c98ff0a65b22826cd8575b90043d9acac28f13c3e71bf07a0d94bf8d4899311301197d27251e271b373b7d5e3afb07d8e843cbac6d042c9a63d5c30b10a4a1bcfdd93b61ac3a441ada0c314c565c8c6ffa8f5b17e33495f845cb8633d9ad80c3fb91cae9bb1793fbe370de5c857166a231e2822b1a719c4034abfd57fb62e7df5c20d4e1e8c3652d79ad26615ce3cf1ca5fb16594e8937573f309199b1067df0c30e0dd5b719e1952d5499920ddb5b70752ae8bcd001c25766b39a1f2e039df", @nested={0xc, 0x51, [@typed={0x8, 0x57, @pid=r2}]}, @typed={0x4, 0x41}, @typed={0x4, 0x81}]}, 0x500}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000180)) chroot(&(0x7f0000000480)='./file1\x00') lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$pid(0x3, 0x0) r6 = getuid() ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r8 = geteuid() r9 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="82004620b0c26d0e067fb5009d06bfba294892f1ff3a74dc027fa777e713b2b45678722aeaf0de8622f4c7fb0a4f1c", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="040000000000000008000300", @ANYRES32=r9, @ANYBLOB="10000700000000002000010000000000"], 0x54, 0x1) [ 1248.835347] binder: release 28872:28873 transaction 831 out, still active [ 1248.842554] binder: undelivered TRANSACTION_COMPLETE 15:10:22 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:22 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:setrans_var_run_t:s0\x00', 0x27, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x6000, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x404204) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b209b307f45253841e9c4ee80a0746156b492abf042d6edd73371a1436644f59f1351eccda1a7eb03ada6161709ff96deaac1e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x2f6, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x13, 0x2, 0x32673d41, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e20, @loopback}}}, 0x88) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2100, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000080)=0x20) 15:10:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, 0x0, 0x0, 0x0) [ 1249.248270] binder: 28889:28892 unknown command 129173938 [ 1249.254173] binder: 28889:28892 ioctl c0306201 204edfd0 returned -22 15:10:22 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x0, &(0x7f0000007580)={0x0, 0x989680}) 15:10:22 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x42100, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) 15:10:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 15:10:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000000c0)={0x22, 0x33363248, 0x3, @discrete={0x81, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="02000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x101) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={{0xffffffffffffffff, 0xfffffffffffffff7, 0x26c, 0x800, 0x81, 0x3}, 0xfff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1249.733997] binder: send failed reply for transaction 831, target dead 15:10:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="a2f5fbe2a581f4c38c7a68b3c0b1bea8bc6c61bda8a7210cb8eddc97ae8738f5d381e2e652020df5ab1cbbdbf2c898ba6f5dd6c049e9cc2e4832dc10ef9330cf26fb21ff0dec46a7230cb01c67d62495d25249b9cd2333cabc1cc517e72b6f050373ffa8b390dad9b529a2975ec9e2c942f6d0915f4d", 0x76}, {&(0x7f0000000200)="95bacd704ba06484d7a8cd134770156f0cc75a2f6b4dd5fcba554894581709dc5152365bc8b8fc14c32a223df6dd7d42eea196fcd6541cd3f45ccb60590c13d3c63deb7eb451f571eb3ed85dd8183aa9ed4f6387a3539364cf1b5a2481b5c1016703daeea45c16b687277d556e7f606f77a583584645880ba47a2694fb84aff3aaac58df", 0x84}, {&(0x7f00000002c0)="f504be7f325091f40284151f9ea2afde98da5b7df018c9f93a846b21c5b973354df8a175703daec13c78cbdecc1d8d1531f43695950ed5d48b084224d56008924761f03904e63c513eaee2d314fb657c7f8e38e73172f3647b63b2fcae2b619791e6b59160b6ef8480b9f658876fe882091f915aabaeb69a7fa638dbe77e0d6f9cfa", 0x82}, {&(0x7f00000000c0)}], 0x4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1249.907114] binder: 28910:28917 ERROR: BC_REGISTER_LOOPER called without request [ 1249.955491] binder: 28917 RLIMIT_NICE not set [ 1249.960254] binder: 28910:28917 ioctl c0306201 2000efd0 returned -11 15:10:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc}) write(r0, &(0x7f00000001c0)="dcc55049b36f6e30925e51861712a4b312560b02deadbbb29671f3d686d4d98ef4fe27ef52a5f99199ed0529856a21b1c53d3f3ba68f3cf81b846bc62ab5b6aa731603744d407b9c169819da220c70f39c3f6d69f6b4725275df606a87ae5ae20652cafcdc48", 0x66) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@ipv4={[], [], @remote}, 0xca, 0x3, 0x3, 0x7, 0x8000, 0x5b7e, 0x200}, 0x1f4) r2 = epoll_create(0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9, 0x9, [0x10001, 0x1000, 0x20000000, 0x55d, 0x400, 0x8000, 0x0, 0x3, 0x2]}, &(0x7f0000000280)=0x1a) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r3, 0x5}, 0x8) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) [ 1250.033481] binder: 28918:28919 unknown command 2 [ 1250.038531] binder: 28918:28919 ioctl c0306201 204edfd0 returned -22 15:10:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 1250.098239] binder: release 28918:28923 transaction 833 out, still active [ 1250.105491] binder: undelivered TRANSACTION_COMPLETE [ 1250.111977] binder: 28918:28919 ioctl 400448c9 20000000 returned -22 15:10:23 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="46813f4a36c75c27cb4f4a22"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) fremovexattr(r3, &(0x7f0000000000)=@random={'trusted.', '/dev/binder#\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1250.430648] binder: send failed reply for transaction 833, target dead 15:10:23 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, 0x0) [ 1250.476155] binder: 28935:28936 unknown command 1245675846 [ 1250.482097] binder: 28935:28936 ioctl c0306201 204edfd0 returned -22 15:10:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 15:10:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/147, 0x93, 0x40000040, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1250.675188] binder: release 28941:28944 transaction 835 out, still active [ 1250.682679] binder: undelivered TRANSACTION_COMPLETE [ 1250.691170] binder: 28944 RLIMIT_NICE not set [ 1250.696142] binder: send failed reply for transaction 835, target dead [ 1250.702999] binder: 28941:28944 ioctl c0306201 2000efd0 returned -14 15:10:23 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x801) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7c45a373, 0x268441) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x0, 0xffffffffffffff0e, 0x4, '\x00', 0xb98}, 0x1, [0x1000, 0x4, 0x0, 0xa0, 0x8, 0x9, 0x6823, 0x6, 0x8, 0x7, 0x5, 0x8, 0x21, 0x800, 0x0, 0x3, 0x2e3, 0x2, 0x6d8a, 0x38, 0x6a35, 0x4, 0x3, 0x2, 0x80, 0x6, 0x7, 0x3, 0x80, 0xeb, 0x6759, 0x1, 0x1, 0x5, 0xffff, 0x7, 0x2, 0xcfa, 0xfffffffffffffffa, 0x5, 0x1, 0x3, 0x7, 0x0, 0xa6c, 0x3, 0x1, 0x200, 0x100000000, 0x0, 0x6, 0x80000001, 0xe7, 0x1000, 0x8, 0x10000, 0x400, 0x1f, 0x2, 0x49125d12, 0x800, 0x8, 0x200, 0x0, 0x8, 0x7ff, 0x3f, 0x0, 0x11, 0x5, 0x7fff, 0x2, 0x37, 0x101, 0x4c3e, 0x7, 0x200, 0x8, 0x2, 0x3, 0x4, 0x7, 0x100000001, 0x7, 0x80000000, 0xd330, 0x865, 0x5, 0x98a, 0x9, 0x1f4, 0x1, 0x2, 0x93, 0x3, 0x0, 0xc38, 0x7, 0x5, 0xfff, 0xff, 0x10001, 0x80, 0x19, 0x7fffffff, 0xff, 0x1, 0x8001, 0x81, 0xc3, 0x80f, 0x1, 0x3, 0x21c, 0x100000000, 0xbf7, 0xd15faae, 0x0, 0x7, 0x0, 0x2, 0xea, 0x8, 0x4, 0x7f, 0x5, 0x1, 0x3], {0x0, 0x989680}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'team0\x00'}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x101) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:23 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, 0x0) 15:10:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x8, 0x1110, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 1251.055542] binder_thread_write: 1 callbacks suppressed [ 1251.055569] binder: 28954:28955 ERROR: BC_REGISTER_LOOPER called without request [ 1251.083854] binder: 28954:28955 ioctl c0306201 2000efd0 returned -11 15:10:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="660f381c953c00b805008ee80f2e80050066b98108000066b80b00000066ba000000000f300f0ff4a0b858008ee8660f5863230f22200f01c90f93a40a83"}], 0x1, 0x0, 0x0, 0x7d) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1251.225067] binder: 28963:28966 ERROR: BC_REGISTER_LOOPER called without request [ 1251.255836] binder_alloc: 28963: binder_alloc_buf, no vma [ 1251.262100] binder: 28963:28966 transaction failed 29189/-3, size 0-0 line 2973 15:10:24 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x3c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_wait(r0, &(0x7f00000005c0)=[{}], 0x58, 0x1ff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1251.303391] binder: undelivered TRANSACTION_ERROR: 29189 [ 1251.306577] binder_set_nice: 2 callbacks suppressed [ 1251.306596] binder: 28966 RLIMIT_NICE not set 15:10:24 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, 0x0) 15:10:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\x00\x00\x00M'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 15:10:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:24 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x846) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x4, 0x4a00) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x20, [], @raw_data=[0x9, 0x1, 0x5, 0x4, 0x8, 0x6, 0x5, 0xfffffffffffffffd, 0x2, 0x0, 0xffffffff, 0x3, 0x7ff, 0xffffffffffff7fff, 0x8, 0x9, 0xffffffffb2ee898c, 0x3b52, 0xfff, 0x0, 0x5, 0x5a6, 0x6, 0xfffffffffffeffff, 0x13, 0x1, 0x13c6, 0x200, 0x200, 0x8, 0xfffffffffffffffa, 0x7]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="c8c95c0b"], 0x0, 0x0, 0x0}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0xffffffffffffff9c, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10, 0x0, 0x6}, 0x10) 15:10:25 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 1252.095836] binder: BINDER_SET_CONTEXT_MGR already set [ 1252.101384] binder: 28991:28995 ioctl 40046207 0 returned -16 [ 1252.122669] binder: 28993:28994 unknown command 190630344 [ 1252.128458] binder: 28993:28994 ioctl c0306201 204edfd0 returned -22 15:10:25 executing program 0: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa4, r2, 0x305, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r4 = dup2(r0, 0xffffffffffffffff) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="a69c235fece27bcfa3a5a1f9e70ffff540f708b6841cbbbad289ba6a93cfb5b2a056d95a92c9f3e597523856acaef228d4021c7eb8e02ae9fc47") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1252.203756] binder: 28993:28994 ioctl c0306201 2000efd0 returned -14 15:10:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:25 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x45) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xa6ff85e7) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r1}}, 0x18) 15:10:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1252.686170] binder: 29012:29015 ERROR: BC_REGISTER_LOOPER called without request 15:10:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x9, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x400000) r3 = getpid() write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x8, {{0x8, 0x1ff, 0x1, r3}}}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2dcb57591e630000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840f722ac85208beb275137815d088eb2b47bb67f3d80ba58ce98c072b6418c"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1252.868321] binder: 29021:29022 ERROR: BC_REGISTER_LOOPER called without request [ 1252.905923] binder: release 29021:29022 transaction 839 out, still active [ 1252.913163] binder: undelivered TRANSACTION_COMPLETE 15:10:25 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$midi(&(0x7f0000002440)='/dev/midi#\x00', 0x3, 0x40) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/109, 0x143}, {&(0x7f0000001280)=""/116, 0x74}], 0x4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x5f, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="0b630000eaed31da3b27f2c00894ed6ea2788cb1881e10f9cbecadc57b2f0e6c96e225408d06871a7272c093aaf6c6ac1d1276400d5aa6bd61720da72e02000000552d06bf51e7b88ba4034bdb00130bdb06fbea9f63d6ba4b631d2f50f745451c53998f1159567e60ca475c0c0e1739006730fec5a792487b771fdbbc95a27f797efcd257171ae6673bee29ac07d9a66001ec3e47efd9f25d0df823bdb6edfa08dde1437adb3435a3513c0ddcd0cd9a"], 0x0, 0x0, 0x0}) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x90000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) writev(r2, &(0x7f0000002400)=[{&(0x7f0000001340)="997e3586b7f56a8df8b80aa4f7876dd8ae454e709dae62f409240f1e5a173c2c268d4da7d1182a3473d2fab0abeafd9db749a26513154d4004d94a703735bdebb94257b434adc71316", 0x49}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000000)="5e452b64cbb79cd47bbea2f8032ab3a303864c09ee52b3dfedc9373e5013", 0x1e}], 0x3) accept$inet(r3, &(0x7f0000002680)={0x2, 0x0, @broadcast}, &(0x7f00000026c0)=0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002500)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002600)=0xe8) sendto$packet(r3, &(0x7f0000002480)="98ea6147fa734420d3a02c8aaebbf675156dba702d542928a762dc5d1516c7b7a7cb5c12cc96c9fc2cd823132e72cf81b616aff6adcc6e38d1d9ea75a16451323feb77388ec20e65ef83690737414998d75ea2d74207ddbaedd214fcada927035f936ab4de9f3ec9fbf2ca3cbaa3fe8c2c28f5e9590d00db", 0x78, 0x20008085, &(0x7f0000002640)={0x11, 0xff, r4, 0x1, 0x5, 0x6, @dev={[], 0x18}}, 0x14) pread64(r0, &(0x7f0000002780)=""/130, 0x82, 0x0) [ 1252.925588] binder: 29022 RLIMIT_NICE not set [ 1252.931063] binder: 29022 RLIMIT_NICE not set [ 1252.935854] binder: send failed reply for transaction 839, target dead [ 1252.942899] binder: 29021:29022 ioctl c0306201 2000efd0 returned -14 15:10:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1253.116100] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.121824] binder: 29034:29036 ioctl 40046207 0 returned -16 [ 1253.186478] binder: 29034:29036 unknown command 1498925869 [ 1253.192382] binder: 29034:29036 ioctl c0306201 204edfd0 returned -22 [ 1253.218840] binder: 29034:29036 got transaction to invalid handle [ 1253.225521] binder: 29034:29036 transaction failed 29201/-22, size 0-0 line 2834 15:10:26 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10001, 0x12080) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x7, {0x8, 0x800}, {0x4, 0x401, 0xff, 0x9}, {0xa2, 0x8}}) [ 1253.266442] binder: undelivered TRANSACTION_ERROR: 29201 15:10:26 executing program 2 (fault-call:1 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1253.400822] binder: 29043:29044 ERROR: BC_REGISTER_LOOPER called without request [ 1253.443465] binder: 29044 RLIMIT_NICE not set [ 1253.448215] binder: 29043:29044 ioctl c0306201 2000efd0 returned -11 [ 1253.590234] FAULT_INJECTION: forcing a failure. [ 1253.590234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1253.602565] CPU: 0 PID: 29052 Comm: syz-executor2 Not tainted 4.20.0-rc3+ #95 [ 1253.609881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.619272] Call Trace: [ 1253.621946] dump_stack+0x32d/0x480 [ 1253.625703] ? __alloc_pages_nodemask+0x73f/0x63e0 [ 1253.630778] should_fail+0x11e5/0x13c0 [ 1253.634818] __alloc_pages_nodemask+0x73f/0x63e0 [ 1253.639716] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1253.645144] ? process_measurement+0x252e/0x2830 [ 1253.650068] ? __msan_get_context_state+0x9/0x20 [ 1253.654942] ? INIT_BOOL+0xc/0x30 [ 1253.658527] alloc_pages_current+0x55d/0x7d0 [ 1253.663044] pipe_write+0xc7b/0x1d20 [ 1253.666893] ? pipe_read+0x1330/0x1330 [ 1253.670854] do_iter_readv_writev+0x822/0xac0 [ 1253.675481] ? pipe_read+0x1330/0x1330 [ 1253.679427] do_iter_write+0x302/0xd80 [ 1253.683381] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1253.688909] ? import_iovec+0x41f/0x680 [ 1253.693016] do_writev+0x3d0/0x870 [ 1253.696671] ? prepare_exit_to_usermode+0x182/0x4c0 [ 1253.701770] __se_sys_writev+0x9b/0xb0 [ 1253.705727] __x64_sys_writev+0x4a/0x70 [ 1253.709776] do_syscall_64+0xcf/0x110 [ 1253.713647] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1253.718895] RIP: 0033:0x457569 15:10:26 executing program 3: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x4e24, @remote}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1253.722165] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1253.741282] RSP: 002b:00007fc8e0b55c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1253.749061] RAX: ffffffffffffffda RBX: 00007fc8e0b55c90 RCX: 0000000000457569 [ 1253.756379] RDX: 0000000000000003 RSI: 0000000020001600 RDI: 0000000000000004 [ 1253.763706] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1253.771017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc8e0b566d4 [ 1253.778331] R13: 00000000004c3807 R14: 00000000004da2d0 R15: 0000000000000005 15:10:26 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:26 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) userfaultfd(0x800) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/62, 0x3e, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x10, &(0x7f0000000140)={&(0x7f0000000240)=""/4096, 0x1000, r2}}, 0x10) [ 1254.142100] binder: 29062:29066 ERROR: BC_REGISTER_LOOPER called without request 15:10:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000aaa8da8565b5fafd38cf1d2d076f030e2813517b45129b55844cd4ef214f9c4155c07888fb869f58967af2aec263e50fc1f4a76aa8e7ef1524d69d7d6d5d305082c2a50325084cc7b1d9f2597473b0184735b2c8f9469ebc49c08b920552d5a809604e39d773d20d91452e0185deb454c1196e71f69af229be67da684f780a23fd08911bd6e0e9418d4d3732"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1254.205165] binder: 29066 RLIMIT_NICE not set [ 1254.209888] binder: 29062:29066 ioctl c0306201 2000efd0 returned -11 15:10:27 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = dup(r0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@remote, @multicast1, @rand_addr=0x20}, 0xc) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000000c0)=[0x7fffffff, 0x4101], 0x2, 0x135, 0xfffffffffffffffa, 0x9, 0x100, 0x800, {0x1, 0x0, 0x3, 0x2, 0x7, 0x2, 0x80, 0xfffffffffffffffb, 0x7, 0x75bf, 0x9, 0x4, 0x7, 0x1f, "9751ca927864640d0ae1ccf861f5321f71044906dc2c21a32116a669159be744"}}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0xf3, 0x1c, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000300)=r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x7f, @local, 0x4e24, 0x4, 'nq\x00', 0x10, 0x7f, 0x3a}, {@rand_addr=0x4, 0x4e24, 0x3, 0x8, 0x1dec85b, 0x80000001}}, 0x44) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1254.445789] binder: 29078:29081 ERROR: BC_REGISTER_LOOPER called without request [ 1254.513176] binder: release 29078:29085 transaction 842 out, still active [ 1254.520448] binder: undelivered TRANSACTION_COMPLETE [ 1254.528038] binder: 29081 RLIMIT_NICE not set [ 1254.533076] binder: 29081 RLIMIT_NICE not set [ 1254.537666] binder: send failed reply for transaction 842, target dead [ 1254.544548] binder: 29078:29081 ioctl c0306201 2000efd0 returned -14 15:10:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="9ac6a49c2b1e4ffe7873d55ea68002039f01b8c1c08fbe72eab0d78f07f4ddae2cb31602a968346e255047b4596bd89c71979ebb8e2dd31d6e719ec5d0cc823716eb703e6d4499f866d911908004172e2184e43929abde07d1db0250ed4e1bb2ba5353562d964c0df40cc13edfff06ff60986e91f9051d6b880061778c52f2da02af9e8f7ee27c27b0b06d321922242ff402dbc78801a9ae0db334c60135985039e8f4bc5aed2960c161d46fe6a68c730c2199144aa43df0cbaa79daa1059e0662c84dd2bdfd6695", 0xc8}, {&(0x7f0000000440)="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", 0x107}, {&(0x7f0000000340)="f810a63bb9c83e754fc63b0fb792034f229fa0047980fefc2226d0dc9fca513c04f564b326ed0c5af32eb9a6e6c08f71cead839b4a6208ecb5a94c56e203ef76689654", 0x43}, {&(0x7f00000003c0)="5c9b1f72bb475a82359f49abf1026a34b6f68487c92e1dc4f69451cedac32d7a6af569b8bb023eb096d67fbedb6b0f95dc8c806fdeb7b2250a652b784d4a1da7c92d2ef95f08ae5b0a12ef02836823081f57b629491840f975f6883692f634b8", 0x60}], 0x4, 0xb) vmsplice(r1, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) 15:10:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0xa27, 0xa2, 0x2, 0x10000}) 15:10:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) prctl$PR_GET_SECCOMP(0x15) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40200, 0x10c) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x4}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000140)={r4, 0x7fff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1254.847132] binder: 29095:29096 ERROR: BC_REGISTER_LOOPER called without request [ 1254.865872] binder: 29096 RLIMIT_NICE not set [ 1254.870667] binder: 29095:29096 ioctl c0306201 2000efd0 returned -11 [ 1254.927191] binder: 29095:29096 ioctl c0106403 20000040 returned -22 15:10:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x2, 0xfffffffffffffffe}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r1, 0x1000, 0x5}, 0x8) r2 = socket$inet6(0xa, 0x803, 0x5) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x80000000, 0x3, 0x9}) [ 1255.102037] binder: 29103:29104 unknown command 0 [ 1255.106988] binder: 29103:29104 ioctl c0306201 204edfd0 returned -22 [ 1255.189008] binder: release 29103:29104 transaction 844 out, still active [ 1255.196401] binder: undelivered TRANSACTION_COMPLETE 15:10:28 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:bsdpty_device_t:s0\x00', 0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x1f2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000002) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000200)) 15:10:28 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000180)={0xc2b2c4a, 0x20, 0x905, @broadcast, 'ip6_vti0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @decrefs={0x40046307, 0x1}, @dead_binder_done={0x40086310, 0x2}], 0x74, 0x0, &(0x7f0000000080)="6c303de40539573f5cc9c77e458e2990d860a204a85f422fc7a619a86f15437b28aa7a2b485837bca43f5cfe8773cf39be1732647a57ae40370f34ef7bbd1642d0c7e3e26c76ede9146c7ea80fa2e4b8a466bcd9b130307e662619e88b4c86d5a27463f2e507fd2cc16ed1874246e20b5488f22d"}) 15:10:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) pipe2(&(0x7f0000000040), 0x4800) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:28 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6, 0x4, [0x4, 0x8, 0x5, 0x8]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0xffffffffffffff48}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1255.624272] QAT: Invalid ioctl [ 1255.679237] binder: 29126:29128 ERROR: BC_REGISTER_LOOPER called without request [ 1255.713272] binder: 29126:29128 ERROR: BC_REGISTER_LOOPER called without request [ 1255.721065] binder: 29126:29128 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1255.729240] binder: 29126:29128 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 1255.737321] binder: 29128 RLIMIT_NICE not set [ 1255.742015] binder: 29126:29128 ioctl c0306201 20000100 returned -11 15:10:28 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x1000}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x3f, 0x5, 0x7}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000001240)="939878807f84a3f2395a82676bf75aea5ba71e3ebd177810b7ae1ec3dda7b48de37f1a231bb92751c5a3e31c11235ecb2b793df24f78e1c4ae9f1d5f3eb0e4b29968bf869447da0699661186c2c0508e88b13658fa4c7973e904f271a80d1521f8be1c3b27207d66133b2ce58d1ccb055339a1cb3acb18b30da8102e58d2dded61d14ec463fc09ee4197b5a1ba3c2180ddf38fbbb9c9727f9a1df00ebe9776a27c4d35587a141fc8ae5c7d118ab89ffb2e38b9f3e7af2be1aae10279030113ef5a3261d14d65417f9c36a9d809c82521f7537138d5") link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 15:10:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x101) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r4 = getuid() r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffffe, 0x7, {{0x6, 0x1, 0x2, 0x7fff, 0x2, 0x6, {0x4, 0x1000, 0x6, 0xaff, 0x1000, 0x0, 0x1, 0x9, 0x62f0, 0x6, 0x3f, r4, r5, 0xfffffffffffffffa, 0x10001}}, {0x0, 0x5}}}, 0xa0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x8000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000080), 0x4) 15:10:29 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgroups(0x7, &(0x7f0000000200)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee00]) chown(&(0x7f0000000040)='.\x00', r0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) readlinkat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r3, 0x9) fcntl$lock(r3, 0x6, &(0x7f0000000300)={0x2, 0x1, 0x8, 0x200, r4}) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001340)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0xffffffffffffffff, 0x840) 15:10:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000000)) [ 1256.159234] binder: send failed reply for transaction 844, target dead 15:10:29 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000000240)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1256.237758] binder: 29143:29144 ERROR: BC_REGISTER_LOOPER called without request 15:10:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x8, 0x3}, 0x76}}, 0x18) dup3(r1, r1, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1256.279406] binder: 29144 RLIMIT_NICE not set [ 1256.284263] binder: 29143:29144 ioctl c0306201 2000efd0 returned -11 [ 1256.397273] binder: 29151:29152 ERROR: BC_REGISTER_LOOPER called without request [ 1256.461961] binder: release 29151:29158 transaction 846 out, still active [ 1256.469147] binder: undelivered TRANSACTION_COMPLETE [ 1256.476951] binder: 29152 RLIMIT_NICE not set [ 1256.481636] binder: 29152 RLIMIT_NICE not set [ 1256.486404] binder: send failed reply for transaction 846, target dead [ 1256.493236] binder: 29151:29152 ioctl c0306201 2000efd0 returned -14 15:10:29 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="00040000"], 0x0, 0x0, 0x0}) kexec_load(0x3, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="188df06ec387c3e724b2fb1067f7f5d0311b73", 0x13, 0x7, 0x5}, {&(0x7f0000000080)="456b66c0fb22fcf79a508fac5a1ba6ccde4fb29d210caad257dafdc89878b5df4843857c1f870df69e6570a4275647ca123e66f14cabfabfbebae73b36c26d24a14eb0322806", 0x46, 0x0, 0x3}, {&(0x7f0000000100)="d26c4f2441323d715858567be9a1c7c16b2efdb2f4d58483b799ebe144aac4c54df99b802f18059099a16cc3b7f2950309c58ad0da68cefc586e5a115a97573aabfbaf57376a1f7e7b65336c43c3d6920f239c9b761913bea0c946d207ab432150a164985918b153a537aea6857104a7e5d7a191dd9a6735c7cfeab77cf13884a8dd3b3abd0439fce639c1bbd5d49cee25316ff8af9a1aa15b312dcdcd0c200607c549bd6ed5e9a0ab727039d0b2dc5ae7", 0xb1, 0x6, 0x1}, {&(0x7f0000000200)="46691d3873db3bc70561cd023605b23eeb83379045c3fc3e68eefec239f0aeed3ac9c470cdb8edadf717486d0954da888695ed982e12a4ee93647f4a46c6385782182ed5abedc4c3a75488", 0x4b, 0x40000000000000, 0x100}], 0x3e0000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:29 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) ftruncate(r0, 0x7ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1256.643499] binder: 29151:29152 ioctl 80247009 20000000 returned -22 15:10:29 executing program 2: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x180000, 0x0) pipe2(&(0x7f0000000100), 0x4000) writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x8dba, 0x53cb16d820e266b3) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="4f1d717d77a51834d0a924", 0x3528ac32}], 0x100, 0x0) 15:10:29 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = dup(r0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/96) [ 1256.779675] binder: 29167:29170 unknown command 1024 [ 1256.785128] binder: 29167:29170 ioctl c0306201 204edfd0 returned -22 15:10:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1257.053215] binder: 29183:29184 ERROR: BC_REGISTER_LOOPER called without request [ 1257.093386] binder: release 29183:29184 transaction 848 out, still active 15:10:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000240)={0xbc, ""/188}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1257.100599] binder: undelivered TRANSACTION_COMPLETE [ 1257.118167] binder: 29184 RLIMIT_NICE not set [ 1257.123162] binder: 29184 RLIMIT_NICE not set [ 1257.127754] binder: send failed reply for transaction 848, target dead [ 1257.134648] binder: 29183:29184 ioctl c0306201 2000efd0 returned -14 15:10:30 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0xf000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1257.464394] binder: 29191:29192 ERROR: BC_REGISTER_LOOPER called without request [ 1257.489561] binder: 29192 RLIMIT_NICE not set [ 1257.494518] binder: 29191:29192 ioctl c0306201 2000efd0 returned -11 15:10:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000800)=[&(0x7f00000002c0)='@em0\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000380)='/dev/kvm\x00', &(0x7f00000003c0)='/dev/kvm\x00', &(0x7f0000000400)='/dev/kvm\x00', &(0x7f0000000440)=']&GPL\x00', &(0x7f0000000480)='posix_acl_accessproceth1em0keyringc\x00', &(0x7f00000004c0)='.cgroupsecurity\x00'], &(0x7f0000000780)=[&(0x7f0000000580)='/dev/kvm\x00', &(0x7f0000000880)='/dev/kvm\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='/dev/kvm\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)="2d73797374656d76626f786e657431f100", &(0x7f0000000700)='/dev/kvm\x00', &(0x7f0000000740)='/dev/kvm\x00'], 0x1100) clone(0x40000000, &(0x7f0000000180)="c70a9cda09bb517cfca2555cc60298f0aedc918c157f43fcc9fcd2e87d178ea9539e4c9924a8b62095dce7550a49863a4b6b5f036531ff09a50124eea3e8f80f1bd74a080adc795e8379dbd18ea98f3ee92175f209434b0a46b5cadbf7655741c96e562ab17ebab8eb06d58db759bf1b37be6a6ecc05110a94d8afb8654cb662a28565afcfbca79f4212571b88f0360c4fba8a4fe4fd91ac77", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="94ffa50940b57db7b1") epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f000000b000/0x4000)=nil, 0x4000) 15:10:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000000)=[0x7, 0x6]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x40, @tick=0x4be1, 0x4, {0x7, 0x3}, 0x80000001, 0x1, 0x20}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:30 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$getown(r0, 0x9) ioctl(r1, 0x3, &(0x7f00000000c0)="129c270b4fe19145ef705aa67d7fba543e519d0fbc0b99789af2bff0f638baa49d851c384749f9ac39474d9a651c91f550a1424a5fa23a7258551330a6ad54f927fb4f002b95c94aecc1f195233750e546") socketpair$inet(0x1e, 0x6, 0x2, &(0x7f0000000280)={0x0, 0x0}) shutdown(r2, 0x2) 15:10:30 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe43, @remote, 0x8000}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0, 0xffffffffffffff3b}], 0x3) r4 = getpgid(0x0) getpriority(0x1, r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000001440)=r4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) select(0x40, &(0x7f0000001340)={0x7fffffff, 0x5, 0x400, 0x20, 0x78, 0x100000001, 0x7, 0x2}, &(0x7f0000001380)={0x7, 0x5, 0x9c, 0x80000001, 0x9, 0xffffffffffffffff, 0x234, 0x7fffffff}, &(0x7f00000013c0)={0xee4, 0x101, 0x8, 0x1000, 0xbf, 0x1, 0x1, 0x8000}, &(0x7f0000001400)={0x0, 0x7530}) open$dir(&(0x7f0000000100)='./file0\x00', 0x10480, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000140)) 15:10:30 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x2a8) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x72, 0x6}, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1257.923186] binder: 29201:29203 ioctl 8912 40400200 returned -22 [ 1257.952277] binder: 29201:29203 ERROR: BC_REGISTER_LOOPER called without request [ 1257.984797] binder: 29210:29213 ioctl 40084504 20000000 returned -22 [ 1257.997064] binder: 29210:29213 ioctl 4040534e 20000080 returned -22 [ 1258.046818] binder: 29210:29213 ERROR: BC_REGISTER_LOOPER called without request [ 1258.081062] IPVS: ftp: loaded support on port[0] = 21 [ 1258.099310] binder: 29213 RLIMIT_NICE not set [ 1258.104147] binder: 29213 RLIMIT_NICE not set [ 1258.108744] binder: send failed reply for transaction 850 to 29210:29213 [ 1258.115842] binder: 29210:29213 ioctl c0306201 2000efd0 returned -14 15:10:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x4) 15:10:31 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x1, 0x0) shutdown(r1, 0x2) ioctl$FICLONE(r1, 0x40049409, r1) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x9, [0x14b586ea, 0xffff, 0x2, 0x8, 0x6, 0x4, 0x9, 0x3, 0x100000000]}, &(0x7f0000000240)=0x16) close(r2) 15:10:31 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003fe8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x4000010000006, 0xa0000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9e0000, 0x3, 0x7ff, [], &(0x7f0000000100)={0x98090e, 0x0, [], @p_u32=&(0x7f00000000c0)=0xff}}) [ 1258.490059] binder: 29230:29231 ioctl c0306201 2000efd0 returned -11 15:10:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='!c\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000200)=""/4096) [ 1258.534826] binder: undelivered TRANSACTION_COMPLETE [ 1258.540150] binder: undelivered TRANSACTION_ERROR: 29201 [ 1258.670230] IPVS: ftp: loaded support on port[0] = 21 15:10:31 executing program 1: r0 = socket$inet6(0xa, 0x80004, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1258.727660] binder: 29235:29236 unknown command 25377 [ 1258.733140] binder: 29235:29236 ioctl c0306201 204edfd0 returned -22 [ 1258.785659] binder: release 29235:29241 transaction 852 out, still active [ 1258.792869] binder: undelivered TRANSACTION_COMPLETE [ 1258.845042] binder: 29235:29241 ioctl 80284504 20000200 returned -22 15:10:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioperm(0x0, 0x3, 0x401) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffffefb) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigreturn() 15:10:32 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x80000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0x8, 0x3}, 0x14) 15:10:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x2000}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x1d0df44c}], 0x10000000000000b8, 0x0) 15:10:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 15:10:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc\x00') ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000240)=[0x9, 0x101]) [ 1259.399827] binder: 29257:29265 ioctl 40086602 20000040 returned -22 15:10:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:32 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) r2 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f00000017c0)=0xe8) stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000018c0)=0x0) r6 = getuid() lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000001ac0)=0xe8) r10 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001b00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b40)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001c40)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001cc0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001d00)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000001e40)=0xe8) getresgid(&(0x7f0000001e80), &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)) sendmmsg$unix(r1, &(0x7f0000003680)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000200)="dcc53b57c1f15a0fc490c4ef9f5e13302f159438862061d3d736087b96af7b1cdd94fb970389dfbf6bd209783ffff39a694aedf49ae349c7925f2b5891e431277a355d55dc909263b389591bdcae5c63b4881586c174942f1b578ba161c69dc3935f96970a49bb3edf59a04ab23ef761df752c5e68bb323acc6a355baa5e4bda38bd0edeed04df4754645d68a0d6b0acf36ea8ba70f448b17afd77eae8b4032996a5524246d2b3c8a8ae26c8587c6e30a41e565c5838160d2bca3ec4c7966f8bb0e5eb2ef849391c072dfd5179efd322c78afe9dd11817305b1f86a201f5209eccd872730364260de3ac969c19fb48b70a01d0757833ee478da125de59420064121a9250bf5e4df34a71c07b2a5528ff8a4c92f3446ee97258329918ca28e4a81dc744a6dd75b4c552217dcfb4ee32934bb340e95bc73134478329c33e73bd61d779ceb1ec3bbf797712fe8115a3e0ae1f4b792f28de5f84c2328490d8c41260ba861eea3b9a8d0c7cb0b3035a108090717930f771fb1f6632b8f760e53929907d67bfeb65fc10200ecca59ea42f11bfcc5f9ced7c7c33e5e9d65529805ac5737480939d1f870a0fa27bf27ad0b9b25fb66824cb231ce31011840652662204a9b106d6ba5728e402c7214131ccdff8998b6b365496268bdfd9a68700fa7a9f1f7ae1955a8c6be1c0020d59951fb9871d0b377cb34a32a69f6cdd1a5c8e5867e1658a1dcece8124bc9f18a800771056f62a0ea3e3d9414bd99569bde28040fcacf662d4ed9ca0e0684c87c35568b5186233da928f2c55a76b7f3f302dd101dafaf0e4f0acd24187d023202a2dd8204e48ad633cef95f0876e01028e66704b69bc745ba33a2183ee2414872224efebf541764ebea40a9c6d6443852c4ab3d62d5e246c10348050bb8a383b313760d8d392db6a5c59ceafc3a27f3a243782d5568bf429b5797e0fdfe76e43f132d8dcbe79fc8a065511b4b626672e1c53416d7d45bf4c002f14df5bc369b1ceb9915d84e41fde643e758963b16cfd7dec9018ba3156994a2458766ddf43360e28d7ab27938e239c054fd51c5cbe79f7414a22e31ec35d7ac286fefb4e4d92a672d9fd880bffbce77607e48e5087dedd7096e69c07db153d9c2c135e530792bb37d15362c437f400a605b3d03b88d32ac54a8853e43ba54e95f352628b1816db4a2819b8e5fcc15969dfc089157248ff8470d88560623fb3fb4de3e4d1e0c17db9bb984af409074ee7a90bf54656ada0ec4dd4931209baf59c1abe62c086c155e038e56a781264566cfbb185020e62ff70aa1e3aab0baa1b48958e293bb47ebb3ada638476d76e59dd57dd93a21af3d4caf6ea3d78001a7541ef9ec133d61a327764c2fdeebfef43712b33458e7c6112b4f2baee014bdfc9ca3b85a9717d119c211ba1d88690f287c6a08c5b57b698608f829d1f9c1322c0bc8c59e4bfd7b0f4c8fafc829987e8299ddf6a0e0cd354e50c94dda73a11d6773e9eebe65671c910aa4f8f8027731169d4c3b7f237f98e93b5b27073dda5cc4f8d11e773d349e1684a7fd2a55e1cb75998c899f2ce68327269a290fb1e6f198f28ea047d292d1a487695c6ceaf6f06238d3d99bc793b9ea3fefab8454057def4eb87897342ce1a0208a16637c6ed9c4921f1c22ae1ffb7ee26e112e05a5d021128ad8282a8233890d790f966e70f4899b1391cfd2a3e43e52b85431ff8d17aa87b614601a7293d18c3b5ec2cb3c6bfbf7fde5d0305b80264e54d9220225bd023c4c2e6be7ecaad98728dc64cca6ba838987aff2829aba1491ef7722cccaf456b05d58073ca9aa8ca386c40161b271a77d27143804cedf4043635784241e587173e7d3b2e77bda20d766a19c2c6187615ecc8029d5254efb5a0c209c0d6c1bd36c24a3197356e08b66a60da04010042d29e622e43314c4122b26d62f069bc967ae096c3e83f610fa54b672b9cfbda5690970c795404070b8adf5d31cea9c5aca34fa19becc30bf6d575525d7c7d355784fa9e58c5fb15f8df4d90f44a726c3b313d74544d42f8da0117409af8dd1cb76cf1e93697f5f122bc01b01559c927c243e6941deeddecbcfda0c4d038280020615286578c5855ca29659849fe366dbc5bd93e411d8ac60ee29ccbb70b3287b13c1e7647e9cce1c91e4390c771587487f0ce26a43adca867db23827ce8033b0823c3e369238ebd6e72c123a9b917369c5b6671327656661f6b69f83367013129f84272c2c9aad8d0560031591a0ea5e140507271731a64f010d1429b9051c94984d64ea5884dcece98390780761724c1fe5ff847ee1be240091dafeffb7851e534594ba4cfbc94471b3a290e65add151952e83f3cfc6ce18b5da6edd5941bb2f80670793d3e6529eac88e6c53a224985e596e2122b0edd7e435f1f36536729c6d4fad76622b6756b44a3a73bb867f7acdf56f6675fc510399952c87fc5c8cf4a5081805196297b90baf7590a118f06f40be9dbfa995b7258d2cbcbcf10ebd2b7dd4d9b68221d41b534c3afac12683598daeaa1f9ef0c0571a1ae3cf7af80a10d392aea24ce78208d936167a174b97de3838409e5114dcbd53227ad505c80d6f51c3ac375382f58cb05b9fc1856c2d254eeba28304093587043e4c67e2386b6de7abb4f9a9b1fbcae0f08436f683f97354e5a57c26f22f69907047a1e9b9e319b936fa27994dc0fe7773f96f130e1ff6823b195791c8d5ea2be8653ecd57d24e63e5d31204623b683b878e42fb41bfff1f1ca989ec941ef09090d62eac73b641c2447c525447850ff30b0c1109f0ffda4a66abdbfa684c51ab6abce443792be8743ebcf4a6c67d09a19f68396298a74739af11c6d14a22051050c55d58747e78befa942a1f5af5352a562c016417c2704f552a1e9ab1bf743cc755ea7892e1fa189c42039eee02ec27352c395c0d643e5f4cd47d801bb341d2e58329fca74d9df350adb963d6617f53bca70ac86ca3c32cf5a7be1ffff3d3b68d170074add740e73640211fd225d76b3d4ac38d6970da7aca15f8a77438797d191842b72a348baf831c37a502d91685a2bad3335d23a8d0104a218cffbfc7a506f72fdf2620af8ab95735e23f45db5a2efdf6dfa7b5f6537b1cfa53aab14c755fb1374807e6483c83f7020ec97108742108dd901ebfc637b1c8fb34026b9591ddf9fbc88f0f431fdf10f8c7b3acbe155e0ba34f108e454b6c6df9f113a7f867587d4ddd8e4b9f5daa185ef546741ccdaebd28ff8d1cccc21d1bb6db0d22d96b1c498137d6b42fbfeccb8c49f20863ce674b1160f80dafff77f2b80fffe1ac7143bd1885e90219466741ede027d4bef158762432fd169e5c9110475f1b0bee9c1069980975982197f6bc39efe41b471ff187e836f7f754ff8155df11d0294ff25efcb5bb878a547d197c52e0297d11af93833f9e5f086cc3f0216d4c81c03c38f087b0ab30cc756c8c579db4728c602344c87c9c0c4b6f8b3d3c6b4f27c65a099696d02f4b159d920874c6ac4f65923cf986a7bb418b3b2dd2001df43e231188cbc2f297733878fd21e962390500e3098b3d1d09d875918e2936b2b1adadd8967a8cc8fb116ef22b2e7e625c3c7be38fe59b789f8d7d6aabf72404e3143704ad93cd59aca5deef014e6f7ffe600d25e4672d437237b0fe966bc8c5f48643b3de8b5b8e8a8ce081eebc7ca97e8cf9933be98d1fa13d304bb8582e2338022cf50fb6a5dea8b165c598e0bb3fa244402634b811ddafdbf5d776c20546ebaf68481e65dbf07b28f21ff13194e4bd24cc50751e8858b32fb5d99141870c7e937b500722cd8fe6ebfd0bcd61b98543bdf123e8e00b401d5ef3e97b144a779da84632fd3a454d2a634d32a5db5e5c4d650f3197545a1449a0258067b7f11c4ae4c8e2ab553c4dd1efcd3ace4a19a520dd44b8b4339f064fbb2c089947537651e8ccb5e9f0bb0c432a87f04ae56f28f20778f80784616c70a117b26d4818c20d0d78e133312ce37075c5b9fea2f932de641cbb25b6616d786c7c06a0da39a38269f5af03ee62f5c2818ac0cdb7548089a1346911da3e9aaf08d22bee4ca66dcd167560ebb9275a9dfccc8de5d0a72369ac1eea93ccef956bc57e27e2b4a7963cd52dbb327e4959b4540ba5c4325e4f48f40326bf59873cf888d8f187e3e994d4aed14d9422271e41c5390c30e33f673443426ca87d56f07cfd8a499cedb918904f9c9d34527804c5a5709bd0274e2a5ba8ef663475128c3521c83cc3fbaa703c66b4f180940a159bc3f49299e40ae145b80668863e94daacea5c912affb76636f1098db94be44a371c308894e0e507f8ee58effab27d47088e9a133d8750be50b851828e9e6490a7864eb9cae20ec511729fb5eac9e8d8250bb0f39bfec0fd60f1759576f8a908d0a0d569388a3c72a8834cff3a30fb7cde481308fa046a162e2779dad39e9329bc1dfafd5a5caf029a390a05468721c6e81b57788519e59a37a0b0bc8e61169c4b3aa48f765234a5f649fb12226fc1cb91654292118d0842d59cb7d1b21ae801c9e90ab7ae049d6821de320d271131c84b7200f1545f067779514852234e5c0fb1d2c3132a581d5b5ce065d145562027e0bb8ce75de57e39d9b3f0fddc00659da53731b97e58e06794f8b72a0018eccd35519d85e420f07974b1180d9b43be7bb699e629f2e4750b142814f26db49bf1992af5abacdf5872a03f21462a4fff97ba55c13fee8bd39e235fe9e8d6e8a2ae30cd06b661cc0e49b9da554b1b2707bac7f2368f4da5a3e1cab5ba39c915fef8b3fcb96eb08bf09e5b753936fff54d3e9766486dfe692d5c1da71f716f450b03dac3c06835732ebc00132a3d46737aa23cbdc5562b8e4cb3fe545bd662efce8f08b7314559a005b70febf8fef09565944d1c361049661d81e419f5c9bbe0b5970a9c14f8f454625a8ea73f2dc65e7bdfc5180ff6d20b826023884bec2f02e3b7c5200ab5d7d1ee5a208aaba85f9ebfe48bec615129ac24b73ddceab057534d6e267e28b9ad67fdb50666465b4c37373e826e5dce69139824ccc71db08af2443b6930d38307bbfd154ab0b55944e5c961a709c6c5d2eb09b42b9fa555bb4ccc34b97292853b88fc0004d8417a7ce0fe4e72256f909a6cad4401b042eb79aff1a4952483617f051bdae2d4336385ad502604f4854e5f9583e97cb46523f96d4c55cd317975e54f177e147f39ae1fc3d5a29a298d9b5a4438302eafd904f73f4b9fadfda15144ec7bbdb563e9c2df1bf8af3fde2069cf9622be4a5ceb233ffc0233dc60253024a38c3ba96de4c9685f1a61a505996f4593570c9388ac85b4f81563eb2c908500b795ba00d444ca5d45af3ef269af71180c77d4a42b9cde18115a4149de7e72de21fefa43f5be9ccb4f5507473135d6ce4ac01f9348736d7c8e0f72a0836fb22d7f9b01761529310ed6f1f61e3c540ddb25075a05b0820aaf750daa1d33f114ab5124d3782c8d716620da717beb3c00ee1bf080f8cbf2518369ae33a01fbb43c18ae621f519cdee2f381ba84e8b4e8645e4002002f7c6a11811aee950faa0221db81834289dfa8f63e8f4f6bb9e7157f1b8dd3ace0e580086c272067f90dfef57588df21a83eae42c0eea1381d47cff06e8de46636fadb2d8de04ac9be94cd0f5c0248e238383db187d3aa99a14ce1399420fa9e2b8ef440e6362f535757dced2644f571fcdb5f2f92f9a5211b072bc135d6b941e6cbab7ba2bd4a7e633af09211db377c09d2a9d637da5a75d7ffec7e8eba3e31449bf6a7d70d66f935c2", 0x1000}, {&(0x7f0000000100)="0954eb6d26639cbf85dc49ab07a31cdbfdfbe99b1f14843f29eb72618e22bdfc98f37e4a168d1996f5989867e851ac0d01852a052dce4d4a38f00efa4a4d978dbd0f6f74f174e98ba9820a20dde146759afb2e912da48d0736384e9220e563243094ad0b8411b86d17355f317c0831d177c33c3ddf3a5dc302dae794e13ace0edb8d2031f78d4e18500e43bdf316a5c049c8fb25d6f54842db38f380545ebf412c3b11aa6c32360390409a12127ac7679b9a", 0xb2}, {&(0x7f0000001200)="77d3854d307db038ab362a0c014191c56ff17d415fd1eb300c8131aa47e06e8d2bd2244bf484fc311b7988f1b1108082f99c3a2cb048616ad7eaf53cc0dc4abb05a8975b1720782b0136b65274d40f90327c997e28b753ccb7fcd823d38d763682b21e15c48e12b458ae95369e092de7c4e8df3219120d59a0a2847ae3353718f70e2f3a0a36804f1634cb", 0x8b}, {&(0x7f00000012c0)="86effa82439bad642257b632438fb744f7abc93cc983d48b401b00b83f25b25c81243d91fc26981b13d2fe98b39ad0f0b52c2f090848b9099e43c7bd431eae460515f59c6a6a1a999a55f01c8d17eb1ae05710c3e9fb8b0f3e712f2f5422691a9704b9e9c9fd5f20a768b8bdff442c6b8e147db351f2264f4414345648eade24f2d182b662d4b8e964c6b8c6c4feb8e12712cddc189ea958dfe926820910cbef1e1dd0ecc1c58412cccb218a076d57e70a5bb0867c85f66edd2e7933ec3d1ff815876d8d", 0xc4}, {&(0x7f00000013c0)="b96d59649557b0f19f6304d119b2c8d17f0e30b9de40cd95cf69d66614acc436e0953d758e854f7884d4d96366a629b07c4cfdecb17dbcf6ed07e0ef2fe989b0e2356ccda4ee0a2eea607c97d290a995e326c4fa693b987b246b5b4788c2a5cc8093e438dbb63b0e4d7b96a97cbbe898faaa3590fa30a7181b064345c5fea1e121f1f0f0d5bfc949b373d36240d55b7914e3e8ec7ed99c875f0b54409c6d6b05abed20b8a4c94f51fa473b91c020014bf1408cccddee94f138efa0ccebcb875157cc4c4605cd0c261b032c2e45b93dbb4dcb9f94c7a2521fead8b461e62c27e1674cf68fe6ccd20bf1c6146512c7f9b805662a8b63", 0xf5}], 0x5, &(0x7f0000003740)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0001000000010000006cd22b7d02720a9cdb43392daa02ca180c4518ff657ec09746aeaee05d45c5722828c08b2971245da6ab93d9436a5248c88d2d57c985b541528bda8eea143064", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x24000000}, {&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="11b1b7fe7f375ff807cd759d93567212e723e7e1ee3e9940a90d89868a01aa280d36a384f763de3e7b93f83050b860e8afde", 0x32}], 0x1, &(0x7f0000001f40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xe8, 0x20040014}, {&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003600)=[{&(0x7f00000020c0)="53f12289c54f406057d41f0d36aec8169a05c87fba188271ccfa35e80342424cacabf821376f1868bc01a021de8ec8c102ba2ad467ca1da97a181d8ad9191598a625b2605147a340fc55d06a01e431232d3bfeb0ea0dce3eac12c60150ef4c3a40e64f7065e65f670456c989b54cda525d53afecc28a2affca8f33d8c92768c902897780b2c7945439552791da8aeaaae4a77715a582e08b69ca536d2fc6ff92399ff529e8ba3e8f3995be66ee78538285e6b6e763254091", 0xb8}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000002180)="311bdd672a2fc4991e761e88e200b6fce809ca5f79195e6b3a99f86dfcaa5d069dba986551141ab12dcc6a5846af7c89cee3bce0200c3189989aad161d98a364ff030f9e718097d5342bd9e9fb3de131caba930cb2a6b7e6f3e21249e80f6803339d605715c7f776e9baa812e6c442de19474fe7639beffe09f6bfe54963f292c2699ac92a9be851cb1c27d711623334be302eba2fa941e9c6cc6c4b5f97d85ca985a691184a05889c3273b50ab8cbb60cb248b4133cfe29d780ec4ff5395a66b331940a5cf8272ac7fcb0a87444e6dd774efeaa00a5089847f3953bf3b13057c9809e8f68e64490cde3c6e80cbef5aab12e4b7cf7", 0xf5}, {&(0x7f0000002280)="8e8b56b3cd2b5598dc7314f00878cc625befd208947cabf2172c6fefdd139e508c2b0c45d16e4284ae7fe4caf11169ee115f280ac644390fa3c81a7711c791c0fa23d7191abf7dc1a933a5665755a02884766626574aa61e367f8426c7b9ea52b6e94b59c51aba4daf6cb08943245e9925cb392290b093ded48386c7f77f2b5eee9795af04062b21df92a25feb0af064aa522f06ec1461d50f5f47bd3e346cb13e7547af7cb2a2d74c0271c33d2198ad51dba8af4301", 0xb6}, {&(0x7f0000003400)="e1d0cb633fc456d53cc0ecdcb1f5cce7d546f9c235d5ac0c7e27283b7770c6898d09efa9a52f83910990771d2b8e434dfc8587f8e2025e8a864342b7db48192e6a316848a50cd9ed30d20eb7440c107e838778b379a42939b2101082b5edb6ecf3553ab1dbc9bf3b75bad33120e670680520e46d1ac5e9154d849958567db8078b66866a8c5677d8f231d2d889e461449a752c1f2bdb5519030ec70226b8c5a04c16f1a9aa24bc38931cf72dda40d83a13e7ae568b5309c8d4722e5a7c16a35679cc2aa3a28f99321e3936ccedb731996de8d8db1230592a58f0dc5e818ff9059b72c26b1d9488fe58684d9f90", 0xed}, {&(0x7f0000003500)="1efdb83ed609a1dd175f42ec5de36c92e00e2469f4088c8f632490beac050a644d38e5935ab6ad117d4fa6b11f8f0f1336bda995b234dea3cb63718c2e0933302456338a91f7fa9fb8e1a1da515f4d737cb7b4313acbc82bf6d1a3da8f37f29ed4fc4ab24e2ea80b60e5ddc682fb19c2c7389ab5b2a37baa25020649dd1ba0e881fdb133d90691bbeb1e2e1718fe5ebf66af218a76b30cddab89774b89ad4639a51bce6cae1d245a9fdb3d91cd34958f8f176d5175e169e170b7dcf358be9438b43c1f6a750d7fab0b9bb174d8cc5804a903c4c2f4dcdf35", 0xd8}, {&(0x7f0000002340)}, {&(0x7f0000002380)}], 0x8, 0x0, 0x0, 0x4014}], 0x3, 0x80) r17 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="9277e29568f7433570e6675d537c29ac50e53ff4d5cae71da3d3a515a4b05624d46ea05f8976a504e5cc4dc28ebc4fe2ef08c0fbf270a756635c979a4b623c5aa65b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1259.665508] binder: send failed reply for transaction 852, target dead 15:10:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) 15:10:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x400) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0xf8, {0xffffffff80000001, 0x4, "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", 0xf2, 0x9, 0x1ff, 0x8001, 0x36c4, 0x7, 0x7ff, 0x1}, r5}}, 0x128) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000340)=""/189) [ 1259.931621] binder: 29280:29285 ioctl 540f 200018c0 returned -22 [ 1259.984390] binder: 29281:29283 ERROR: BC_REGISTER_LOOPER called without request [ 1260.037406] binder: release 29281:29283 transaction 854 out, still active [ 1260.044675] binder: undelivered TRANSACTION_COMPLETE [ 1260.060850] binder: 29283 RLIMIT_NICE not set [ 1260.065606] binder: 29283 RLIMIT_NICE not set [ 1260.070204] binder: send failed reply for transaction 854, target dead [ 1260.077112] binder: 29281:29283 ioctl c0306201 2000efd0 returned -14 [ 1260.108230] binder: 29280:29285 unknown command -1780320366 [ 1260.114126] binder: 29280:29285 ioctl c0306201 204edfd0 returned -22 15:10:33 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x81d7fe5d9c64511b}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000000240)={0x0, 0x989680}) 15:10:33 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x224000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8080000400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r2 = socket$inet6(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150007000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xb4, 0x1, 0x3, "f49147d3d4cbc5b2399a7271d6e092fd", "da5443a415d9a691eda4dc23e9a81e3cafccfccb6c0fd4c7fb2b6fb956dc8fea25aa70e4316d25e77b0a94ae99532fcacba94209468ff489ec4fad11d11d16ea190d9fe31ecb9a601857553c2f36ee09ca51d4f1c9e503eefe72551c394198b5ffe66f7fe77776cb8698d8c1cdc11f188a65fe94a6015ef637c7e1ce57babd99071331d58c9ace083676d33fe188af2f7c9cee2cd8c3d257701fd7e0f41b76"}, 0xb4, 0x3) vmsplice(r0, &(0x7f0000000040), 0x0, 0x0) 15:10:33 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000001c0)={{0x7, @addr=0x87}, 0x8, 0x3, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x7fffffff}}, 0x10) 15:10:33 executing program 0: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x200002) ioctl$KDMKTONE(r2, 0x4b30, 0xfffffffffffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000300)=@buf={0xb9, &(0x7f0000000240)="2b248ca90d92b53f49e83cdc074e4890f1e52e5684b22a604bdb661e86e44fdb8cd56eea6f2d8cd9f6089c924fbd6c3807f56cea2b79c62fdf00fc7308e1fe7d38dff90b81df250a219768cb814c8764f3cc999dddb584bccf34d0cb56200de53db4e1eda69d2ebb4bf0750a5981183bef2e4ba65573ec2fe7a66e87983efe92e4c88ccdd63404166c84a52d9ebf824addb093c52d4b77471201bb83e0cb87d43832201897d7192cfe256b965058565d4eb97033483a1285b7"}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000340)) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000000c0)) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="00001e07"], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000400)={0x3, 0x3, {0x2, 0x3, 0xbb2, 0x3, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="116348bf34dd1afd1a40"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000000)={0x8, 0xcd, 0x1}) [ 1260.624890] binder: 29307:29310 ERROR: BC_REGISTER_LOOPER called without request [ 1260.668398] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:10:33 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x111182, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1260.728114] binder: 29310 RLIMIT_NICE not set [ 1260.732888] binder: 29307:29310 ioctl c0306201 2000efd0 returned -11 15:10:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x101802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000040)="1b", 0x1}, {0x0}, {0x0}], 0x10aa) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1260.922170] binder: 29317:29318 unknown command 119406592 [ 1260.927926] binder: 29317:29318 ioctl c0306201 204edfd0 returned -22 [ 1261.004640] binder: 29317:29318 unknown command -1085775087 [ 1261.010551] binder: 29317:29318 ioctl c0306201 20007000 returned -22 15:10:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r2, 0x66, 0x2, 0x900000) [ 1261.131261] binder: 29317:29333 ioctl 5603 20000000 returned -22 15:10:34 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) finit_module(r0, &(0x7f0000000000)='em0,+systemcpusetwlan0.![@^cgroup%\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) sendmsg(r1, &(0x7f0000000c80)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="19ac422bcb3f44cb2f81a7e5d3b12c3c69b05fcce13ae0b99d791be0c058eee6cccd19b7f6aeb0477fe7e7b96372db700828d891a9063d19e0d687dad16fe1414042183ef12970e0aa603092ebf30d4daef69a3810a33f471e684b5a1a84b2ba3efeb3f2dc086e8923ee3eba03376ae43765f3d2ed8a91abb5df1db9ce98656672c11a4ddb38a63b0d18d18ea0ee00f5fc746ae22cb59e4859ea1d", 0x9b}, {&(0x7f0000000480)="fb0dc93c051a0883181eeae82cf9ce3dd1f18a3900ecf881918a5fcd025c2e9facc1a49597c3245a523163db2ebad1352820752ab7acb6eacd4629886b1619425cdc65b36c481c1788d029d6e54e4fdb4eb928aa0fc7615c680faebde3777e89be1bc7bb87a6de855bc26e7a6ae7c94d15a8a07e46f1c040f27fe3d3966c597f2de405250dc51a6563d23e89722805f4988a66fc102c64c19925d1eac8b1d8d7c418351a316eafe9c49ab145c77f7b105919c6aaada475603b4f4dd6c1703a677fabc004aa93a3f2d450d17a6952366529748415631cb4b32daef25d985d5722", 0xe0}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="7415ab773b56f7e9fd8abc703768b9978474966c068372cf4c4c5aac30914b9cc91ec0d6ed06b1a7fa29d0f995254fc39cd0b571396d9c7d1da8dc27d20f95a4840eaa83c631b8505e58f9a47d4577c34a4248e2eec0902890f0965735688022852e4eeabf4ac72ea3aba35f503a845b1fec383ef628d300e3d5e1838595fe7225", 0x81}, {&(0x7f0000000d80)="bf8c8d91ebe8952a7432d86d7d52f875dd7c3441792bd9edec21c3fc9aa81b0240077bae721f0e172bfac2451bfa6cb279132c77be36576a8a48e41c4fb3e27d4d25bb45f66dba7a8fe38cb0dcd34390a7f5408f1e0fab73c609d679e3ba2c6bd0f5bb942167a4e85b1fd08cce83ab71c9ec5b29ab244cf5429ecc5aca65fbac95da17fbcf3393ababd94f1f87b22f8c4dc331c959dfccfdb250a6aa", 0x9c}, {&(0x7f0000000740)="41cc37165dc35a9909a3cac95c400966de3f3961cc2bade40ff849182ccc0a59d8607727a0b4878c138dc6e1832f15b95f63e4eb86e8c4be6c66989353fcf07e55fbc04e311691e692cca04aadd72476a7d5ddba", 0x54}], 0x6, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x420, 0x810}, 0x810) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000cc0)={0x0, 0x40}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r3, &(0x7f0000000280)=0x3) r4 = fcntl$dupfd(r2, 0x406, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e40)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8) r8 = getegid() r9 = geteuid() lstat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8) getresgid(&(0x7f0000001240), &(0x7f0000001280)=0x0, &(0x7f00000012c0)) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x881) r14 = getuid() r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f00000008c0)={0xa0, r15, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x5) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f00000013c0)={0x3a8, 0xfffffffffffffffe, 0x4, [{{0x5, 0x0, 0x9, 0x5, 0x800, 0x0, {0x3, 0x201, 0x5, 0x444, 0x78b, 0x80, 0x1ff, 0x9, 0xfff, 0x0, 0x7, r5, r6, 0x9, 0xfffffffffffff001}}, {0x0, 0x3ff, 0x23, 0xb62b, 'em0,+systemcpusetwlan0.![@^cgroup%\x00'}}, {{0x4, 0x2, 0x0, 0x9, 0x81, 0x0, {0x3, 0x80000001000, 0x2b0, 0x67a8, 0x3f, 0x40, 0xfffffffffffff820, 0x4b, 0x7, 0x8, 0x8, r7, r8, 0x6, 0xd19}}, {0xd1, 0x9, 0x0, 0x88a}}, {{0x3, 0x0, 0x400, 0x8, 0x20, 0x7, {0x3, 0x8, 0x1, 0x1, 0x2, 0x9, 0x28, 0x17ca, 0xf242, 0x3, 0xfffffffffffffffe, r9, r10, 0x10000, 0x1ff}}, {0x6, 0x8, 0x23, 0x5, 'em0,+systemcpusetwlan0.![@^cgroup%\x00'}}, {{0x3, 0x3, 0x20000000000000, 0x4, 0x5, 0x6, {0x1, 0x3, 0x6, 0x5, 0x9dc7, 0x3f, 0x7, 0x50, 0xfffffffffffffff9, 0x80, 0x3, r11, r12, 0x1, 0x7}}, {0x4, 0x6e, 0x23, 0x4, 'em0,+systemcpusetwlan0.![@^cgroup%\x00'}}, {{0x6, 0x3, 0x63f, 0x2, 0x8, 0x165b, {0x3, 0x80000001, 0x1, 0xd0, 0x2, 0x5, 0x5, 0x20b, 0x101, 0x2, 0x2, r14, r16, 0x7, 0x1f}}, {0x2, 0xffffffffffffd428, 0x23, 0x100000000, 'em0,+systemcpusetwlan0.![@^cgroup%\x00'}}]}, 0x3a8) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000a40)) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000b80)={'broute\x00'}, &(0x7f0000000c00)=0x78) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x1, 0x6}, 0xc) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000b40)) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1261.480967] binder: 29337:29339 ERROR: BC_REGISTER_LOOPER called without request [ 1261.491419] binder: 29339 RLIMIT_NICE not set [ 1261.496517] binder: 29337:29339 ioctl c0306201 2000efd0 returned -11 15:10:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) 15:10:34 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6093, 0x100) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 15:10:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x4, 0x2e4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xff, "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"}, &(0x7f0000000040)=0x107) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e22, 0xfffffffffffffff7, @local, 0x6}}, 0xf000000000000000, 0x10000, 0x9, 0x7, 0x19}, &(0x7f0000000380)=0x98) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:35 executing program 2: pipe(&(0x7f00000037c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)="7bad5b78", 0x4}, {&(0x7f0000000180)="2a107cdc64898609cfcd4ab4d405a136e64d359ce3c838104cde88858429b42fc11a6f34feb4423a67180e378379ef4e514014fa4d01b45d463aeaddac1c99df05efffce67fb6f75bfdc8ebe2866da3e381c48c9cf65f40f13a060fbd6f4fdc79218648242955dc593f1aa8c05ba858f9df3c451", 0x74}, {&(0x7f0000000240)="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", 0x1000}], 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1060, 0x4000800}, {0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="05f18e50395122b046313af6ec7f9c90f6b7b1b3e5c227d11eddb42d564540f65c4756c77152a2e9533cb278c8f6536c2373904676d78c96f1a97e73937449136cbe6c3fd1a311dfcb", 0x49}, {&(0x7f00000026c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20004004}, {0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001340)="d7a0369c6580374db4c90e738db7ba1203ff5b6c1289bb1799ffa29e771a088de1fcf88558076a6aace7211f326dd25f468a9410c9466b52a8293998c1ce995bf067694cb148416bebbc6e00593f64044bbcf1e820ca3aff49d613135e41ed400b1c37a072b1b3695a488dd4124991229500d25a", 0x74}, {&(0x7f00000013c0)='Z', 0x1}, {&(0x7f0000001400)="a182b5c765dae162e992da078d5af1a0b55a20076922f5f86d4c1c20425a9a9286536883b96acf61fa3ab2509f17394abc3bca4c5536c22c24fd097ce6b56228c78a0448420d35f8db114405fde467fd10681876b26241767126bce575962fb63e5178ebe80919ab87d1cfa998b9a10cfa330b439a635b1a001e28492ed0444883aecef00670a4052300838e2147645a49e40dd2f8650f86160647bc064e337715a5f73f3e4900747112fa713a2eadec274de69f36bfcc4cfa3dc865fa59083a31fd3536173d62480f65561d11a25d566c2b300660d67cc4aa1736ace200e7e8ee2edcdeb750d15562b0", 0xea}], 0x3, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x3a82}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x4040080}], 0x4, 0x40) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000003800)={{0x7000, 0xf000, 0xe, 0x8c3000, 0x3, 0x4, 0x7, 0x6, 0xfa, 0x8000, 0x2}, {0x112000, 0x0, 0x0, 0x0, 0x81, 0x400, 0x101, 0x6, 0x3, 0x0, 0x7, 0x3ff}, {0x100000, 0x1, 0xd, 0x7fffffff, 0xf12, 0x8, 0x8, 0x3, 0x8, 0x98a, 0x41, 0x3}, {0x10000, 0xf000, 0xa, 0x16f3, 0xffff, 0x7, 0x401, 0x7ff, 0x7f, 0x408b, 0x2, 0x1}, {0x4, 0x3000, 0xa, 0x1, 0x3, 0x2, 0x38c9ac55, 0x5, 0x80000000, 0x7, 0x6, 0x7}, {0x0, 0x10000, 0xa, 0x6, 0x4, 0x1000, 0x5, 0x437e, 0xdf8a, 0x5, 0x200, 0x6975a144}, {0x1000, 0x5000, 0xf, 0x3, 0xf34b, 0xc8, 0x81, 0x1, 0xfffffffffffffffd, 0x0, 0x8, 0x9}, {0x16000, 0x0, 0xa, 0x100000001, 0x81, 0x3, 0x3, 0x5, 0xff, 0x0, 0x2, 0x8}, {0x10000, 0x10f001}, {0xd000, 0x1000}, 0x10018, 0x0, 0x6000, 0x0, 0x6, 0x2001, 0xd000, [0x7, 0x8001, 0x1]}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x6) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003940)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000003a40)=0xe8) getgroups(0x3, &(0x7f0000003a80)=[0xee00, 0xffffffffffffffff, 0x0]) fstat(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='fuseblk\x00', 0x2, &(0x7f0000003b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x100000001}}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r4}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) [ 1262.190369] binder: 29360:29361 ERROR: BC_REGISTER_LOOPER called without request [ 1262.240792] binder: 29361 RLIMIT_NICE not set [ 1262.245708] binder: 29360:29361 ioctl c0306201 2000efd0 returned -11 [ 1262.333141] binder: 29366:29369 ERROR: BC_REGISTER_LOOPER called without request [ 1262.375995] binder: 29366:29369 unknown command 0 [ 1262.381044] binder: 29366:29369 ioctl c0306201 20007000 returned -22 15:10:35 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x2, 0x4201) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000640)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)='\x00', 0xffffffffffffffff}, 0x30) setpriority(0x0, r4, 0x9) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000340)="8fea1e3f336d26d611bb26185115631acfcfd84696067622465361485b25a487f280f722c0f86d287220cc2c10370021d75745ddf67347ce5bfe4f12009b0d391bfe7f0879a97b8206749fee135802bf7981ecaa94c387d8a838335fb02ec96d4abbebaca449c6bca576421366b75b86c0fcb1902beb9f678ec2e79b4378573ab9185a685945eaaeaa713ed009b99c71a8a9f9a14fea384edb213471e32d17548a94d673ab875d9f0acdc9adffb538e232e06b482ecd367bb468d4dec90ab5221bb5c61531f1237ad64b2c4b72c52d39b839d8d35082c1f611e200622a21e77b6d3c053271d4fbca56ef5c7de01b15d3fafc6f90048e", 0xf6}, {&(0x7f0000000440)="bb38c48e6c78531f06dfad2e3e9b6cab147ab6037c96635e7ed7b708099c0377e15160841297af90185c3fb3bc7f05c9acfdf7d078e0ef75390db05a0123dbf191fc9aac6709639f41cd913481bc2b3f804051b1eb2683f7bf6a7d000c7f3e95cdc89f871a6d0f302bd8a9ed858381d7cf8d8f7f9ef0075014ed7f2c5999f007f740ebaf162062c8753da58328be567d9d7ed403f37b8940f174f3874246ba2c2f3bf4aff2fae21650058d400a408e8f4cfbd3c1763e0ff933e89d9e48f7769aeff9c3f75b819cb3d923f3dc2ccccdc4298212e7c858ecc519ec8dd3568d1c6f01c42e56bca82459e7b32216e03ec6c5a975121e101f", 0xf6}, {&(0x7f0000000000)="fd201e5efaef42cf150270fede493d855521aeb459", 0x15}, {&(0x7f0000000240)="a1a896e2b64b2eb4a96f00228ecd73984a3e5fe2ffb5102b2d1ecd8d21b2ba1f2a4ed6bb6e9c622d462be672bb2fcd13184ecc14e4451df661b938c45d9f566e0f5385f02a9e3ee5b1e484680d14b833eb912698e1b66d15ff9eea26e391fabce51ab5eb343cdf08726fb063a8cad53817e9b42325e3884736ad789a810b10d3245123af38f8b90e533318caf71955cdaf7f6f102d9787c0f9ee9d02c44c2fcb1e4e4db2b1736303fb9951c8e2e8c7c3acab018ae489cbe4df8c", 0xba}], 0x4, 0x0) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x4, 0x946, 0x8, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1262.422489] binder: 29369 RLIMIT_NICE not set 15:10:35 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x40) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000080)=""/114) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x111400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000480)) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="76d8cff78edb90983bc61019805eb12ec3653343f14c5e29a046e6cd1758f1f1f9fed2c396ac5683e522492f28dcd6a00d3249ee4d7956d7e9c0a01a255e469597995f2793f7685046233c0d9747ff6b69def335a08a7464b33957d66f79965818393815bcabc72395881aa7845707d20b2ab5199964b665dd6f70309575eaae280f739d55a51416d3c7fcc869e0c3f23030ea", 0x93}, {&(0x7f0000000240)="e78dc6c29d3941b44286605d4f523b3d919131edfab534be52e570ac3b0fba8ad1f20fb78a12605fd0f6e6833ce2c6e3d3d97977b2e96c93af513b80fdb5654d4e57338f5f2096929432922f16b96ad9fce3d98c1226b05ac95901bc586658e0d935aafc470d8ee11d47c3090ca677486efa5b0eb2fcb8c1949508a5671f5efcb400ca7fd54499e0e74c29b0752131955af0acf6e7a2864f77e0", 0x9a}, {&(0x7f0000000040)="c03ac1b7dd2c64caeef4c44cbb9f6193fc725f5ae7e494d565", 0x19}, {&(0x7f0000000180)="4880f61b5b82ab3fbf44198ecf5f956caae8815956fd5051ff45294159633cf1bc4a9b9cb5f6da163f", 0x29}, {&(0x7f00000001c0)="97003e868bccb7dbbf062088d6d6c5c442", 0x11}], 0x5) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000380)={0x0, 0x2725, [], @raw_data=[0x3, 0x6, 0x5, 0x800, 0x7, 0x100000000, 0xbef, 0x4, 0x7, 0x5, 0x2, 0x1000, 0x100000000, 0xfffffffffffffff8, 0x7, 0x7fff, 0x4a8, 0x82c, 0x5, 0x999, 0x7f, 0xd747, 0x5, 0x9, 0x101, 0xa8ec, 0x5, 0x7f, 0x974, 0xdf04, 0x1, 0x1000]}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000440)=""/33) 15:10:36 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100000400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x101200) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:36 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200001, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000340)=""/227) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1263.253556] binder: 29397:29399 ERROR: BC_REGISTER_LOOPER called without request 15:10:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x3, &(0x7f00000015c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x954, r1, &(0x7f0000000180)="19624f0e36658c470907ee3f77dbcd8c9ff6e42e3c05bf42cb3c2284eaa76022b0e466911774c6acb0c3ab49d2502100a6c6093b66c9849b04ea4e01b9660087dd40e3276d73b5d3d13c16843e4ca2f4910fb72e98decdee89f413", 0x5b, 0x4, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, r1, &(0x7f0000000480)="9b71cb5ea894bda9da3dc6877d6834c56780211294288f0c86c434c406e4d09a38323a6364464588704da6ea130efa5a99cdef155cede0853df6e0fd4c26e92dce7ea8283549afd4dd99f41a2a8a602de58cfdc0937ff5511319889345dd066cdc5c95c954cf28a0d6b775e2a6152315869c9acefcb660fa312a2c8bbebbfcc2658f588da91aeff49e459675a9298e4c278bd44bb1bab2cb6acdfe813932de2791d3efff776317", 0xa7, 0xfff, 0x0, 0x1, r1}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000580)="eac35fec2be0d4768ad7765981b94891b02ee2adafa3f366bae1d3c90654ad4e745e4c3db318d1dbf7e2dd2ae87ad925cb7a20c6da729026017453ec06c2b8f83fc13d02b451be5a8366b3ce275f9cbb85bc8509d19410d67d41d84c5d0ccb6fca077554de4c5b0b29fce656ce88d67ade26c28f521cfa475543395737a51071a6bb87265d05a4e19baa9e63cd3a2987bd94ba8be1b352a7e5526dd9da6245935f423d682410552d197fe4ab2bd369751f164a0ccab95d2c6a5725b5ac5ffe0bd22544d386a67e04e7f41a17e4877965374e280192f4710b2026859a63b4df6fd059f4a32af6f2cfa8be1131de3e30fcde4c073da6c8a8b9bc0d6961d36e592204ef540b8d719a2ae331ac25d55d043d46397ebe56a7061006156d3a7e6eb5383c770cdb110bbc55b6c81739564d5eb43cb3d6270b40b8c7c0261fe2ea2b4515485065c827fc23748d938cc7b2b3727ca489938e23b4f88463becc7c52c364870a8676ec0a597151b9a4ae4b0130de07854e45c1f7d3dd6ac35895c424bc12cb8e2b6c49fcafc599dabd22aba9d4ed3a9b1802620ca904d989371b69c176cee63198d181135e1b876d4dd38eec6f8bd59fe506722d2bf425c752b11f0e8f19affe8f63f1f7ddc75787042415cb094cdf90101b24d0d3cc6732b672c33f1ad0293a14e71c1cbc7fd13906b3835af633d5c0e4727c376fd3f83b841ba6fb320d589cb4037d204ddecccf42aa032fcf25b91c351a81974b2c97ec49c104b37f78f432e57f1533ffd1945d2da141862f286803a7440a5c4a3d9b7d479c0738cdb076f3d671cec63d46882bbfa7bf5d6c55088e191f618fd0d42905167c1b7898115d3f0375bf6ef82a825bda174e369b5415b5ec34258ffdbf2c328d6eb4a0af7e5265d18cf9dac8aed54da0827d3efde1de46aef246bc8dd6c70e2ea9296d61cc2cfbd91bb6b4ca03873f3c0543c95e3253a3b6a2a315243499c8459a309ab7de56dc153ae5be88371e22aea880a8e509f7d5c01eb60df1251d9ac15b5cbadb7bf29b1836792a75b46811d01a40fd68a28ebef4a0c9cf6f646524a6e08de6a0899217fe4c978c8d9ded782030467965a72d6ee7c1ce367d794923f4f757622edbf8de6109a128154f148b0760a68b2de5af425ae7120aa40bf2bae2c804f5659ef9c1f74b6f014e1ae55a8e797a4569ca8fc3fa1318976ef7029694207a2eb68f5af8e324add32afab75ab13c51797cd55796bec1cb6674083097c91496bcebd3918cc1c745304c5376f549c7c402ff64bb053bf9973992906ffb6d836da98413292fab771943df01635a9af65cdce0de71b58f673e6bac4e67460cb958062ee53cd919a3acfc8775ee3d77919c6078be63a421d631b89bf3fa76b772cc3cbab19722410a1b65d38a00dbbd6d0530a715160b9d7a42222e4e3ea02d3adbb6cb4fd3279075b327ebf6d1b3f734ccfc727629781e7079c281b2653f2a403ed59315a5bcd2d8b8acfed4014d4809c261af0e6c08fa86d974f57c82cafecaa0c15c561fc32a7704cf897544f86e6622fa293b5fdd337382dfd447556a753575ac53c16644c7783365753ac6454098504a5370ac901364bbf800c1e6011cb6f0d1f171083d16d3f5cb3809655e380a9bc6e554d638d1cc238f6ee7d1be9151ff92b37657917709bfd57f1abc2ea32ce0d9fe8ca1434f0d07e91708077ad6b56ef4ed3d1d752a4ed537952faa415e5af0f35b439b280d3f33aabcb4a87bab2b324bdeca2435301ab0fa6770419af935b1c91d99f7461588c6a83b9a982e84e6db67fdd411f026532e0c26b68d7ba670043ae81ef28ac9338bd85c84bf174d27ce84dbc8523eb2032e02f99fd513e7aae824df8aea66db88e6aad11c6fc2a9a4c49ddca2a9843e73b04e295d8e52e43fc80863ea141463f3477333ef99ebd9fb4dc384bc525e2aca00107cc2c0769abcafdb5480304d0595aeb0dfbe5dbb3d97fb7f254b4e0d99b48dd148144dee61c3411db6a0b3622428dd99d62ac348263d000064de15ce8340cd72a9544260380c96695c423952a58fa12ecc82b1514f1e5a976858858467fce031e4cf63b9b6282febca45d4db37f6b54a40c6c77356f516dcc6eccf5cf0537080fe32aaf243702d31af9ad0602fc854438bd66cae1d66de35dc47c8a2bd2fcca5aa9ef43324e1c3bb456e89a05765bedb5b8dfd9a35fe77321f24f80b2d7530134d4bc236a9e98747433e6d7415e4bccaf6f4158c86b4e6a3d577ad2c71f7edb935d1f72d30aed46bb3f2ad46ff8196de9d68febb8dc0f593583611a48a171b326a05a2901fa5f8bf39ae3470cea48c82c3e101ebb7d99242f0fa3d0226be41ad85e00ca5c4fff8ab8d915349947229824ecade4cb901849e74d664ddda28f7670f1b2331af49372a3bc4bc4842061fa2baffbeb895adb8e92ac38700cad8f4166893c8f1ea9f68ae0714e898e923f5e0f2cad07f6fa7f9205cd282ebaf2cc1ed53a624007df1bbfc309c25a12813e2de67cff13c434302e1a7062b476aee9ed45e47050fdbfe3fddc27e8a17afc519e3adb218cbe992d5b1f962e3b4ef2d9c540a05cf5bf425f1d375ba4d064a6120edc8f5c66e62db34661267749d8fc6df233b378e0fc2377e043cccbdc3b537a02953ceff7c130b15d23fc4e3d49a2d8ebd942ae3a42b91fadeb24bc0dad816ef77b72a1defb7ee2ad3888cece774fda6862198f5e8969ffd72cddb60198b0c6812c9f5a3b64a889dd44d361592bd45c152e0dc1dc38b810ae78889eac8d0219c2b57a906fc2dfc0cbbe68e22e61242169c647a76597444890d6a5b108c967889d3d5c64e0588e51e8df95622814d76f53df540b93242b1c4b0c00f35a7138dc6981817ef4b3d7ef220da456aa9e1f6868c32aa2f2948d9ac5e23e158d0d60b1d6a570f98542d3595a8354802f21390f6fdb3106bcff3187ea0f7ce3e1aaaa478dd1bd27825510b02b7c045173d59bae11e2072e70ade900de300e2c8a366e3096afaa7e5ac75a06d5b4c046f7bf281dd4bc84801235dd7c75a40c9653a395809e94a91c419a2a3c41a03ab57ee5009293dc27a60c6d83f356d12f60002cc30c89c7a37247b9d7c43d3e97a07d11079c59de3c022d3651ff451c7fa7c141353235ebbde97aa838115621e9a2e74dfeb540730f93a26a226bc46691afff08a9fc5da7e65662d3307877907a75d374ad7260fb3e26c13058190ab1f4d9fb7f476f94308d48c7333c64f398625ed0fd00bf4d5b33b499e9474a82ee4978eacb00198408cf162c5d601c3d622aae122a9cb2185fe1f0083f396e39dbd1ee0ec160971e8c88390db76ed38da727ab9ed476b92cb8340d2f6160c073254e5e640513c9949ee11ae2a4de171b5e92c29329204b867b2ffb7c0abb57d30d9d71c1f400b658bfde113ebb63289c1bd247d5568d6ad14ef19edb93e937639d550b1a15071f6f23389e9c2a20da547d5879490c8ab5403d40946e6b31b817f9fa73dbd09b1a2196be33c36de7bf13416aacf1642a210b8899f83c33c7e5fc7aedf75068acf630b314ee9f114ccfa45d2560274ee3125e672734efccd3079545467c0e843b2eaef045798b69ca256dee235df5cfcb6c9d920259717f43eaed8c271edbe316d364b7eba37779ba1308ebc067ea1efc79efcbb034ad709600e2d313237789b329ff74c4d2489681223ddf3e0a02d620c46662881b5d28c3b9df9eaa821cd7b0d04aae3728b0f75092de278be8fc836d7c9cbf31e3af704f940959742fc003daf6f0f764b53e5f6415eb378dcca30af3708189c68b1070434d3808ffc3f28f9e0b3c8e6683f3fc4404b367fed8e0b5c319016641a93c852b0f0a6299d2afa73d1164eaabab6bc872176ce840e23303ee7fc6b626d079a0da6d632fe7be5086f4c8b5b4a4eb825660098627205cdc60fb40c26869214c13149390d3bd258cea4b6cea01e97efeb79110463ce5c39d1610950ceb0262afed690f31ed95f49f3b0201484b8b7d01a9909a1cd73f0e5cdaa85746745b8e1d99d58e79aa9bcf70940b4a11c6121307dde90d915d58f6a824fc14252d9b860290af9be422a939794a45c4f4f3ab5f4e999dc75241fd7b8f2d870e3b8e52c1120841e371179066b3fcace1855bc55e311f8c8cf62407965a5cc5f356e2f76ce477bdade1cd159c8e039201fd19c2c4428f43d0f46fa48ea86948cac3608b85f564ccb739f1c662ddf48f67a7e281345e0a9c466dad253d0bcff2c38c84e627b617205524fa5a12d643ba472f94c7658bdcd976793577cd04dde1d607b753807f7b9dd396db324a71d3706a63fb06f54b7cfd7910f94cf622079f9b9a3a9657ea206fa91a30a0c1943820423bbb1ed5c0979c7c509c8a8758c95c1d89e233b7b0c98f8d14face8f7709c0e91a6b62eaaf5a6989db9f1ab30e63b669b1390b01dfeae58e52e7d9678ad3539b146aa726ffccc61d8a07709ef934a6d356f75d1cde92748b437960c96e95f0fbc61721da3acc1b5acf418f8a75b0668cbd358072ced7106f5019577f100d86b5781bb540037599fb7d2fc71872bed8087485252ffd0639237f9ee1c16659498368fa994c8d45f79aeeb5eab2e64b711c16e9c620a4ad9ea59fd1cce540e6c6e3caf13a24771a2d0b8cb2b6fd1dd9b44bd0e62fe7d5cf2a017f69096a4ca2d92e547e3b578cc380513b95b412f034fc71c0b5a4337a767bf7dbbacbfc9d6f29047645d5f2105c37dc916b22e3c582a7f6f8628b8876aaf4ffac385aeb0e5d9211d23ecdb61e10c315b43547aaf0724a8341738caf0dc3fdfa5d88c4979d59c0907baaa7f9b970fb3bcb38bb767d9b68508616cd470468dc07fb1ffc1fca0b35ff1ed2745ec66f3c81528287bda406fd477011a54f74104a94f56b00f01e810a7852df589850b7e4b1bcb90fffa41c21abe313a1b7e0b3118e2e26594062b873ccfc2fd473c99acd9b756d1a60feed577501cbcbab44cf2968a27f2caeaf933cf677ec37f740212a94c99768174206ea1dc6b26e1e9c34c81ec8a24f4500bfebb155a3ba626729901e6123f7a1d3957d9c9ee00420bc497aba4301f882077f9ca46451ea024e06bce9a4f0e7c7cc8032b5896c7d8c0930b16cc6eb7e09278fd9d79bcfc8176540116e3513f56fb8f02399c925cf3d21abf469f0e68fb98e70dcae8e4868c82bfb3d1ef39a8ee6af3ce56acb0202821a292a156c7c0a5faeadeda40b94ec9deea0e52ca4859754e92618cfd1529a252855fc418c2111feb774e007a2d30c5499dd9a2624001e1f63c4fabba15dd138834646379986108ac2f7b736168a3a9174a6c09b859eb55285198bcac4493cb3163e161104d6367906ffe91d9c339606776029f8ba31f9a25f062fea2c085f06de50908aae11167824d8cc52297bf261843620453e8fcac1f3d8b860468ac3b778a04d1fad42f55dfb2d18e697282c8166a3d459703db4eedd789bb38e2a729eafecac5cbb71e638be8373fda6b380f4a6364c3e1f8de88be2ebcbaacdbba7ade68f4180d73e8e4212922e8807f47d4bf0a1fd300fa4f97ffe7af2ad54228bd34ea7f308c9bf972c55c8316bb0a10412ee51f5bb709f5fdfd25694e606972d5338e3908164ff60a5b27b37eb0eaf08a845fb6ba086c3cc0260f1f8217b3f820a1897d7f7bee8a7bb693465666659579aa98e720170450c8e263b483d4ce3d14f0a50becbab81be8f5dbb18aaad48a8031242cf78939c83da8ff437693f41730a26b1f51f63bb221823598e72c984a0bfceb3024d33be10ba8", 0x1000, 0xd1b4, 0x0, 0x0, r1}]) getrandom(&(0x7f0000001640)=""/212, 0xd4, 0x2) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x113, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1263.384339] binder: 29399 RLIMIT_NICE not set 15:10:36 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x178) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) pread64(r0, &(0x7f0000000240)=""/91, 0x5b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0xa, 0x3, 0x7}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = semget$private(0x0, 0x3, 0x3c) semop(r3, &(0x7f0000000040)=[{0x4, 0x80000000, 0x1000}, {0x5, 0x10001}, {0x3, 0x80000001}, {0x0, 0x9, 0x800}, {0x2, 0x1, 0x1000}, {0x7, 0x1e6891000, 0x800}, {0x3, 0xb9800000, 0x1000}, {0x4, 0x20, 0x1800}, {0x4, 0x9, 0x800}, {0x4, 0x400, 0x1000}], 0xa) 15:10:36 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x8000, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1263.756901] binder: 29408:29415 ERROR: BC_REGISTER_LOOPER called without request [ 1263.785069] binder: 29408:29409 unknown command 0 [ 1263.790065] binder: 29408:29409 ioctl c0306201 20007000 returned -22 [ 1263.865837] binder: 29415 RLIMIT_NICE not set 15:10:37 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7fffffff, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r0, &(0x7f00000000c0)={0x36, 0x5, "93bcead114e882e1ec7869da2b4dee061d7803ebd680c1539857b6c4031f83700ff9b2f56ff4e24d9ea0b819809a"}, 0x0) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:37 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0x0, 0x4000000802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 15:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1ff, 0x200040) close(r0) r1 = socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) shutdown(r2, 0x2) 15:10:37 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b6300003c5063a91a85785b1a73907ab78fad2e3a7d55a24994e66ffef7b15172760aae40067e3f1f66000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8001, 0x2, 0x83, 0x8, 0x5f7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:37 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_out(r2, 0x5462, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x248000, 0x0) accept$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) r1 = socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40a402, 0x40) openat$cgroup_int(r4, &(0x7f00000002c0)='notify_on_release\x00', 0x2, 0x0) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x7, 0x40002) 15:10:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @broadcast}}, 0x7, 0x4, 0xffffffffffffff20, "a444a655c87068d5a734da08679e407ae0555a6cb823ddf56f84eaf207868eb71b3c393ee7d7a94ab3c13ef53c23971bfefef7d534142e6a7b5668ae9fd377dc0590e844b99a58b4b4f6ffbea3c3b961"}, 0xd8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x22400, 0x0) [ 1264.987984] binder: 29450:29455 ioctl 401c5820 20000000 returned -22 [ 1265.066434] binder: 29450:29455 ERROR: BC_REGISTER_LOOPER called without request [ 1265.099388] binder: release 29450:29455 transaction 859 out, still active [ 1265.106654] binder: undelivered TRANSACTION_COMPLETE [ 1265.121489] binder: 29455 RLIMIT_NICE not set [ 1265.126299] binder: 29455 RLIMIT_NICE not set [ 1265.130943] binder: send failed reply for transaction 859, target dead [ 1265.137825] binder: 29450:29455 ioctl c0306201 2000efd0 returned -14 15:10:38 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x4082) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x80000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10000400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = getpid() fcntl$setown(r1, 0x8, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="c9000000b29a06ca889e52149ed20ea5537063279fdbcde14cb68573098a340cad434603e5e48694ad17a98c6b8d23f3b6aa1f49b1bfedcf01350552f971aabbe00fbeacac6a266665359b38394ab10c6c1f42ee39c123fa6bf14964af5aa3ceb9ee066c5e5949d8bdd69d4dc7de6e704899b4ead8171ecd4b696683d09ffda45d72076247e5922d343afddce5a7f7a8b631b56fbec5d7c9501e4db2904339c71bbc46e2cf58e19ecec407000000000000005eb04a905c74645f85e608b295a352f29aa5fd17c8bc9c3b97f047"]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:38 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x24) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20080, 0x0) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz0\x00', {0x6, 0x4, 0x9, 0x80}, 0x8, [0x1d, 0x1, 0x7, 0xffffffff, 0x5e9, 0x7c, 0x6, 0x8, 0x3ff, 0x1, 0x3f, 0x5, 0x401, 0x800, 0x2, 0x8, 0x6, 0x2, 0xe972, 0xac, 0x10001, 0x8, 0x15a50419, 0x0, 0xfd32, 0x9, 0x1f, 0x5, 0xffffffffffffffff, 0x3, 0x9, 0xffffffff, 0x1000000000, 0x4, 0x3, 0x3, 0x5, 0x8, 0x40, 0x2, 0x5, 0x3, 0x4, 0x0, 0x8, 0x1, 0x5, 0x9, 0x2, 0x2, 0x1, 0x7, 0x9, 0x5, 0x4, 0x1, 0xfffffffffffffff7, 0x7fffffff, 0x6, 0x4, 0x7, 0x9, 0x952b, 0x2], [0x3, 0x3, 0x8, 0xe16f, 0x8b12, 0x4, 0x4, 0xffbc, 0x4, 0xfffffffffffffffc, 0x7f, 0x7f, 0x0, 0xc84, 0x2, 0x200, 0xe1, 0x9, 0x81, 0x7, 0x1, 0xd4b, 0x1000, 0x7fff, 0x400, 0xa24, 0x9, 0x1000, 0x1f, 0x81, 0x7f, 0x1, 0x101, 0x5, 0x4, 0x8001, 0x3ff, 0x7126, 0x5, 0x4, 0x8000, 0xb3, 0x2d53, 0xcf4f, 0x2, 0xce, 0x2, 0x2, 0xa350, 0x4, 0x5, 0xfffffffffffffffa, 0x10001, 0xd52, 0xcb, 0x8, 0x6, 0x100000000, 0x7, 0xfffffffffffffffb, 0x20, 0x3, 0xed, 0xffffffff], [0x5, 0xfff, 0x0, 0x62e, 0x8, 0x7fffffff, 0x1, 0x9, 0x200, 0x240000000000000, 0x39, 0x7, 0x4, 0x9, 0x100, 0x100, 0x8, 0x1000, 0x7, 0x1000, 0x3, 0x76, 0x59, 0x200, 0x100000000000, 0x100, 0xfffffffffffffffe, 0xff, 0x5, 0x35c, 0x6dcf, 0x2, 0xffff, 0x7, 0x20, 0x4, 0xffffffff00000000, 0x5, 0x7fffffff, 0x400, 0x2, 0x9, 0x400, 0x4, 0x0, 0x8, 0x6, 0x3ff, 0x6, 0x1, 0x3, 0x8, 0x8, 0x6e33a17d, 0x88f8, 0xdc8, 0xfffffffffffffffb, 0x6, 0xffffffff, 0x0, 0x10000, 0x200, 0x1ba36e2a0000, 0x3], [0x100000000, 0x4e7, 0x5, 0x4, 0x80000000000, 0x2, 0x5972, 0xa3, 0x3, 0x5, 0x0, 0x800, 0x0, 0x20, 0x60, 0x100000001, 0x7fff, 0x7, 0x61c, 0x20, 0x6, 0xfff, 0x2, 0x3, 0x5, 0x100, 0xd9a, 0x1ff, 0x4, 0x400, 0x3, 0x101, 0x3, 0x2, 0xffffffffce64b204, 0x3ff, 0xbe, 0x7, 0x4, 0x6, 0x5, 0x100, 0xfffffffffffffff9, 0x1, 0x5, 0x0, 0xfffffffffffffc01, 0x1, 0x100, 0x2, 0x4, 0x0, 0x7f, 0xff, 0x6e6, 0x401, 0xaa, 0x10001, 0x1, 0x4, 0x5, 0x10001, 0x10000, 0x45201699]}, 0x45c) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1265.645779] binder: 29472:29475 ERROR: BC_REGISTER_LOOPER called without request [ 1265.700251] binder: 29478:29480 ERROR: BC_REGISTER_LOOPER called without request [ 1265.731275] binder: 29478:29480 unknown command 0 [ 1265.736369] binder: 29478:29480 ioctl c0306201 20007000 returned -22 15:10:38 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000240)={0x7, 0x7f, @value=0x1}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:39 executing program 2: pipe(0xfffffffffffffffe) writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xb8a0f95ddec1b181, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x7) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x21d3}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r3, 0x4, 0x3, [0x81, 0x6, 0x1d1]}, 0xe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 1266.164444] binder: 29493:29495 ERROR: BC_REGISTER_LOOPER called without request [ 1266.337925] binder: 29504:29507 ERROR: BC_REGISTER_LOOPER called without request [ 1266.392143] binder: release 29504:29507 transaction 862 out, still active [ 1266.399389] binder: undelivered TRANSACTION_COMPLETE [ 1266.406379] binder: 29507 RLIMIT_NICE not set [ 1266.411128] binder: 29507 RLIMIT_NICE not set [ 1266.416053] binder: send failed reply for transaction 862, target dead [ 1266.422886] binder: 29504:29507 ioctl c0306201 2000efd0 returned -14 15:10:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00K\x00', @ANYRES16=r4, @ANYBLOB="000029bd7033f1bf00fbdbdf25090000004000130008000100030000000800080004000300000001000200000014000600058108000000ea000000000000000015080007004e2300000800070042132c2183549edd4e2400000c000300080007004e22"], 0x60}}, 0x40040d1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0xff, 0x5, 0x132c, 0x4, 0x20}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:39 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x227}, 0x40}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f, 0x81}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:39 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x0, 0x10000) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1b, &(0x7f0000000100)='vboxnet0]wlan1*%cpusetlo[,\x00', 0xffffffffffffffff}, 0x30) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000300)=0x8000000) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x101, 0x88200) unshare(0x2000400) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x2c0401, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r4}, 0x10) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000240)={0x5, [0xffff, 0x5, 0xff, 0x12ad, 0x9]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10100, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r0, 0x0, 0x1b, &(0x7f00000000c0)="2f6465762f62696e1f374b5522d30fbfa864657223000000000000", r2}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x9) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'dummy0\x00'}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x10000, 0x0) 15:10:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1266.803296] binder: 29517:29519 ERROR: BC_REGISTER_LOOPER called without request 15:10:39 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x2c4cc0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x800, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000080)={0x401, 0x80000000, 0x3, 0x5, 0x6}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1266.868634] binder: 29519 RLIMIT_NICE not set [ 1266.873546] binder: 29517:29519 ioctl c0306201 2000efd0 returned -11 15:10:40 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="fd152800cc699fc81eaea5284f914be1fbcae9bb315ad88dda7d5300495ab5095fa858afc47982f1b64c89b2e77a8af0e9aaf71e000000002b98e783e310b1928b905ee1bf9e0bd694a4b691ef89eee73b324bcaf381c5c50932819de787b262950665c5198a4be2d1d68b", 0x6b}], 0x0, 0x0) 15:10:40 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1010008914, &(0x7f0000000000)="00000000001e0000005423") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) fcntl$setsig(r2, 0xa, 0x1c) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1267.442475] binder: 29528:29529 ERROR: BC_REGISTER_LOOPER called without request [ 1267.487192] binder: release 29528:29529 transaction 864 out, still active [ 1267.494561] binder: undelivered TRANSACTION_COMPLETE [ 1267.502440] binder: 29529 RLIMIT_NICE not set [ 1267.507062] binder: 29529 RLIMIT_NICE not set [ 1267.511843] binder: send failed reply for transaction 864, target dead [ 1267.518635] binder: 29528:29529 ioctl c0306201 2000efd0 returned -14 15:10:40 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x50, &(0x7f0000000140)}, 0x10) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0xffffffffffffffba) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000073c0)={0x3000, 0x101000}) sendmmsg$alg(r0, &(0x7f0000007180)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="d9cf1aa8d2f8d90e73fe57063afc1fda05321d56bb46931e19edf258dae58416ad712bcc90cea929abbc6ed2258b153c66a4f9a2dd1671d06874af584962d17d747aa178ac115327c8213d0bfc6eb581c1a779d179859036f913e6f7b6a4171f77c255681a67457a41edadf6bbb9c325f25dde0ec227b3bd5648c7481870b3ebc1f5ca6bce96cc1fe5d7da8bd38f694d78bdc3f0190d883dff7458d2b9bda92659d2964f00edbc58a3e89587481c632ffbbe56ebd0582f1faa1e8d3965d06636ad975ef7d9d80a20d1c0f9486edcea1fec7a52934d115058b327e915c7dd2774ac47e5462c27853bdf3ae1363b4e", 0xee}, {&(0x7f00000002c0)="9962570a8c27e24a36cf76222b5c0cb478a56c996de1a0e3f612d425565722e08e4e994d0acb60722499bf25e50026a8", 0x30}, {&(0x7f0000000300)="77eaa4efa22a342e03a5060a5235e50a4aa7e4f17fe6516922f776c9c8510468d18814b1c84e13eced6f4ccf147ca2823c2028847f90bdc35582006c1211b70eef9149d0c817aec1cb8e8796dd832cb0720cab03ffc3148f742624c15498bd40857b4ec8a4fec571913605ef07362742f96e93d8a48306dfb554183b19712bfd27cdda8de56260520035611082b37e0e7ed5fca11ff85a4882148d578ab24ea1eb49c9774e38e7b000b4f720b82e9cfe91eb51dad0821a1b2f346e1b", 0xbc}], 0x3, &(0x7f0000000600)=[@iv={0x38, 0x117, 0x2, 0x1f, "cb5622c56bbd1a72119975732758e436ae4f6ec2bd9930327e993875522aec"}, @iv={0x108, 0x117, 0x2, 0xf1, "4f92df186d6e4559a18084f3df0d60d2346106775829a195e05c57fd2527ae4c15bf5d0ea1f26ba1f3184e497f4264913befbba99932c5bf57b2075a2f4d4e134ce6ae6b8639114dc63bd1dcb8574d6308e8a2a3646b5e259f2e24757b162e9c83d797f8c0745d069e3067735583b063beba6f89a74fa435070850bd7e1b3556bf6d95391b89628b664e3b9a56f74cb73d53560ed463b4796aa8aed3534c955bf9e18e024e6ad6dae29342a583b803d4a1cb5916f61755d8d3d71c9976c3503e8fccee150245397fb468c111c99f0720c015810021b39fb815829a6b945e0b36b1ab0eedaa9882e6d90138cf5a975dcbca"}, @iv={0x40, 0x117, 0x2, 0x25, "7ac3986b6b0cc22846a08e5237044905b593617a578e6123821ce7110fdccc45e9d4a5f2f1"}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x40}, @iv={0xa8, 0x117, 0x2, 0x8d, "0f32f0a50f757f6174fed424ebc86717e9d85e7b70057d43cc1d26f7f85934f558ba0911e7572f984a1c5cd097e246c6c66ba86b499af830591bbcc8fabb8d3eb4eec8717f4676a1c01c96bcdec09b06746fedde5dfa72528df3e8732ead5af66bed139b64620cb53d10d7b83191532bdc6ab60c236ba914065040437e2133c8f60c2beaf47cd114ecb6a5e385"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1288, 0x80}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="92509e814b43973f6425b696844306176cac7a09e4d6967530fddd9f6be1db4611e1bdbcd0ea88ba6e9cc858cd618213942c053531e89484e4b49ed22f40cb645686461ffbd2cfd8e00335cc319e17789481b1de5c6ec58111329d1dd2df5083aec5e850e9d74d7ee4a8f35f7157f97165ff7d54f5df592377b68cf95e44aa88bc37e3687fa4e297d796df88f7a5adf567d7c55c3b189a8a8caf51ddff7d611a295505e5a8add83539dc8932b882ee5ae814", 0xb2}, {&(0x7f00000004c0)="38081bc425dd9f166898303e4c2749acc63f0f081bb084e908fc7f6828c5d9e938b72643889f56d112075c87c7407bc3ad94c7647f1436e8410c8bf7567dcc61ddcf900498b7309b16cb78445694e02062c29bc507be1447bc2b06482e23f0d6ebfe67dafa7722d52fda35cd3be796c9272cbfbb1669fc6b2752ba5438411cc87b544fb99e992e51a6651fe6e7d8948db237ebeee5d74361381c4f2e82bb20e29dc506b10f91a41d", 0xa8}, {&(0x7f00000018c0)="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", 0xfe}], 0x3, &(0x7f00000019c0)=[@iv={0x20, 0x117, 0x2, 0x6, "6479dc2a2b67"}], 0x20, 0xd0}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)="2ba0ab8f6021174aff065e61819297974c51f0bfc412b63f4c45d7285318277792768483e70de9a66b0edd82917dd9af1e3cd12c29757a6388d63caabbdac2137b196b3bdfed52a5894b54ef618afd6ee74bc19fdc22f34b8d0a2837e0fb1fec1a1fe2e9cc558e168862addc96b5d35758c809989ab02629352543b68a405064ea5464d57354f660d86535a0029280e49a81bb6db5bffef3e813219176d5a8a01b0655cd17be68b0bb73f56fded17a7cc6ba9754ff30c6e53aca6c5cdf2b1b29136d5a8ce07d80f80d3ae0672c3ae9d46800d97e465ca4b62ff33fc507e4dc6d7fc693225f820e264687", 0xea}, {&(0x7f0000001b00)="a125ef58423869e7ecb2ec4d33ddc2bddaf162e0b625a38a7b45c159e553912a840e58a9e7b7148bcb486a04533f9f7d490debe706ef8aee", 0x38}, {&(0x7f0000001b40)="5e322dafbde1ca5f62805c5bc6494605f5999099a3731a9fb5d04b62", 0x1c}], 0x3, &(0x7f0000001bc0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xa8, 0x117, 0x2, 0x90, "32c12dda22714ea648222d10169c701ce0c1deb706f4995ba3f7b1280f76c309b1bcff35bf92a75c466dc3d42fe376fb2e244f254d74e6bf68e42e01c109d93b589d88157e49c95a93efdf75d6c623fbe7fd46fe6c0808dba21ca19f27d109cb4fcb78d94d1783bd0f26b4a12a9d53926bef80cc50d57b7084512bf97294a98be2dd9703af04e03abdd8a757ca3a38a0"}, @iv={0x60, 0x117, 0x2, 0x4b, "83e0fa4bead0c311746c359fe41e9e703e3b23770d43cf8d1c04967559d76bfcbd7f27d0a71530e53a20a52fc71b34cd40d0127b2bf7da8096cacd6a25aab213f72a78356f44544d8ec19e"}, @op={0x18, 0x117, 0x3, 0x1}], 0x138, 0x8000}, {0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001d00)="ac8aaf73ea9e48900d530152879031b59566949f07ecf7cae138f278b76b8d3e0c3742262bf8bcd36dbc3a438999a54e808e91a833086932b19e7b19aad9a7e9ced97c279e3a9c2840821dcd7c4dc8544b4666acbc261a6bf57c4fc3ef4a483f20d9bc9cccecb67209c4f46b9c6ee3df44cfd660c391e232bfe5da8ffb5369ac44d98022f0f6e66fad61a5a3a6994671d49037df70aaea33f9186600fca4a5a995e184b3", 0xa4}, {&(0x7f0000001dc0)="37416d7703fa4013220e48595dbb1d3bb26db9399ff83fd3e3e5a2eb41dd3fff25f43e56f98c27c9b6c5fdfbd510f220920350bcb0edb6e2df9d411a4bc158db888e59214e93733831bbe8c305b63e8eaa8b923e861dec9f38931295a57b89b7957976955890702a83838ec35099d9f78ac9763bed", 0x75}, {&(0x7f0000001e40)="659357246e9169cdaeef85c26dbd79c472929d61c63483a2a38a8147068bf39ef98d200cdab61eef6f213c8c91d2c638da167e965df2fd9c1c849b496613824361e5e4e9d9c75cdbeab7584c963915abeac760d9cb2dfeaee34d2b354312e49111ef5a6b477da453c0eac6d973eb9f4b1ad4534f432ca2b2e5a56df44cffec070a460373aeda9fce3a59468d4dc06588d3aa57eb5dee3caafe4cc0b6405d8e30f398e40e7c58a31a81b0dac1417a9a5c75830c73f40d2c0b78fe4155d9b79b4e7d57ef9a4e677ce1a05e5326382071080dd80fd5c3d7a436728b3d5e0189", 0xde}, {&(0x7f0000001f40)="888523fba6e7f1da2d6b8c8a71edafb0adff4734899a2727d4b4990d66d340b8a0872539a97144f348499d0c9519a3c39fb3fd5435ac9d9aefbf973d99b45445085d6bccecde36b69bb4fa7c76d047eb874fbf2813850542a5f8bed675ce6be565c5f280fc3a8ea97085edd0f74537d8c87983f1c6be26bd22a9d00401c654b821098604c3e9d11ca0886ebfdcb73312a081029e4fe6d7055f66df844d938919f4507bed7dc8caf268c23b709ac7405250acb030d4f40ac4b6a80a7c9709a4a9ad67f4b74aa5afb3c2402c52af416e75c26f45d20e3ad5da678a69bd95e447a0", 0xe0}, {&(0x7f0000002040)="64eaf39cb9d9a4e5fc73fd0c220e8fcf0af952afdab9c55422dcc51a9def5dc2bad04ddb78e0034158429c725b29", 0x2e}, {&(0x7f0000002080)="19e1995f93660b85ca44d195529841257489bf1c652bae2534308905b59c5d352bca03484305f98ac277f94005b9ffbeac11342cf4100d2ab1d2e60f2dcc62210b7a88c148d93b17691508dbfe1cf43ab1cb1b7eb83a504e479f52ef7328168c5af4c55820ac73f244d6aaca2fede8155a946d1542e5168d7ec539e75683d0bb88668d5b9ee78efab27ab0c032ac5bb8bd3e55f941ebf7b24a856d9f988bae6deb1ae54f8eb1294ef2dd2925363a86788cb0dfc11c023e439243f36b0a863221b5f989fcdff8843e3740525dcf2eb6c27762fbc0a041fe555de0fe1cf49d47", 0xdf}, {&(0x7f0000002180)="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", 0x1000}], 0x7, &(0x7f0000003200)=[@op={0x18}], 0x18, 0x880}, {0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003240)="d6df7a926b65fe390f70f77a478c514e4b0b1d9c21f5b093d875304821bb52cb23a9b320b492063599a32d3d4b73f791f80b0c424412b3f586c994dd10a4d4a0d50e3a31159b45a804e678bc213ddae51cb367230ef26248596265ad33eba1e77b44d04156024c2b3f14b00525dcb20f74c69a777dfae92df716dabb0fe9b3ffae2ea743a4db57c8505a909d9a0a693d3fb19d01f73025c219", 0x99}, {&(0x7f0000003300)="c1adae5cf3569aefc72ed3ccd859c81c66fd4f4b395879c13dfaf265aded1932a9b4bb6643d1a9393456eca1210ae141c723070998cef6d2e3366496b095", 0x3e}, {&(0x7f0000003340)="a27e602208b7b50e8e472d24f5f3a42368ab7a3bb083e15e7ab73cbc75a744c93c3f21c8c97ae06689e93a1cdbf21359a5ae0d5f89cad1e515e4cb9035e4ef5a62afe39c6b55", 0x46}, {&(0x7f00000033c0)="340c0f932e3b31123162f0d14e4018119da09d0a6e5a1d92b40368b48424cb50b6b8e035a21004108a06ab1e1267f754322c24ead873560e67d973c1bd", 0x3d}, {&(0x7f0000003400)="c7151c6c177fe3507c5edefec23d577c2dbded98d04c116916656b6fee4527ce75e1b74038cbfd1ae2a9f38b3985ec9f4394cc78e1159c25199bc41947f86346b9f74d67caaf0b", 0x47}], 0x5, &(0x7f0000003500)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x8000}, {0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003540)="de95227690fa32a8bab3069950d7fcf15784039696a0de2a187adf4ce4e14da8f5a386994b", 0x25}, {&(0x7f0000003580)="82fb4446e7c591a567a359ea449aaa29026becca3813a544b7e5ff898a40ef387205da0698f21034c475ea5ebed7a07ee8c1c33bd88c31b3db0953269f05c3ec0943dd3085b265e5525b2695205ed111c51cf1ed9d08219130c57d3b7ce6ca9696077b70c2f4988f91f20ef113facc7274a961e625b17dcdf68e419c1b651fffa75cb3e5915dde242ada9f8b4db5383a351ba0", 0x93}, {&(0x7f0000003640)="77cf5db2c6601ad51bbf09fb0f7077b13357dac4fbaa4c1e496fd1bbb8b82d", 0x1f}, {&(0x7f0000003680)="3148487b44340252760b364e2b3c55eac58f135ab314fd9badf975d0b5d70d8978", 0x21}, {&(0x7f00000036c0)="c423709d1ce63bb98e1392840f0b8d38514b0a1c5bba623540947bd8481fd45d26343ae89455b991e9e5d87eceb7bd31fb89314241deee9be0d68dbf79347bb3b26101a7794da54444f9509f361c93eca2bdeaa4f4d848abb0d12767216597f43fff9ec485f15a9131ab6f681871b9e986704b656a6a65e6e83ac0f42c7f", 0x7e}, {&(0x7f0000003740)="c5813abc3f57a1707e679c486c82f2e3c0af07d6b7d045eba35a2179cb0fe9e4265371208209eab0f79793b2c21e77810bbf82ae8af91e3a1c0a1b5936e933b988e64b6b980c7256d238896dfe50d1cf75f2ad740c63c4f49c7d830d93a5314c5d2359fad866d7ca95b4a3535e6c3253b78b10b9507ef70b5ab69cb1dbac7f7132f74e180bd77493f2", 0x89}], 0x6, &(0x7f0000003880)=[@assoc={0x18, 0x117, 0x4, 0x7f}, @iv={0x68, 0x117, 0x2, 0x52, "aaa7d33a61f9f0c3cd711c4825ff05aded6fc6801b1bdcec4c3e3bd060022f19d2d8e1491f38c50524fcab95433ccec384526802ccdfe34799fe74cbd86e6b41415acd1e2e35599323e7d465a558fa729983"}], 0x80, 0x20000001}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003900)="b63e643d3e737f54650b9e0a04591b03cd60afb04cac79e02897866ac4b633ee84a6a80a8fb516c31e81", 0x2a}], 0x1, &(0x7f0000003980)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x1018, 0x117, 0x2, 0x1000, "29cdc084a43b33e4bde276e1aa729c05e8bd7c45f7c9c58cbb7ed1a0025d777fcc0a918b99ac675c85a97a7864684fea3accb79a0c88b5ef7d26b88c2b0f761b84b82b19cf97035bbe8c884862ab3195fa879773b7336d6d351054ea7fe1775167f934aa6c2d6ab9136a940bc28c3d7d9673cd6ad03fd5c3f1c95cdb2a1426f59b0febba8c1ae0b8bedbaabee7b26363583180408d476b387d450f2ecc0eae4b1fb939f946423cb29f795c5ff17b363f610bbd6f12e7beaa24cf54ec522e3ac292e56ef1f1c15fba30b22dfe840b9ebf812262d006be0cf8f627244bfe221cc8d0068e8a5e45ac4f4a91233939595c12391d26b8da67d14bed4e8905b5fa3b153597ca1d77edfa555c6f3b5f63f8842f5769cd5f48292d8d75ef8de64ac3e455ee6f2ec7ab61332a73a4b891942edcf79c55cf13c555ebbffef628e214add5d1dd1d8d67a2e240853568c913aea4da860569de7e8af0190c456e831fdc146d4f0c7c9256f566be668c702c5f05d918608420811bf5d7c6762b693ccd94308b8d4e66e8c018444b3887e666d95e38a7cc26e86d0e1486f2478f88705f613b10d095abe90c514797ea2f88a0c6cb7eea5aca91eb31475f4e1427336c8beaa8b18f37b01cf24ac7691054cca38e4e4b1ffe900302b716f0c60da89f79ae1aa0e88b0bbf5e323008ed25cacf096d6a36e722edccb123cd9b1370d49cf92606193ca4ab3891f29049d3138c471ca834eb53cf381c6c2fc2cfe86ceee01cfddf4e1d805dec87f716878e6acbe86fe24b5661ee5a478b31950c10e477201d98b92cb446bc5388be976bfef54fb30cec0196f5cade10f18689af93ffee6d64a03346070453c6ed83babdd4d7eebc502e92781a560d89c28a1fbaf37ae55d112ebc7d58e46b16ab1ac75c344b20a6e1a135e41bc55a0600f449cd34c95f407391e9d5542c8551013ca617e1b0d318d0d20b93d00b582c1fa03fbfb4cdfa84721fa742d05153ff3b575fb119617ebc3f2e1827264702041bec311f8b5adab0a7cea27440bb0d7bbe8ed1f7a885e8535d61607e0340bc8c00ec799c406a6adafdd57c198107db26c6f8650a4eb3e931fceba13c589eb068a7a4d94ef3f7e3e0346ed66fade6b5a70e5ef1228a181f1cdea1097d0d9ea3bfbd8db6227f8492f0346d04681e32f5e8d2e976425c5a769b5a56f1163eee63e20b632569b7ec44d8b9c2e63dab2b62a82e68748304f06f29cdc799b8755f6d212536ade74b49c67ca39bf176ce08c53b506eeb53e5661e9defa55d9874f5393a297170b31c32424889f54e0ab5f8e3e76da2d68953693128542236c35b599664d08c2cc023271f5638ace778e2dd88eb831406fd26413d27e378f8bfa35472d51a302f252845cbbb89d45fa3b574adeac433317d581341408a06064a4167a37b8ad214c43e380d58b2bf9c704f99eca598523311866ff30aa0c95466734b98c7570e58b41f75e755bce69453cc8f4fcc5bf16b435f48c4866e83baf66d3ee9b75f244eb82f33b899cbf941f109195e01f2ed95a3474a539b5d9fa3ec8b0bfea60ca0848ab331f670c1606f2ebae926f5d49badf87c44346080edad3a0de447cfd8f0385cf0f3d08b27ac15b738d24cf5183cbd3b521732365eeff153652950516de67afc385d863b36a9d112df3048c2f9c1dd6fa96be54e358a8c44d59309d46ef6516a8941d795c987683ec8af1f84e78b4a019712e37084ca2501cff0664a75a2cffa770b9e4f56a0f651a40e6b1eefe28d637048ebac5cbeb87a680f7baedf0d006546b753b4d273dc5a77c6b9a5b731eaf6741150de2bbd526d7ba7c50b46d811e8de81f4662a480b24b8c74bd31fb6c071159e312684d40eba9bce936ab98d11f69d39f96c5411f8fbb17bbaa845301cf73d188615fa2b774432c5a55fed6c8ad50eb2245171dab825f36732c59e71abd33e9c62f25c639dc8cd6a52ce99aeeaa1f05f2469cf575d5b20c28b552dc913c375100faf2c312a2356dc920982cf5e3dc0e40766a3625710855a11233ae429d657aef8e09227bf1001431353261f2b945ced439f111bc7376f373c373de37a565af86ba45d623fde9e36d045ba9472954b5e8e870c7641f40a952cb7b860f6b46095a98df4b4396b46dd49958f6095a995b39175a2abc96e724cf7e850b69754ce78e0a8d6093738b30d2a8931e4f10e1d9468888b1336354b039248204cd538291ca9d8de2308af792a9c65044edce8b6e05abbfae378c42e49b9589eea0b6a09df7983735b5b396254f6447b5af45a304a7139d5979cc6dd1f6a3eb1217d114502bdc51ac5412b718c2e8ad3f626cb4825f21ed9f0b669571d37aec005f149e9b5e693ec894dca990a79ea7a7c8242f72ea9daa86d23333cb4de85f71772a68714806505474fe31c83011ec3bf6edc074d1fba41025679fa2738e8efd318a8d8914ec48cbe56d41bb607152875406b492b839351721a78b0ea2be98178cfc5ac7d94ec76fdc9a61d5be6999d335d2e12e7d1df37c6c6199c8ea042566cd03f157b01c6ff2eef9f017c2066dfa2202196a50ea9303e4700e7d39111157be688200105ed53b1140625b14e07ebf0464d43c86bff78d474acbde4488c4892b24c31a28db67ab35de1d3a9f798669f4f52225d934bf74fb5d3ff1bfaae756550696c80299cf72704186ea32bb016c2095c923968e70d26eaf9f3bc604d4193683b697a4b77f3e8aa5237eb88f03bd2fc8f83e2213ba5e484fe4653b3be1b9674bf5b7e43a40620b255f9e213ccf181ed8159ab65f13fbd6c434a4e489f8f6f92ac7869407b1edeca24e44cf6d297d9750808fdfa1e1bea197697a70c34df3b39b67c59dab0c47b96705543f4adb8e0b590a9b4e3374fcd0d4e012f7e217dc609b4dd0bc86307f6d6c85cafe2c66182012c2d581a13e2c7665ed73eb35d495af87b19014a6b0c701ce536b8194ca6871131e6ae89116394a51f9c51680768e1a5a7e3ec5660b4b23fbb8a0779d7edde3c4800c31730614321d02dcb92484efef31eca020669542f8769e029a52b9366746efed509b4b02e5c4f1c00ec4cfdecfa33793c12470b16d564248f22659c1d7c1e1cc335465b6cacd99bf14426da463c066efc669496011de7533c982e1910f1a40accb7183ba2e78f746320c4ed6f923283167180b780e9ddcf79d81c96b63adbd26b881a6bd54722411cfab7d889235fbeee91e7a869b5b381109186b0617e30e42534831de7afd22433c9ecc52b873ca42a19e97f9eb129d2024d42e1eca21102fdc509655d70d1ef9598d19a792adabe7c1ca7d1389c8115de53dbd389c542a69d959bde26e8cdd062a29bc4764dbdae7b9aff0e2d3bc37a82ea063ac510b78eb4cc8d277bcbdb4a2a49d044bd1d51c3028a175e51e3234c4d3171ea6e1f89c3d9ab36a89c2f6f3d723bbaa779ef947003c25c66c43581016a08d83c443a3efbe53b8b1c7fc293486c1b6af84e6aaec0a97aaff9b94d80829289aac52a985e6302485ee44cd41d024deb0e946a7a5d243369af403fbb5533a0143787f7cc256cecfe7ea7a27adc9a30c61ab0fff1a3561ee27c0215277f0dc90c3689d418a642e02936cb2c68fb0634cfad1d2521d9ae28c93aa3cf3da8b438ffbb6eb2ade0e80a1b59a7ebe1fb781ba2ddb173991b7b4278e4e73082541de6682faa0f8232d8b89a3892ebaf3328211332170c3f419b804d591674963d11c50f5b7b7906f77291b2e9cd1c7b3cf3f8a468cd4479eec25718d383fe43288b2cf0ab5345ea4baade156cdfc5afba6100ab7acbe3ea398b0e45b8a6c582652856bee142b8aad642f91426f00ce3d1d36a7170bae1ec1d2b5145f03d5c3b4c9ac244084934966a71d8dadcf31a897a4b15dad7a8b84863616a6c9d8d6bb5b446a8797e7408d878322ee819de9c8fd7561fec1224822a45617e3309957d069e6cbc9563372c1d0e678b643de9afeec27052f0e77cc5da87a3a974c037e914bb389e63e8bd0ec92ba6664105dd8b5fb20cd5fded2b00e530f7598bd3da90c9b07451373993eb4f6b87045de4b92f52c371189d40b8ce6f412169a042a1479f3044baa8c494953d2367d0046b41c647bb71dbb1d58702b5aa218c7a32887e464e3f413a855470557beb88607d31f3cf33bd23fd8b257d1fa8c7c786e6a57c46c598b5dc7e04912690d720a924de8f9353c7cbf182578f765851ddf923532ccf5e53be71ac36ca987bd2f7df6d6b09388577e49388c667865a6cfbef392dd63dd6c87c87c546c8420c3d0ca0153abcdbf226826220f7649d497bf58a4ede131e90415ef828575fc0262b9d094f8957104f0a88278db1a1dbdeb7e23b5ef7362f7154f9fcb51215243e8aeb07590c0c06160924adf752386cee5f0f16814498e09352210d85e4f726521df5d83275546d63e13b6be838858fa589698160fae0ae608d7d4e2615d174b1214aa06c6f0943a5651367c5e9b56eec4c310ba73a7f6efbf471961f8834e39db53ce5211d697abe69e11febf9ed8bd1be646c48aeb348ed192553a89ba8b0f86161ff18d254b06fe7abe7f38b44d3c211257ac09875cda518d7266dfb5d86e8ea04c7c63fcf68c356f8263ef0b0b95bd2eacb626bae31c3b26890e6ceb0b230388168cefedd919fd773f753a93001cd1a82c447dbbc210349e563a5d8a13ae043901b7b5ac2e4f2fbb3cfb209447cec78718d47abc5a4ab124f9070c2480b4cb692be2f7980b17b872fd1a56e5b7985a8f68994c4c1c14dbf83a222002bb09e1c4828f41ed47036b23e3332070f3d88d150ff6daf7bf2da20769fa2145593f631eea76a0fe9a21eb27d65cbecf059175a960bd85583c57b44c8fb25d4b2e015538d36e9339a317ad1f15ec1206d65daf74010bfb2e71aef10a11ab3d7485913d61b4825770077b906b7650b760ae9d16101a4a15f7185f42a8f6f7c89c8683a921590bc86e0303f80c9acad70b108a77465364f44861da705917d7bae462ca4e33368fc563be1eee7b0f3b564ee5879f7bf680d4a44a22a54b4f1fce4cfc1d8eec4a6a3d76f0fe9ce3b67bb344efa8bbd3cb36fa72a2038b06c5f057ca2bf4fe457def950e34b1b8fa5d856d748a37748a5cbec06b75779f80ef5186eb067b792490cc350a0b4e8d021a39a869d752c94a79706073c65b195ab678b91c8366825da9f89c4c0cbfd6247035144f0334bd86c4d9ea13f5af718af3378e1112ee30361ef17e45c9acf9ff1bf4e5e40a04024690e7b82132d849bde7743b846bf82d0cf738514204bfb2a7b89523966ede37c577c42062560053754dd7bddebbc0b1c026d13aba217ea0792555831f8b4b46c9dbdcb3bf4db25b017e934e2534fbee45a8754b9bf458789257d76683a17eb084f7b16b09f28fb133a598e5e14e6badbf7d73a62fbb489d63ca77c40b891d3fd68843f18a41428c0f5a96319bb37e48f8503f33f10ee7630d6aa4fb635fe9239afba4aa781a7fd831f8ca6078979dbf9b074c9c997562fecf0629e49707e82395791e78072a4fecd33c67c3bc17db8bcb022f1c8ec2f6065645d71cf0eb4aedab3224b4e696bdd4df2b7c5994f3ce9dd979bc61f52bae227ea55a1d35b97d7da8cf6b4d9a5aa59524213c0790edfbd884d5d2c4ff24ae0c2cf107e53f6cf90d2d03c230107fa6b72ca1e9ea8cd5c1ed124c28b2ba84413829d20ca6b360216a127dac397701e5cb203b8290b120d0741a287f0656c6fad160fd809a2472e46fff419393bd3ae5528a3d854bfc14ded075175f21627582eb279"}, @assoc={0x18}], 0x1060, 0x10}, {0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004a00)="45b83045a8f223e98e240a1f49e395f16da319142163ac49c5", 0x19}], 0x1, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="9e0f84f1df1b9146c1337cb8e0c42ba790d96c1fb7bf7725d6a249da7a05ecb0d4e4ef04b09b01e294fb1980f7bf03b4cd46d4d67e827ec5e6d737c0743295cca1db8b06b51f02b6b66c5e080a0de61bb53b45084fcf5db021611879bec01846d6fea15824b532080a13560d4be0126ec3d3629bc44054baf17eb24919", 0x7d}, {&(0x7f0000005b00)="31dc378e40e349777d57eca6e1869fa2c91a36cf79daca36b3a1426d84218ee768", 0x21}, {&(0x7f0000005b40)="05d4fc32be510b81827555208a53322366c1690f26107be89753158c2f44efe23cf9774022c64da6a84c0dffdf701ad5da2dd5e1d6c1cebc5fd25ff7ee085c6d740f3ca55e99be71d012b3b36854", 0x4e}, {&(0x7f0000005bc0)="45edadd0eac46dfb9a38f41ec9cf97aa76e4ecbfae6e55af1aa54cab921b81f44d34f565e770ad5a69b6697f1233229b84b1270ddcb7df86d62fc0e57b13094569612de8abaf87457cf3b9c546783388d0245086a91ff524e5967e730431f64783bf263eab210c6c1e2a40added0a133f3e90e81cfcd36cf4d5adb79063e628d79277066ab2edf95f44d946643f521a22c8adb12f3c4687dc3a0af351abddff8fdd5350f218ae4df38d5caf681df8a3701b7b45198a432d06331459c4a0df6703470a2ff49", 0xc5}, {&(0x7f0000005cc0)="b54b9d33fe3f4a93fe29b3491c7a1cbd34d5d2c3a26a21bb79d8a76e27ab64e478b83a7fcc1620fc29e604eb5e7e567af0af", 0x32}, {&(0x7f0000005d00)="b6c0aad5fb0d593d088b5332ae2f931363948648780cad9f851e39dd8366bcacaf3bbe8c0547ce6bde7676c9736ed6e9f186e24854580c10330289a3b85084f6eda838", 0x43}], 0x7, &(0x7f0000005e00)=[@iv={0x100, 0x117, 0x2, 0xec, "fabe4075a089905d5e711b5fd6ef3f514675b99152c92a51c8be5090b20c101b62f60e62358ef8f51012d9ca805aba6401d098c5bb1a1afe8861aa18bfb0cba9473bbbfd2ec0690aeffd8e5cbc6c7f2b259f99a91ada3a1973a421f170b24ab4399a138f428bc02172fefbb38ba26e2a95f2c6538a053c8a2e5a95b1d816691163f3e9a908443da232aba33d7bb65657571544240f70959a038be8b91a32fc6694f5165607aefa31ab0404f055ff5bce8dea831a8155b69b90fac65f99a52dcc037709d817599a91bc94a607b95f65bf8a00a9533982c636c955ef579f1c28881d724e69b2aaac8eec3536cc"}, @iv={0x30, 0x117, 0x2, 0x1c, "1186c283c852def1bfcbb4b72a2a1adacd93d4e89aa659e06461b775"}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0x19d9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x11d8}, {0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000007000)="1c1f0497f84ef7c66082ae2ba9c0368bae36c2c007daebd66e8a516358c7fbfcd48244797e4281134778de769ed2434ba3c1d56789ff1a5f9720c95d598d06debad2e9349c66ae82417f10ead15290b3d7ab04fbaa4f79fd7683e5846d0069f1f126b40d7b72eb825ed9ceb1165787ce28bc163c9ae18bfe055caaf6c0f5888b7fb3b1d7d8eb579d0d822f8fcc628a7b3269c6607ea22259ef5a33f116eb285d2ef60430375163c82cb7b7654161f9264a", 0xb1}, {&(0x7f00000070c0)="fb04cc3ba81b79c6e7c3e93559d897dd2861727637c98c76d33c4f3ebb0acef8c9a98b7d3fe785fee3aea55ee784", 0x2e}], 0x2, &(0x7f0000007140)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x1}], 0xa, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="662666f30f211d66b9800000c00f326635000400000f30f3f2640f18f50f019b060066b9c60b00000f32baf80c66b8bc66238f66efbafc0c66b85a00000066ef0f350f1f002ede70370f20c06635200000000f22c0", 0x55}], 0x1, 0x6, &(0x7f0000000180)=[@cstype3={0x5, 0xf}], 0x1) 15:10:40 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340), 0x0, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x511080, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:41 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x44800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x404200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b020000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 15:10:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000240)=""/31) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r5, 0x0, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x5, 0x0, 0x6, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63008112fb4206fbe81bf224a55b5a5565512e6b8b2ba467981b9e3ca58b642e3c1c80d36083fbfac7dc332c86b58cbcb5f7f30d371014bc9f17f9fb788de8513d503d256b629e36aa990041c1c046eee86f24bb00c27af4c3bf020db5392d93959154c383c230caadc30623e17003871dc2"], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000180)={'gretap0\x00', {0x2, 0x4e21, @multicast2}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r3}) [ 1268.460629] binder: 29568:29572 unknown command -2130681077 [ 1268.466753] binder: 29568:29572 ioctl c0306201 204edfd0 returned -22 [ 1268.475632] binder: 29569:29573 unknown command 523 [ 1268.480882] binder: 29569:29573 ioctl c0306201 204edfd0 returned -22 [ 1268.508125] binder: release 29568:29572 transaction 866 out, still active [ 1268.515359] binder: undelivered TRANSACTION_COMPLETE [ 1268.530749] binder: 29569:29573 ioctl c0306201 2000efd0 returned -11 15:10:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0, 0x1cc}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x202200, 0x0) r4 = dup3(r2, r0, 0x80000) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)={0x68, 0x4, 0x4, 0x0, {0x77359400}, {0x5, 0x8, 0xbf, 0x2, 0xfffffffffffffffa, 0x5, "60d9115c"}, 0x0, 0x4, @fd=r4, 0x4}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x8000, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)="41e1348b037eef7d052ff3fad1bd65243b309cfa5d8194185efd3c89fb24c051dddadbcd11074780d73dbe48824a10c719d23f87fd88ae7ed864ee47dec48d2f8f12c5bfc4583df4850c8bfbce471d6e0ccd30a03d247b6994d8b7f64e43286dec6a19f1e00580993ea5b1ddbfa8a3267751bd1bacb5993de99471a43ba7052ac6aaf396fbc4ed324d74a875d1ffe560b3f094af1f1f2f34863e4d95e539ce6f0d8792a0f8d08617268b49641a", 0xad}, {&(0x7f0000000380)="fa39f89d0c2dc0cc617d32ff613bed202407859042614d1224534669dfec72d7c27253988786acc204f1448777065896d59d157e374f0daa4ae2300a0377859e20c0d4a376b3c81d4519fecee29592ad946e0de8400aad5021675a47400c51b3a8c9951441cbdd574603a3841706ccfd8a2014bce338aa68f7078e4d6e236a6aeaf8d397d19ea79a48e7119e1e42fc8c49899ab765439fd99741783a313f832586dfab2721e4e7e72b2c2d5ec3c6edc8e66dcb759e0494da6403bf8e2de9d45f8be95444ae6a576fb862150032b6f5cf818c43391328a3a07fc16427579171efd6646eb6f5cf4f5ae2add1880a8fab79", 0xf0}, {&(0x7f0000000480)="dfc17416db1ce2fe479e1bbae319e09576ec6f331c095cc0fc094296f30f26da28eed5fd7b7d2370ec4b596cb9f4b91427cd913f4eb29d28fcc2864c9596e7844aee58175a392266880fce6e78acefcfc463c5e19eaf4626957cefcb95c28776c324eaf3a613d2ae7b548b3a4d26ced0d15417cfa2e422adc52867", 0x7b}], 0x3, &(0x7f0000000540)=[@rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x70, 0x4000}, 0x20000091) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000002b40)=[{{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000007c0)=""/177, 0xb1}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/172, 0xac}, {&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000bc0)=""/125, 0x7d}, {&(0x7f0000000c40)=""/193, 0xc1}, {&(0x7f0000000d40)=""/194, 0xc2}, {&(0x7f0000000e40)=""/124, 0x7c}], 0x9}, 0x1}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000f80)=""/103, 0x67}, {&(0x7f0000001000)=""/160, 0xa0}, {&(0x7f00000010c0)=""/253, 0xfd}, {&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001240)=""/3, 0x3}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/217, 0xd9}, {&(0x7f0000001440)=""/199, 0xc7}], 0x8, &(0x7f00000015c0)=""/51, 0x33, 0x40}, 0x4}, {{&(0x7f0000001600)=@nl=@proc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/221, 0xdd}], 0x1, &(0x7f00000017c0)=""/16, 0x10, 0x9}, 0x1}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001880)=""/18, 0x12}, {&(0x7f00000018c0)=""/168, 0xa8}, {&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000001a40)=""/163, 0xa3}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/134, 0x86}, {&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/124, 0x7c}], 0x8, &(0x7f0000001e80)=""/200, 0xc8, 0xffffffffffffff00}}, {{&(0x7f0000001f80)=@generic, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)=""/70, 0x46}, {&(0x7f0000002080)=""/182, 0xb6}, {&(0x7f0000002140)=""/95, 0x5f}, {&(0x7f00000021c0)=""/94, 0x5e}], 0x4, &(0x7f0000002280)=""/41, 0x29, 0x5}, 0x23a9}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000022c0)=""/247, 0xf7}], 0x1, &(0x7f0000002440)=""/159, 0x9f, 0xfffffffffffff001}, 0x2}, {{&(0x7f0000002500)=@alg, 0x80, &(0x7f0000002840)=[{&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/121, 0x79}, {&(0x7f0000002700)=""/235, 0xeb}, {&(0x7f0000002800)=""/5, 0x5}], 0x4, 0x0, 0x0, 0x5}, 0x80000001}, {{&(0x7f0000002880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002900)=""/142, 0x8e}, {&(0x7f00000029c0)=""/172, 0xac}, {&(0x7f0000002a80)=""/104, 0x68}], 0x3, 0x0, 0x0, 0x6c}, 0x400}], 0x8, 0x161, &(0x7f0000002d40)={0x0, 0x989680}) recvfrom$packet(r2, &(0x7f0000000600)=""/78, 0x4e, 0x10040, &(0x7f0000002d80)={0x11, 0x4, r5, 0x1, 0x1f, 0x6, @random="47cfc7983c78"}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:42 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000240), 0x121, 0x0) 15:10:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x1}, 0x400}}, 0x18) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:42 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfff}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r3, 0xfffffffffffffff7}, &(0x7f00000002c0)=0x8) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1269.437738] binder: 29598:29600 ERROR: BC_REGISTER_LOOPER called without request 15:10:42 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x4100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x1, 0x5, 0x9, 0x2}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000003c0)={0x7, 0x3, 0x6, 0x20, 0x6, 0x4, 0xa}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) r5 = mmap$binder(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000400)={0x3, 0x8000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0xfffffffffffffc19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000008000000000000000000863104000000000", @ANYRES64=r5, @ANYBLOB="0000000000000000074b044003000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r6 = getpgid(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000440)=0x4) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}, {r3, 0x2}, {r1, 0x2005}, {r4, 0x8004}, {r2, 0x4000}, {r4, 0x600}, {r2, 0x8090}, {r2, 0x400}, {r1, 0x80}, {r4, 0x8000}], 0xa, &(0x7f0000000340)={r7, r8+30000000}, &(0x7f0000000380)={0x9}, 0x8) r9 = add_key(&(0x7f0000000500)='rxrpc_s\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="bcfd10f2b59131e30582482709123d3a45365247d6fbdc29471d84a7fcaceca6d07f79450a8563126908bd53887cfadce54164605b6cd0f706f2bd9a9642", 0x3e, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="79044909dce14920931c84374c", 0xd, r9) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f3, 0x400) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={r3, r4, 0x7f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x44000, 0x0) finit_module(r6, &(0x7f00000000c0)='\x00', 0x1) [ 1269.483634] binder: send failed reply for transaction 866, target dead [ 1269.498083] binder: 29600 RLIMIT_NICE not set [ 1269.503000] binder: 29598:29600 ioctl c0306201 2000efd0 returned -11 15:10:42 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) r3 = getpgrp(r2) syz_open_procfs(r3, &(0x7f0000000040)='net/sco\x00') vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) [ 1269.727106] binder: 29612:29613 transaction failed 29189/-22, size 0-0 line 2834 15:10:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x542c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10040020c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x93, 0xfdfd, &(0x7f0000000200)="efae726206365f261490a37780e1d2dcc1d4d7bb6c369a7bea9a870654af802891a874161f3d04415b97d29d45e03b15a73b94e41c88a7212288010a591780f9aa8197ce56677cc1575c95b57c37c706e663eaf5b383f74df0eca8e41458ed60347994321d69241ad7624e85f769dd7e1dbb150aa623fa9f186ad22ca471f1dc911d274d12fd30d65d0bbbee1483d241695e54"}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x122) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x2540) read$eventfd(r3, &(0x7f0000000080), 0x8) 15:10:42 executing program 1: socket$inet6(0xa, 0x803, 0x5) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x2b00) accept4$alg(r3, 0x0, 0x0, 0x80800) [ 1270.058081] binder: 29626:29628 ERROR: BC_REGISTER_LOOPER called without request 15:10:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r0, r1, 0xff}) 15:10:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:43 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/11, 0xb}], 0x7, &(0x7f0000002a00)=""/4096, 0x1000, 0x10000}, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) 15:10:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffffffffffd7a) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x58, 0xfffffffffffffff5, 0x1, [{0x0, 0xfffffffffffffffe, 0x1, 0x5, '!'}, {0x5, 0x6, 0xe, 0x9, '.nodevvboxnet0'}]}, 0x58) [ 1270.268691] binder: undelivered TRANSACTION_ERROR: 29189 15:10:43 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe096, 0x40000) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x111c, 0x2, 0xf, 0x320, 0x70bd27, 0x25dfdbfd, {0xc, 0x0, 0x4}, [@generic="107d16e435b444865f688eb1ba0e96f62bac7e5ae3591ef023108a2f0c30e94038c8a19d6a995fec0591bd2d2fc29c6ad470234140c56eee565e86687abee669feb438a31622f5fafcb601f4ae260ca2216bc821aa16f7268a3263aaa0f63863fe93d7285e1c6fea6cfe77203987fb19c2bb278f86979bbf6f63c5d23e50022237d55c55ef0722f1671c97fb7fed12f90481ba33adf2be97865b4dcc91eac8fe87adb83d2aa39e4ea4da2a63244c150495695c7046d40301908e5af5191847c5b26663b411ec599704c4afd1f6d9edbd22d2eab26899d2bec72ff7a7da9e7997f08356d3360b324d96bb6e79d00db6060118474f474b4e807b425824284d2ab294baaaa7eb39730f46e4f2bb001ea291931212e4519b71346b857b6f7978a6ae39d91fe06119b94404b4b302afee03c5020da05d0aa134dad79f19c482df42c5fc7de53a607ecab049ed3024ae5afafc113a481cc09fca171d84b70b4dc6a6054ca30297781292b87de7c71826d7bd3f49627eccdbe114bddb58a75b3491745c4e3c5059adefba965e88cd97fee3c1f3ffc9f383a3020453c8c52853e99370e43b6ddf0e4c9601f0bba133af1a17e132db05cb7453354acd099f90c17986baace553df3cca59e4111b03ba7855115c27f77bc9b93cc3deefbd0087316be79777ac4c653db688f5266da900cca4aaee302994931fd78b3ccea50967419e08b758fd6cd546925537828e667bfd2e9f58da85e981597f7aa8a821482e5025559785c1a23ba6cde8ed571ed313b7477453309e1d144df5568bcba57ffbbcc626bb054f3b8b1064bb55ddf7834ee28d99353ff3fb2e9c3d657dcff340a936d025fe0b79271e7dd004262a80ab36721ae4bcd2b2cafde6f19602b6c90816d4480f17f608eb00e9663bce194e9886d71dd1fc49cc717d901f1bdd10f4e5f14756e54cc0a8376c0aa699fc0109c9b9d779f5369250038f8a2443bc8b221e4cd3a5537ae0c6b22e2991c21fb6cc81c0ca48749f7d670ce265d365195475e0d6f9c8573394fd53d1b9c05eb5460c54fb071e7ee19bf9667f1330751f7c81ba7591b66da876dde2d1bec375d9e0a9d06d8c8eb40c4dc159dc1b1a9657c810e95b951675640b41e89d9346d912ad6dd11924291313ba58ab54a340a0a6b586167aee56c10b44b3f5f04a5928a4218613f8ccca7d2dbc1e978ad35cb23bd1204fa77630b74cc9fa9ea21ad5b074c3b4e6fca95473b7921e8b0b7019413991affb1bb0ebc092f5acd2ab5f00aadb066a7c0bc6c24cd51a03a8490b8a9a15a6b9685c09b66096f9c6b2acdd0feacc26fe25099fa251e15dfaf1532caa71b01a86c1d5079e1ffb8235529a089cb7fc3a72ea3673ab6392c442447f090ba57ffa0f73dcf55bbdd0edb9b7668f558dfb78dc4278d4dc8a4b325df1d774bcc5b27e0b34a8e59b8f621c09d975cca93166da1db56a90a9979f847ba95624f30e43e3803a91e6124961f2a0a196a675fea872cccb61b0a6739d5b870aa2da5725c8cfadf502850cc08bc006bee90b2b36c6145e87e21f9944f235d84715c8d695f6492bee5597d481d52a28f3dd1d299334c9379c4dd6168992d2b27bf722957e59960ce33621ffecf878345932d95907995864c3b363243ef03113c120a1b58b7581856639d1ec7e5125558fb8adc6e0780c29084ae9a3eba089f4f54ee9428cbabf67a85cdac5a05d5a85196f2431d09b31c5bc33efeb5af2ae4d32398b9e9e6dc54289bf7f82c35a9bb0432ee645dabfce93964afac657069d5f364885ab329ef05dce8acfb9294bf46ac9fb7d0db8c6bb47c40b21dad121b2209963991065bd88f96a8910e323776537aad3e7e713c40f644104da5bb2c6c8fe8306690c8f521d53a2c42a08da079aaf58c463380d6bd524a9fc2104ee5c842786d119804bb248cfd318988d42bad017aa06d93db076a01a987be44ce0ce9784050ff8b3805b45b39332644b7a94d3bb500f3efba72bc66726085f3513a7512489fd737900bc1f6edfb10a253082a427040b79c959adfc947e32034e193a70bddf62146002b1995cd17e7ba1efb49a27970f249ab7506ea56351b14d7c327be6918988666b614a2ce16c1eb07e509e81f99239367aa5d7424e4f81cc58dd5d43f94fb8805a807836f09f015a5d50cd4f0c14577078599d15676d2c209a8746e5bef6a5efbdd34c7d1dccaa41d6545605bba100510c9f2f7330dd357376e7baaab7b4de8c670ed48341365f972ca0808064135bf708072f60cb76a0b4540d648c86cc8028eb8b7609cc8e97b0660a655e9c537a4be625d0fe3963c1302dc736796dcff9e78094f7daac7f8d2dadd36f381aac85f65cf328111543d9d7e9d61bde5d2a6664c477d8bb6aab1420c0d3ae0f0d9429a93f141ba650ff4b4e17655bec3ccce20ec0a3d8ebea150685244463639afc8ba895cce936aaa7940433c267161fbaa5a2f34e5c51db85509e46f467d5186ae390ffc3c60de044915da1af645fa19a47c4acfb2a3d7b1f3c001e7e32edfca71599f967a98081d943ecfbe745c39ef657e42a37c145724133cd7ef50c5f54e228768aee9809b00cb7053385a1893e47409fbed2e2b832b060f8ce1198fed99df9b94b35a16acd3cfdb79ec900b6c9eabf8e96f864fdea9b30c90048772e8704d939eea7d23b15ee6968d1192bfec23663e0086f1f3a874a47e5a893fee04c55b60dac90f938de86da40f376d1f33f84b814497a47cad53f4cb3de848573a2c06373cf999c81b78baf027c45fa35e02715745b88e3eebfe98d8d09e77d05f21509928560bd7166ce61e753bbc9697392b00c04db7f7c680ff30f98067db8255eb54cceb9b682593bba63459718f0d38be4e34d1f31a6bfeb69c2e045d6686b1a63a171a890a86f7e6e553a8e3b12501108184a93c47bfffc7b33a1960fddd3c2900e3598dd2497238faffff9db9de9dd4893d7d41b7a76cfbd3555d2079a1b787dba4495153108b47cb9d62c55914d911e5339c46b910acf975a086c190ccb215a37e8340ecc6b17bbcb51462d35242df3970c3a24f007bf2f40bd281fe6a0c287708038e24f18bdbdbdcd633eb6952be21e1b81133a6e3e1d07e073f736069b7cc11b78da124176f4a0c142100c4022e84efe46a269104f3c160de2a397885b72fc9a2c861d52811aba544061ebd5ecfd8a267c3a69f1f4fb0ebac3f4e316f9890d002cec94c041e6dce5b4e4dae28cc279c4a774202e6e5b7b37f3a72685fc3423f768c682a50a3981283b3213344d2923454a947abe7603939a9ef2d50fdbba9de434c96e229400aff509ac2e977865835d91eab9a9e7c1d6a467cff308cc6d48579ee2fcbe072c5ee5ba31a935633c2ab66ed3905044b49a3709195238632a18bbe345ed6b4dbc92414e30b7022205846fa97a800e9ee43ac05da582184da37d86a544d4fdbfc462c55fb25e2de061454363f015ff78b58ccf656117548ee42e53bdebe1766cf6bcd0e02ac020c62a12b98076c5ae7140f4e9387197111a5bd6f5d181b85779b80e3038e165ceec3b7b6cb9660d679a67c24d5321ad408bf9a91a1fb419f0cc34ef858cb73368cf0dd38747f7c2d40cf5c5606b28879a46ff921260292cacde71d8c03128874d9b7090acdb57866b32974368a54124283ee0ae8403bcfa491f5d574f63086568bfe8be7963b1327d16a399b672c1d28d4dc5343d131444f5634b066ebd58a27fecafbb678844a1e728c90da4bc229dc39905aed34617420fbf9aef28721b6964407b75ab7f5e44e9e7815d28512c037992313b1d4dcd11a49d4ee4339bfb8f5f60e07b52a21fbaa4baf51a35cdf9ced6ab9aa6db5894f9c97b318cb824f6afa972e21df3bf4ef6b00dc7ff29e9edf5e17bfe1247c74ce1dd693d913b176e95c505b2681119c1897887b97536501f8128555dbbb34f097ecb255734258b09b6d822aa142a2e5a23570ed315627cc2becee490294c625a3939c9adb608717868a98395fdd8b5ca397be8f57ebb64c9b1e2c0970bbc32f8aa0785edec83c990161125c9072bbe6cadee442e181b43471e5ef2cce8eb65f8717364f3894e9b4ca35e4fc78adbb13343b351df82fa15e3dd9eb410a7232d0beaac21a9f148d6cf57ebedbc4af967c1d5b91352358e1a472a451ede5faa75ee81d9ea967667d57fc47cdf168ecc080777f96574f24b028f035bcda93819349fdec2d118dad466762f3113d55114aee9e53d7e166895d2772f12d38b9d0138acba446ca0094d59a1ef18e7006dbcc1485a7fc1a4fdefe09986e36983380d56eebe493ce97ed4e9ae4d61899ba01ea46408f780b1279987a25d44bc51fdd1160fd08f4ecaa4f68d3ce384f9f749a9c22808ab79be97ef79088a83055a8bcf5a6e21b233f625b79cc9979d1e3c04c5234060446e483a3fa477d0a20acfe426dfd85d7a2234b3a4d277afed6cc5542fe328cc7e692a53f57622e7ea5ee1d9eb04dde021242a9fb4229d31780f44bc837ab3761c436512978afbf795cb9c414db5610bf5176ba1989680b0ea2edd57c35ba76c987c834ce828a80d11421353a1e14cfcdb446ce2afa3a40eef0b8910c05dd687068bdebc96f70439c836c1a8972cf1f9a4d86d3edab13cdb708d49361d607d95a1c5cac85a795c1a8249221dbb89d2ecf8cda5d799ea70f9e7c4e4d5db2d1092783e571f4bceb785f8fc2f77f9b29e2e84280c6a4c90364bd026da44bd200dbfde564df38de3831e5f820b3e11f5a40572e80bf9ae5e0fce8f356e6ca490e4e6a86ba82d75d71df2edfad9ef53cea20b859ca36ec6495b50f34c1ffa1281032f6b4d38962f679046947d9511b6891c61962c1f32c46ddfcc6b7f5cba8fb53e59c916a3e5037dd380f1101a01ee7b24bbfc092fe9dc27a10c1d5ed3c7ffba63504f242f87e5e0b4dea2b716c9bdbbcd1ad08b06d2e835cc075cd8ccef05d524004ebac666f8938143c3ffb3ac3ecc4882a9b07d2793664eef278581ba105902aa0cf70dfc5822db82f94fedf3ab0be1567f383b319eda3dd8fa98d8ef26c201cb526cc0f1da28eecbc791fcfe0a7b0bd26391192c85c2fde998ce4d4425e397dbac9a91a23cc3c0481f5bc4db7c69db512c7e5f9a4c2ed39b065ff0c7ff594f23c616e5fada48e5f237126e7bc2934e2d2392ea7c1724247f7b899bf894b8d7998c36c33cf569a79f0d444af0102152927d35f12e246c4b153f8bc63fd3de92c8da54c30faccdf762d2c50a2b14fdd7f08cbf3c5b81cd15719e2d15e0242edb682a44446f8d53f84316ed43f9a7d717dd7383d8d4595c8fa14b680b46ace6884c83fadffb480a1db6653eb2b7f3e3b54624785a7b8995c4fa5207bb3627f24264c60ec215b18e5ee4bbc4c6ce707264f7c17899a692d8d3c6b0d7a7b04f527779d30384245a46e74f1a0eec79d173bfdc10bf4f70947f37ddd750a1bd5ce102125e424db0238afbc5205a77e57116dc3cb41ad96c53789e31d66992e23bfaff7c17f747b914a94955e5287dac51d24547f16cee7ee44a42cdb61ce849a9d226c76c7ab1364bcea91d7cab0094ab32e65bc299a10fcd2cb477c6e78807111de130e9cb297f11a78aab984acad73477e304b0e64e726dbb9c87974032afbbf8e3805c34edb2329fbf036b781d68aec63a6105cdb30ab8e9a4ec9035e7557aaa07822aab1a073ceaa2241ee079c1d0c9471e78a32da46928d78835c1f8416c323c7e5dc85d5ef95d15b60a6d09aab24bae3f6ef6f79f3c529a7c438e8bc689d3c2b41cf1ff7e8646b7", @generic="a0646c1d6d4805d9d66d5a264e4427e7fdf14ff6730e97d726470315c3fadd8bfde089a464abc2dc69e016727a234aa215873f73c1e934c217318e2ffa9880c45d3eed1d507fb55329e693528244eebd18a36e529e98b4b25dc8a7d216095eb31af3c4b4a58a5885a737f848b842ecc9f02677430e93f6543bddd28d75d4d38bc30570ec6f0eaf486576aee443900a8912c930849baa1a96e028ba52aed49a05bcf4420a26071347b104d6571f3b8c0670b2208560c698c80aa8735f88b130da26f877cc3d85b8", @generic="7488ffe1afe5204da0629122733cb2d971618ba94e3fec0d3f4423c83e9923df2b0eceb4e41f4e2dd98eb4d884b26585f33596b1698688339ea0b13638f4c5"]}, 0x111c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x22) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000000c0)={r4, 0x19}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1270.590088] binder: 29649:29651 ERROR: BC_REGISTER_LOOPER called without request 15:10:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x400000) fadvise64(r0, 0x0, 0x6, 0x0) [ 1270.660564] binder: release 29649:29651 transaction 869 out, still active [ 1270.667958] binder: undelivered TRANSACTION_COMPLETE [ 1270.676329] binder: 29651 RLIMIT_NICE not set [ 1270.681000] binder: 29651 RLIMIT_NICE not set [ 1270.685958] binder: send failed reply for transaction 869, target dead [ 1270.692841] binder: 29649:29651 ioctl c0306201 2000efd0 returned -14 15:10:43 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x200000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r1}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000080)={0x3, 0x4}) r4 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={r5, 0x0, 0x9, 0x9, 0x5}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r4, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x1}}, 0x18) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000140)) 15:10:44 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1271.339177] binder: 29673:29678 ERROR: BC_REGISTER_LOOPER called without request [ 1271.349873] binder: 29674:29677 ERROR: BC_REGISTER_LOOPER called without request [ 1271.360492] binder: release 29674:29677 transaction 871 out, still active [ 1271.367853] binder: undelivered TRANSACTION_COMPLETE [ 1271.374097] binder: 29677 RLIMIT_NICE not set [ 1271.378952] binder: 29677 RLIMIT_NICE not set [ 1271.383771] binder: send failed reply for transaction 871, target dead [ 1271.390594] binder: 29674:29677 ioctl c0306201 2000efd0 returned -14 15:10:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, [0x5, 0xfffffffffffffffc, 0x0, 0x7626, 0x20, 0x2, 0xfff, 0x9, 0x0, 0x2a, 0x80, 0xdd, 0x9, 0x8b]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x1}, 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:44 executing program 1: r0 = socket$inet6(0xa, 0x2803, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:44 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1000000010, 0x2000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000380)="56c1578c5f16f6d13866eb4ec127d0a4f328b8289aa84bd76470fcb14156274982689850e45b400217dbc79122096d02dd1f24e8ac", 0x35) r2 = epoll_create(0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3f) quotactl(0xffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000280)="e703a38f47685af380fc6d9cdc1ca58c86c612e353c66e846943e1b0e5959dcc75bb04b75a172422e8b41d34c296a3588844bc73c38aec9ce35fbf7d84ee0d84dc7c0bc63555f056d4516f8da506b809d960ce25f6334c9674eaa759afa6b1fab77f064feca6f5a399652a24b5990eb423ca67c89a4f8435a8b803f6bc5cf2c125b65b") ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000340)=0x44) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x7ff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1271.960018] binder: 29696:29700 ERROR: BC_REGISTER_LOOPER called without request 15:10:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1272.086290] binder: 29703:29706 got transaction to context manager from process owning it [ 1272.095077] binder: 29703:29706 transaction failed 29201/-22, size 0-0 line 2825 15:10:45 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x200, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x7fc, 0x800000004, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0xfff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x1000004, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630000e92d39dad8be7af61384b44f68f4c354f02f6774341fbd0200b5fe76e11bd238143cfab95678"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x83, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) userfaultfd(0x7ff) r4 = dup2(r2, r0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000340)=""/4096) 15:10:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getgid() ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1272.382728] binder: undelivered TRANSACTION_ERROR: 29201 15:10:45 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x973dde704b9cd796) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x3f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xff}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1272.697487] binder: 29719:29723 ioctl 40086610 20000040 returned -22 [ 1272.715065] binder: 29720:29721 ERROR: BC_REGISTER_LOOPER called without request [ 1272.738121] binder: 29720:29721 unknown command 0 [ 1272.743456] binder: 29720:29721 ioctl c0306201 20007000 returned -22 15:10:45 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r1, &(0x7f00000004c0)="437e2fd2f207e2cb141331872c5fe147b5d4fb75f2b746e1f25d81cd63f4cb49994cdba2f253124ad4215ee8a5f1fdeb881716fb9dc7288ff1"}, 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000340)="233fcdded39a5aa8182074989dac14d36a46fed077cba4d23a6bbdb4fb8de1ca0c491a63fca0763687a1f8b465b2b9357f1a9d7ba54186e0b0f0b417c7cf8f3bd341159690aefddb0e0964ee4a355b3fc5c17444e2b930ba3115ca4d625ab38d9b69d448a6f887de9ca7bf7cc55f0b610e1aba3ae40e0cacec7863679ad55a6591c426b642cc4b751d72ca8b114d33a879faa39c8ae9739c9e4cde7a0568077f752cbd2ffecb52557a1c9254", 0xac, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r4, 0x2) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhci\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x5, 0x4, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1272.838864] binder: 29721 RLIMIT_NICE not set [ 1272.886357] binder: 29720:29731 ioctl c008ae09 20000340 returned -22 15:10:46 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="b9e1381659fd2650e29bebe6fe33982c79bd54c583674208c1ae1f950ee822e980eea70522c47ffd2c4b567eeb123a2d0288fcf413efb9a637bd1e6e972126e751db03dda623dbe253fc02437d3a07e3574bde179213e29471883e474e0011747b1b0b2310849960e44f4b0df27f1a830b437470810b7720b1242e6e09f199c473d7fa59bc588774604ceef0c2d77371118ce1c9feae9cfd", 0x98}, {&(0x7f0000000200)="a97bbfc9844fcc86e08a3cc6857d4a26080bd98e7957e0f91a397389e036874d3d3c18597bb1eaeed5fe3db485c5014ebd500a3e109ba45b1c50ef1eda2fdd96cda23c29e6d22ca3b63a0e803f74d1bc988a077d180a77141a6df32a1829fd77458cc26165d8b3125ef39bd8769a16aa644afcaada5cbf52248568ad6fb65849d02a8f3e213e43edd9602e81d8e8ea697243e28328a67531b22c29d8c7ae3122ae9d279f419db4a98254d98782b0e0307df74852010d4953cf1b2bdcf8bb92708a435eeaec03a4eb40a9b4871e474afa9f", 0xd1}], 0x2, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:46 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @multicast2}, &(0x7f00000002c0)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)=r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000240)=0x8000) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x6, 0x0, 0x4, 0x2, {0xa, 0x4e23, 0x6, @remote, 0x1}}}, {&(0x7f0000000040)=""/9, 0x9}, &(0x7f0000000140), 0x1a}, 0xa0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x10000) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/162) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:46 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18, 0x2}, {0x0, "e3437be21e902a24327f26357259e063fb4fd46c"}}, &(0x7f00000000c0)=""/231, 0x2e, 0xe7, 0x1}, 0x20) fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) [ 1273.243130] binder: 29738:29740 ERROR: BC_REGISTER_LOOPER called without request [ 1273.337926] binder: 29740 RLIMIT_NICE not set [ 1273.342832] binder: 29738:29740 ioctl c0306201 2000efd0 returned -11 15:10:46 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x410001, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000004c0)={0x3, 0x0, [{}, {}, {}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x80000000, @mcast2, 0x858}}, [0x1, 0x4, 0x40, 0x7f, 0xef9f, 0x10001, 0x40, 0x81, 0x20, 0x4, 0x98e3, 0x2, 0x5, 0x2, 0x100000000]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x7fffffff}, &(0x7f0000000440)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xa89c, r0, &(0x7f0000000900)="78dd4501d1521563ca4add9c9e0d719bf14fcbfdce2c8b9fa0d9f2e397367d89f4d14f37d1d2851e596541323503e21c993c7abd2a98661b23a87a24b70341697eb0f8932c08400772142c17e44fef399a0a30f8f208edb538d5af91c5ca548e3b3231b7978ea0b7f5dfddcb98a6e1e6bfaf055701bc80f4ef000699702f0d64817f1caf40ea8a49f8db57ca719eb8a85a9fd90ded2449cc85ca119b04dc7d611fbc37dff60523e79f95433c1a0885e1331164", 0xb3, 0x2}]) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) socketpair$inet(0x2, 0x0, 0x3, &(0x7f0000000000)) shutdown(r4, 0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x4b653b2c, 0xa200) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/188}, {&(0x7f0000000600)=""/36}, {&(0x7f0000000640)=""/63, 0x13}, {&(0x7f0000000680)=""/190}, {&(0x7f0000000740)=""/166}, {&(0x7f00000008c0)=""/55}], 0x1}, 0xfffffdfffffffff9}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x159, 0x20000000000002, &(0x7f0000007580)={0x0, 0x989680}) 15:10:46 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4b1c02630000"], 0x0, 0x0, 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1273.794406] binder: 29760:29763 unknown command 1661082699 [ 1273.800252] binder: 29760:29763 ioctl c0306201 204edfd0 returned -22 15:10:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000002000"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:46 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000040), 0x10000000000001ed) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="e92e2ed8d21045be8fe652430e2bec0f2945ce21a26b7674dc9431aee27dbbe08b8b02f6d907abfc012e41329df7475fc6598f067e49244cbf"}, {&(0x7f00000000c0)="f50e40144ee6414191528fe52e59dbc0faef5217bb4d8251a8038108d141f2b4a5bd6b3a7e70f760aebdf5daae012c3843d78318a6393e993df12c20fd221af6b50cb2b69ace4d8d36b14381d675f937a36df94c85f975b1176c4b8f94"}, {&(0x7f0000000140)="d618ec92bd01fe4328a69fba348928d5ecbc228be64cbbae763c974fdec1e398a4b1f23919e222c1e44955d39e7aa06a82798630f753cdc4b94f7771b739e7e22da51357d27ab966b0824e0deef40f9249b7c5d8fa9f8df09f9e130c44031f0175ef3f6e9b7f345632d9a20906a9901aa909b4634b38569f"}], 0xa3, 0xd) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1273.873113] binder: 29762:29765 ERROR: BC_REGISTER_LOOPER called without request [ 1274.027666] binder: 29765 RLIMIT_NICE not set [ 1274.028362] binder: 29762:29773 got transaction to context manager from process owning it [ 1274.032415] binder: 29762:29765 ioctl c0306201 2000efd0 returned -11 [ 1274.040815] binder: 29762:29773 transaction failed 29201/-22, size 0-0 line 2825 15:10:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x20000, 0x0) syncfs(r2) syz_open_pts(r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003fe8)=ANY=[], 0x0, 0x0, 0x0}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x20000, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x80000001, 0x800}) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000340)=0x8) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', '/dev/binder#\x00'}, &(0x7f00000000c0)=""/106, 0x6a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0xffffffffffffffdd, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) 15:10:47 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80800) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1274.344721] binder: 29786:29787 ioctl c0306201 2000efd0 returned -11 15:10:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@rand_addr, @dev}, &(0x7f0000000140)=0xc) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000240)={0xa, 0x4, [{0x7, 0x0, 0x7fffffff}, {0x9, 0x0, 0x7}, {0x7f}, {0x100, 0x0, 0x7}, {0x9a0, 0x0, 0x5}, {0x4, 0x0, 0xfff}, {0xdc3, 0x0, 0x200}, {0x5, 0x0, 0xe43}, {0x0, 0x0, 0xffffffffffff0001}, {0x100000001, 0x0, 0x401}]}) 15:10:47 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x200b30) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1274.501518] binder: undelivered TRANSACTION_ERROR: 29201 15:10:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000600)='id_Oresolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580), 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r0, r1) r2 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0xff}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x1bf, 0x4, 0x0, 0x1ef) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x10f0b3733d065187, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, r6, 0x4, 0x1}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) waitid(0x1, r8, &(0x7f00000003c0), 0x7ffffffd, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000640)="0f00d80f009200000000c4c2c99fa5266a0000b805000000b90cf684ee0f01c1c4e1857d6106c7442400a5000000c744240200300000c7442406000000000f011c240f18a0f00000002ef20f1adc0f213366bad004ec", 0x56}], 0xaaaad3b, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={0x0, r6, 0xd, 0x3}, 0x14) kexec_load(0xfff, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="d5e773cbe5c8b6b382f85b72f9490a", 0xf, 0x1ff, 0x5}], 0x80000) 15:10:47 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+10000}, {0x77359400}}) getsockopt$inet_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1274.733148] binder: 29796:29799 ERROR: BC_REGISTER_LOOPER called without request 15:10:47 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$inet6(0xa, 0x7ff, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x25, 0x7, 0x2, "bcc37f8b7c4370d25ab0f1226f7c198d", "bcf8fd7fc17791dd73456976151ffffa"}, 0x25, 0x2) [ 1274.784250] binder: 29796:29805 unknown command 0 [ 1274.789200] binder: 29796:29805 ioctl c0306201 20007000 returned -22 [ 1274.832916] binder: 29799 RLIMIT_NICE not set 15:10:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001380)="b80410ffb30726f01cf28d15d4c745016b", 0x11}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="0f082d2326088cd0177847dded1033d709cc3982b4d4d7b9e03a89cc103dabd44b26e36511bfb2ec675701c13b66fca405d053077f2f7615db8585e12cdb564264094e03407f0c26a9ca10e50c65927d2df5b3a37e029b1406d94e2222dc964f39bbcff19323b0e7de2a8a0ad4b550200468a575dfa9eab68b28d1d77dbb0a5b2d3b02633162f9b984fb1f2aea2f034a1df509df0be6f22688b97c26ae6fd0ef", 0xa0}, {&(0x7f0000001440)="d009c694fb4c138944a213cbc0254aaa4f9a42b43437f176d4060f735a9cbdf087942edb0173f94fe104407bb3c700933561e4db2bc11da848af824655ca9c67b860e7675d9592de90e7f1f4d65a71151a3535724ce23689bee6a4f04996be0d45e68075e1835ecb0d664e5c2e93b91a22eb4f64b28a35ca73ee20ff3f6e58a60296e73d66d9871c484f44e9a6afad7842bc4fef46a0f2fd03bb4367040ad780148579013d90d4b313f5e31d981940039e536c1b64f7c5c2c7ad59d3f4a9068d2bc1e5dfe3bc4760f8ad1634942f4c85909731e56600b2b9", 0xd8}, {&(0x7f00000001c0)="c30cb0971352f374dcdeaf2e94fc5cac780d9679f4109ab61acfe5", 0x1b}], 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lseek(r1, 0x0, 0x20000000000000) [ 1275.039765] binder: 29810:29816 ERROR: BC_REGISTER_LOOPER called without request [ 1275.067795] binder: 29816 RLIMIT_NICE not set [ 1275.072609] binder: 29810:29816 ioctl c0306201 2000efd0 returned -11 15:10:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$void(r1, 0x5451) 15:10:48 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r1, 0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:48 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000240)) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1275.578312] binder: 29828:29833 ERROR: BC_REGISTER_LOOPER called without request [ 1275.623064] binder: 29833 RLIMIT_NICE not set [ 1275.627716] binder: 29828:29833 ioctl c0306201 2000efd0 returned -11 15:10:48 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000280)=""/167) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xff, 0x591000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0xa, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x9e0000, 0x100000001, 0x7, [], &(0x7f0000000180)={0x990afc, 0xb3, [], @p_u16=&(0x7f00000000c0)=0x7}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200)=0x8000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x50000, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x4d174ee2d9132976, @host}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:48 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x6, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="78ec013a0199e04e66a14baf8b57", 0x3528a9c0}], 0x100000000000009c, 0x8) 15:10:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b630000841bbfe6d5e4783cfda43fe0a90d475d7669e91584620910c06d4997a3bcbe2e63b20fb683a7"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) [ 1275.955309] binder: 29842:29846 ERROR: BC_REGISTER_LOOPER called without request 15:10:49 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x2, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@nat={"6e61748800", 0x19, 0xffffff1f, 0x90, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=[{}, {}, {}]}, 0x108) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1276.003966] binder_alloc: 29842: binder_alloc_buf, no vma [ 1276.009750] binder: 29842:29849 transaction failed 29189/-3, size 0-0 line 2973 [ 1276.098911] binder: undelivered TRANSACTION_ERROR: 29189 15:10:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10040, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x3e7cd3644e786483, 0x1, 0x1}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x9, 0x4, 0x7fff, 0x687, 'syz1\x00'}, 0x0, [0xa3, 0x39, 0xdd7, 0xfff, 0x1, 0x9, 0x100000000, 0x1000, 0x2, 0xfffffffffffffffe, 0x3f, 0x7, 0x8, 0x3, 0x3f, 0x9, 0x8, 0x9, 0x7, 0x9, 0x100, 0xffffffffffffffc1, 0xd93e, 0x2, 0xbd0, 0xffff, 0x100000000, 0x6d28, 0x5, 0xfff, 0x80000001, 0x20, 0x0, 0xf55f, 0x4fb, 0xff, 0x800, 0x0, 0xfffffffffffffffc, 0x8001, 0xc14, 0x100000001, 0x2, 0x1ff, 0x5, 0x80, 0x80000001, 0x1f, 0xd2ec, 0x5a6, 0x6, 0x0, 0x55, 0x6, 0x8, 0x8, 0x2, 0x2, 0x100000000, 0x1, 0x7ff, 0x2000000020000, 0x1ff, 0x7c06, 0xfff, 0x200, 0x80000001, 0x101, 0x0, 0x8f, 0x81, 0x3, 0xff, 0xfffffffffffffce4, 0x7, 0x1, 0x2, 0x49, 0x71816039, 0x9, 0x3, 0x0, 0x2, 0x5, 0x7, 0x1, 0x730e, 0x7, 0x2, 0x0, 0x35, 0x40000000, 0x81, 0xff, 0x6, 0x2, 0x2, 0xffff, 0x82fe, 0x1f, 0x715d, 0x4, 0xbc, 0x0, 0x1000, 0x44, 0x9, 0x6, 0xb9e, 0x24, 0x7, 0xe975, 0x5, 0x0, 0x1f, 0x0, 0x3ff, 0x1000, 0x3ff, 0xffffffff, 0xe395, 0x5, 0x6, 0x401, 0x9, 0x654, 0xfde2, 0x8001]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = shmget(0x0, 0x1000, 0x88, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000000c0)=""/195) [ 1276.266378] binder: 29854:29856 ERROR: BC_REGISTER_LOOPER called without request [ 1276.307717] binder: 29856 RLIMIT_NICE not set [ 1276.312571] binder: 29854:29856 ioctl c0306201 2000efd0 returned -11 15:10:49 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0x8, 0x9, 0x9, 0xf72, 0x5}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\x00c\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x516}}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000000c0)=0x1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='0:-'], 0x3) fchdir(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:49 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x1800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b63aa8e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x140000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x84) 15:10:49 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) ioctl(r0, 0x4, &(0x7f0000000340)="6d685b96e5432678e9973eca965bc15f605d15aaf38fe3d608080c53f8e7e6d5ff3bc119621ebc34b2e0f46a2afd26ae7bbd9ce36fce32e6019c9d9d52034d7777c1fc06e86388401048bc528eacf70197314bb4731ab9c35502a6702d05f2d48b74aec44d4ccca7622cd5b6d9124b77f0eee72b8471aa64b7bf1c7bade9ac9180adfe96921824872410fb398ee8b396adbf5d656174abcbd43bfc08eb5cb80f984c1fb5998459910ab3f81020f9c6304cf0b184dc72745fc18977b0220fec631c763554ff34a4bf35e1bcc1ec21db35f3765ff040e8e8f05ba3d33a404fd0727fce52ce9bf466dbbd4abd65f3bf6560c093df61110d66fce7f7") recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) prctl$PR_GET_DUMPABLE(0x3) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x2003fe, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000240)={0x7, 0x2, @start={0x100}}) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) 15:10:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x235, 0x8000000000000000, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x6c, 0x18, 0x208, 0x70bd29, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x9, 0x400}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_MARK={0x8, 0x10, 0xff}, @RTA_FLOW={0x8, 0xb, 0x3f}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x1}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_MARK={0x8, 0x10, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40001) unlink(&(0x7f0000000240)='./file0\x00') r3 = syz_open_dev$dmmidi(&(0x7f0000000880)='/dev/dmmidi#\x00', 0x4f5, 0x2000000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x7fff}, &(0x7f0000000300)=0x8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x12848, &(0x7f0000000700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfff}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@obj_role={'obj_role', 0x3d, '/dev/dmmidi#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/eth1'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x76, 0x62, 0x62, 0x37, 0x30, 0x32, 0x75], 0x2d, [0x64, 0x37, 0x39, 0x33], 0x2d, [0x34, 0x0, 0x36, 0x64], 0x2d, [0x31, 0x65, 0x38, 0x38], 0x2d, [0x0, 0x0, 0x63, 0x34, 0x66, 0x7b, 0x37, 0x3d]}}}, {@uid_eq={'uid', 0x3d, r7}}]}}) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000340)={r4, 0x200}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1276.733532] binder: 29870:29871 unknown command 25344 [ 1276.738847] binder: 29870:29871 ioctl c0306201 204edfd0 returned -22 [ 1276.841616] binder: release 29870:29881 transaction 881 out, still active [ 1276.842591] binder: 29875:29877 unknown command -1901436149 [ 1276.849006] binder: undelivered TRANSACTION_COMPLETE [ 1276.854771] binder: 29875:29877 ioctl c0306201 204edfd0 returned -22 [ 1276.870519] binder: 29870:29871 ioctl 40045731 200000c0 returned -22 15:10:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) socket$inet_sctp(0x2, 0x5, 0x84) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xfffffffffffffffd) 15:10:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x184) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000180)=0x10000) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x3, 0x109800) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:50 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x7fd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x200000) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000080)=""/254) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhci\x00', 0x40000, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000500)="4a11e6bbee3669dd22461a5b6d5cac22084e12f0a3f859b3da35821a6642e306df83bec1252bba93301ed47ef4f2065daf14eba61dea0cfa7505dbeb70bd791a929db7665389ebcbfb4fb7726c46d7c3fa54aff1d7d6f9b632c0fa8a80a68daae20046713e67c60d11", 0x69) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r2) r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="b1000000a818229df7d82db0f44e1f9f479bde9077e8c7410329cdadaa339e201e7133cbad03af926598e80545187da98cd2ea0787827d16c2d26d782088b2118f62c50b174a64c4bb0d4b8319b7819b947d4430b9f5e139933d23eceac83d452361d243451e6de3b512dbe61e732fbaf1d1634510f67888484ffe2d351148c0e97c7922484e5ec46d8417cc489496517042152a7fb5369ab8a0c72c1eea642d82e4e113088d1a6e5a0c3a56d837cc3f02d9aa9122"], &(0x7f0000000100)=0xb9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x5}}, [0x3, 0x0, 0x7fffffff, 0xff, 0x0, 0x2, 0x2, 0x4, 0x1, 0xffffffff, 0x1, 0x8001, 0x16, 0x8001, 0x6]}, &(0x7f0000000140)=0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0xfe}, {0x0}, {0x0}], 0x10000000000000af) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1000000000000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r3, 0x128, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x2}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000100)={0x7, 0x4, 0xfff, 0x4, 0x2}) 15:10:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0x3) [ 1277.742235] binder: 29905:29907 ERROR: BC_REGISTER_LOOPER called without request 15:10:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) signalfd4(r1, &(0x7f0000000100)={0xd7}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000180)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r4, 0xffffffffffffab5b) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1277.794652] binder: send failed reply for transaction 881, target dead 15:10:50 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x61, 0x2b54, 0x72c4, 0x2, 0x100000000, 0x1}, 0x3f}) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) shutdown(r1, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@loopback, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) [ 1277.986362] Unknown ioctl 1074025684 15:10:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) lseek(r0, 0x0, 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b6300ab060000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1278.305337] binder: 29927:29935 ERROR: BC_REGISTER_LOOPER called without request 15:10:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="189bde270ae57f1a8065586bc4e06e9383ad913ab1d6be63c549877a1c2fad516dfc4b7e527644281f83bf1b35605c133e11ed5a84f90a57753cf4f5dade3c5cda8c51eaeb049ea3e0d5595cb8a75d8662d6ad597c3e6cf5b8d8b476148ddd44d0c2646c5ece5161853b84596aa98e5306963a3e7d811a3b1ad1ed224d5565fdafce1c5bcc5c6ed116de5dd3f8de906170b03f", 0x93) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x10000000}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0, 0xffffff4f}, {0x0, 0x11e}], 0x1000015c) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)) 15:10:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r3 = socket$inet(0x2, 0x80002, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:51 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0xe, 0xfdfd, &(0x7f0000000040)="1d0fae40a11a86dc70f14e63fad9"}) [ 1278.820368] binder: 29950:29954 ERROR: BC_REGISTER_LOOPER called without request [ 1278.843132] binder: release 29950:29954 transaction 884 out, still active [ 1278.850375] binder: undelivered TRANSACTION_COMPLETE [ 1278.858385] binder: 29954 RLIMIT_NICE not set [ 1278.863490] binder: 29954 RLIMIT_NICE not set [ 1278.868064] binder: send failed reply for transaction 884, target dead [ 1278.874958] binder: 29950:29954 ioctl c0306201 2000efd0 returned -14 15:10:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0xca, 0x2, 0x3f, 0xc155, 0x27c, 0x80, 0x5e9f01a2, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x1, 0xf3c, 0x200}, &(0x7f0000000180)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1278.916853] binder: 29955:29956 ERROR: BC_REGISTER_LOOPER called without request [ 1278.930487] binder: 29956 RLIMIT_NICE not set [ 1278.935463] binder: 29955:29956 ioctl c0306201 2000efd0 returned -11 15:10:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/23) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05026f0c1ae6076580bffc14bb3834eb8f8e2622bec23409a31f8d4c84303d9faa2542e07cb8e6396b85b1723f1cd3ac12732f47d205a8f1863bee1a06a449a879c0879e2adcdc07d6fc598cc049e86e78f07dbc67ae707c69a7e97c3c86ffd50c1054df36f559896fae3c405b2c9386b65d036d318b9d466cc6bd0b0fa0232480d681d5767eb6533e612fa209078f08d11a09501aa2152ebb3608b94dc802570c7a2f384a3fc8a82e050390e01ee037d132cafcba152cd75ef01841308c2c538ea600ec392038b68b6de748259b15d5c45f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:52 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff0cfa, 0x20802) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r1}) connect$bt_rfcomm(r4, &(0x7f0000000240)={0x1f, {0x3, 0x2, 0x6, 0x4, 0x100000001, 0xffffffffffffffb1}, 0x7}, 0xa) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r5 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x1, 0x1) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e24, 0x80000001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 15:10:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1866916b002e00bd04000000df252c5fc7d52ce45c99"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041) 15:10:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) signalfd4(r2, &(0x7f0000000040)={0x1}, 0x8, 0x800) 15:10:52 executing program 2: r0 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x0) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/78, 0x4e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1279.751198] binder: 29975:29978 ERROR: BC_REGISTER_LOOPER called without request [ 1279.784864] binder: 29978 RLIMIT_NICE not set 15:10:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:52 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x8, 0x2, 0x8, 0x7, 'syz1\x00', 0x3}, 0x1, [0xffffffffffff29c6, 0x5, 0x7fff, 0x2, 0x100, 0x9, 0x1, 0x0, 0xa03, 0x0, 0x8, 0x1000, 0x39d, 0x4, 0x1, 0x1, 0x8, 0x80000000, 0xffffffffffffffb5, 0x2, 0x81, 0xff, 0x5, 0xfffffffffffffffc, 0xfff, 0x7, 0x0, 0xff3a, 0x787, 0x100000001, 0x8, 0xc65, 0x3, 0x3f, 0x7fffffff, 0x100, 0x844f, 0x4f6a, 0x6, 0x9, 0xfffffffffffffffd, 0x6, 0x5, 0x2, 0x5f0, 0x5, 0x7fff, 0x5, 0x3, 0x5b6, 0x3, 0xce1, 0x1, 0x8001, 0x10001, 0x80000000, 0x3, 0x1ff, 0x81, 0x1, 0x4, 0xec0, 0x6c6a, 0x487, 0x5, 0xf2f6, 0x100, 0x5, 0x2, 0x55, 0x9, 0x674, 0x9, 0x5, 0x2, 0xfff, 0x8363, 0x401, 0x0, 0x1, 0x4, 0x1, 0x4, 0x0, 0x56, 0x6, 0x0, 0x3, 0x3, 0x1ff, 0x80000000, 0x6, 0x9, 0x1, 0x1, 0x8000, 0x80, 0x280, 0x7f, 0x9, 0x52, 0x43, 0xfffffffffffffffe, 0x574, 0xe853, 0x6, 0x6, 0x3, 0x6, 0x0, 0x20, 0x7, 0x396, 0x0, 0x7, 0x0, 0x20, 0x20, 0xffffffff, 0x30, 0x200, 0x200, 0x80000001, 0x7fffffff, 0x2, 0x9, 0xf3, 0x8], {0x77359400}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b68f8ff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000080)={0x9, 0x35, {0x56, 0x9, 0x1, {0x9, 0x64}, {0x5, 0x5}, @ramp={0x4, 0x2, {0x8, 0x7, 0x4, 0x9}}}, {0x55, 0xde9, 0xa81, {0x1, 0x5}, {0x81, 0x200}, @ramp={0x9, 0x0, {0x0, 0x4, 0x1ff, 0x8}}}}) 15:10:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffffffff0000, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1280.094338] binder: 29991:29995 unknown command -497653 [ 1280.100187] binder: 29991:29995 ioctl c0306201 204edfd0 returned -22 [ 1280.172650] binder: 29991:29995 ioctl c0306201 2000efd0 returned -11 15:10:53 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x0) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:53 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x2}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x0, 0x5, 0x1}) 15:10:53 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b6300a3f0686cd3401b2f87fd1b4c9003a700"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0xa0002, 0x88) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x3, 0xc3, 0x200, 0x1]}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11000040"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:53 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x12e, 0xfa00, {0x2, &(0x7f00000002c0), 0x0, 0x2000000000000}}, 0xfdbe) getrlimit(0x2, &(0x7f0000000280)) connect$inet6(r3, &(0x7f00000001c0)={0x2, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r4, 0x2) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1280.719544] binder: 30015:30016 unknown command -1560255733 [ 1280.725568] binder: 30015:30016 ioctl c0306201 204edfd0 returned -22 15:10:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08c3a2f1bef430361f470a3025232f7d4e3c3e1b6ba40fe8dc8bd6f8fa176bd8165c51d597953bc2a0effe6f37a3e234fd90a65a5d1ca3165eb9e920809fa34cdf2b6ec6ce72cf9a365a24c773461ad536cef6aec377fa4989ba35a5414c758ad008000000", 0x65}], 0x1, 0x6) 15:10:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x6, 0x2, 0x3}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r3, 0x80000, r0}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xb75, @mcast2, 0xdce}], 0x1c) [ 1280.847059] binder: 30018:30021 ERROR: BC_REGISTER_LOOPER called without request [ 1280.871610] binder: 30018:30019 unknown command 1073741841 [ 1280.877477] binder: 30018:30019 ioctl c0306201 20007000 returned -22 15:10:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) [ 1280.951064] binder: 30021 RLIMIT_NICE not set 15:10:54 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@upd={0x100, 0x12, 0x800, 0x70bd27, 0x25dfdbfe, {{'chacha20-generic\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000811}, 0x2004c881) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) r1 = socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x80000, 0x8, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x35c, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0x1b6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x5}}, 0x30) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:54 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x240000, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x3, 0xdd, 0x205d, [], &(0x7f0000000200)}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000020000) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000100)={0x8000, "921b0b891fde6057629b224e5e657286104f758b1248d8e62e6b2b6c2eb7fc2c", 0x0, 0x1}) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x0) inotify_init() openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000080)) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x1b, 0x0, 0x0, 0xba, 0x1, 0x0, 0x10001, 0x80000000, 0x1, 0x5, 0x8, 0x5953, 0x6, 0x100000001, 0x3]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x74, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x1, @remote, 0x4}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x5}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000480)=0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'\x00', {0x2, 0x4e21, @rand_addr=0x8b5d}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000240)={0x0, 0x3de254ec, 0x9, &(0x7f0000000200)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1281.824826] binder: 30054:30056 ioctl c0345642 20000100 returned -22 15:10:54 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) [ 1281.884089] binder: 30054:30056 ERROR: BC_REGISTER_LOOPER called without request 15:10:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000), 0x100000000000003e, 0x2) [ 1282.092851] binder: 30065:30068 ERROR: BC_REGISTER_LOOPER called without request [ 1282.157779] binder: release 30065:30072 transaction 888 out, still active [ 1282.165280] binder: undelivered TRANSACTION_COMPLETE [ 1282.171536] binder: 30068 RLIMIT_NICE not set [ 1282.176477] binder: 30068 RLIMIT_NICE not set [ 1282.181075] binder: send failed reply for transaction 888, target dead [ 1282.188025] binder: 30065:30068 ioctl c0306201 2000efd0 returned -14 15:10:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xe7, "2d4fd727bcd9775fa9cafd8a68c42acc6de99e8d7efa28d951cd30842dd69a0951d192d7c829810ba939969895ee87c0097c55a0f510318bd3a9888dde5cc4fcdd4421fd5160f71a6c2069c3e5fe55c9e09e33245aeed09b1eec688c6562e63416c99004f2ada735fd2bb8d9a2cf3e80d1ee5ff6fda4f435bdf398a6eed9a7b97db38e783c08517ed1ed0cfb9065092feefd14ce5f0a66bff6ee30c2e8f673c6695cb0c9f4bd2ccc2256ebdb92035da94e589178c47016ea4ece1508e5448264844f09d9ad720dd05a955ea0ed700a15ec1463b82c244281fa852ee55ea4dbdc8099319b978f61"}, &(0x7f0000000180)=0xef) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x3b, 0xc, 0x4, 0x9, r3}, &(0x7f0000000240)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000100)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) io_setup(0x100000000, &(0x7f0000000080)=0x0) io_destroy(r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipddp0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001140)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001400)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001500)=0xe8) r10 = accept$packet(r1, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) getsockname$packet(r1, &(0x7f0000001680)={0x11, 0x0, 0x0}, &(0x7f00000016c0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001fc0)={@remote, 0x0}, &(0x7f0000002000)=0x14) accept4$packet(r1, &(0x7f0000002040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002080)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000020c0)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f00000021c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002200)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000002300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000002440)=0xe8) getpeername$packet(r1, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000024c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002540)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000002640)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002680)={@dev, @broadcast, 0x0}, &(0x7f00000026c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002880)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000002980)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000029c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002ac0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000002bc0)=0xe8) accept(r1, &(0x7f0000002c00)=@hci={0x1f, 0x0}, &(0x7f0000002c80)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002cc0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000002dc0)=0xe8) recvmsg(r0, &(0x7f0000009100)={&(0x7f0000008d80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009000)=[{&(0x7f0000008e00)=""/216, 0xd8}, {&(0x7f0000008f00)=""/195, 0xc3}], 0x2, &(0x7f0000009040)=""/162, 0xa2, 0x4}, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000009140)={{{@in6=@mcast1, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000009240)=0xe8) accept$packet(r0, &(0x7f0000009280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000092c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000009c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11100000}, 0xc, &(0x7f0000009bc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="88080000", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r6, @ANYBLOB="8000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="4800020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000008000100", @ANYRES32=r11, @ANYBLOB="700102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004009c00000008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=r10, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=r21]], @ANYRES32=r16, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ee05000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004007b00000008000100", @ANYRES32=r19, @ANYBLOB="7c000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004000000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=r21, @ANYBLOB="200202003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r22, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004002000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r25, @ANYBLOB="3401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000005000600", @ANYRES32=r26, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRESDEC=r24, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400f9ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400f8ffffff08000600", @ANYRES32=r27], 0x32}, 0x1, 0x0, 0x0, 0x800}, 0x8000) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:55 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1282.512956] binder: 30079:30082 ERROR: BC_REGISTER_LOOPER called without request [ 1282.536994] binder: 30082 RLIMIT_NICE not set [ 1282.541932] binder: 30079:30082 ioctl c0306201 2000efd0 returned -11 15:10:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x73fa08d1b9712f9) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:55 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x200000000000) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7f, 0x1) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x2, 0xffffffffffffffc1, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1282.943611] binder: 30095:30099 ERROR: BC_REGISTER_LOOPER called without request 15:10:56 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x210000, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0x4, 0xa, 0x0, [{0x1, 0x200, 0x7, 0x20, 0x3, 0x6, 0x8}, {0x7, 0xa663, 0x1, 0x1, 0x7, 0x9, 0xfff}, {0xfffffffffffffffe, 0x1, 0x7e6, 0x5, 0x3, 0xbba7, 0x7}, {0x6, 0x3, 0x7, 0x1640000, 0x9, 0x400, 0xc20a}, {0xfffffffffffffffd, 0x80000001, 0x4314, 0x7, 0x4, 0x2, 0x4}, {0x5, 0x3579, 0x9, 0x4, 0x87, 0x170, 0x9}, {0x29d6, 0x8, 0x80, 0x0, 0x5, 0x401, 0x9}, {0x4, 0x7ff, 0x7, 0x80000000, 0x0, 0x2, 0x80}, {0xbc9f, 0x7, 0x7, 0xfff, 0x4, 0x0, 0x5}, {0x3, 0x7, 0x8, 0x100000000, 0x7f, 0x4, 0xb113}]}) [ 1283.008717] binder: release 30095:30103 transaction 890 out, still active [ 1283.015996] binder: undelivered TRANSACTION_COMPLETE [ 1283.065215] binder: 30102:30104 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1283.100942] binder: 30102:30104 ioctl c0306201 2000efd0 returned -11 15:10:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f000000c000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, 0x2000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000080)={0x6, 0x100000000, 0xc5, &(0x7f0000000200)="da407d2d675fb9daaedef48f4b1ba16f2ede28b94201bdc04e1fd2423c4cafc6c48cd1cc47bcc0fe70aed078a2bc388ad084796dafd5af72b1fed7a126753935f7a151be5ac01913623020ab7d0b62fee6dc8e0ebb5991a5380dbf18f26a75a61087086a5a14e351a72ffb73e00e5e44ba1ff67a97f13c5b2ba41f86287c4e205ed6e863be516c13daa5d4fe263e5a77ad4892e9c33f9875cba233ddeb8d83349b621042e3e063f2741c270fb083ae8182d0834a22ae5b9518f279452f0a05d26a8a09a039"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3ff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x595, 0x1, 0x2d, 0x4, 0x3, 0x3]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x0) [ 1283.312925] binder: send failed reply for transaction 890, target dead 15:10:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100012, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r3, 0x10001}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1283.584852] binder: 30116:30121 ERROR: BC_REGISTER_LOOPER called without request 15:10:56 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="1eda89a64e3fa17242a80ba1b0589bec070b4b6c788606dc8fd191c4a57718971640c74658631988a0e28255e64165ba59efe34502b6581a4124aaefb81b41af922e9b7e5b5c1612b592f24f2d9789ea83ca7d98c7eca8b36775e29c1eb8c120e056f0c392ca705c663d98544aeb5459bcce373b5f9cf75d486bb8afa1eef99d074bc541cf976fed30437169d6e85b5fe8a59e7cfdfbfc9012e88afe28b2ee6bff1a73166458d6c103d57e12972f60f2ce66adff067c46d91a4210b17316645763a0c33e7e6da9f0975d33a788e9a33267bf5aa1c4eaeb20c5c6ca5fbab800baf6c8d2210bbe4b8de4b3410688eedd515582d5f193bb4d9eec48aab50d3b82", 0xff}, {&(0x7f0000000200)="bf40c77c7bca5fd733c84691a11502f223096b9f4daa36e49aca96e18ebb33113b708fa8045419cdedfc68b55ff422ec38c2e232dd8601ad65ad1fc1ea55d2c4c8f9a1538cefb07de64adeb78a78527562990e01b7742f59a9500917b70a8927165dc335b27725361018f743803467fb2c2792887931d46186220e7f9195a6315908702512cd141ecac2156d0a10560cd8ffbd74d296c9f34717c984fb", 0x9d}], 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000005c0)={0x4, 0x8, 0xfa00, {r3}}, 0x10) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() write$P9_RSTATu(r0, &(0x7f00000004c0)={0x6b, 0x7d, 0x1, {{0x0, 0x3f, 0x8, 0x0, {0x0, 0x0, 0x7}, 0x1000000, 0x7, 0x1, 0x9, 0x9, 'security/', 0x0, "", 0x3, 'em1'}, 0x17, 'ppp1security-vboxnet1)(', r2, r4, r5}}, 0x6b) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1, 0x0) [ 1283.683964] binder_alloc: 30116: binder_alloc_buf, no vma [ 1283.689832] binder: 30116:30121 transaction failed 29189/-3, size 0-0 line 2973 [ 1283.695491] binder: 30122:30126 BC_INCREFS_DONE u0000000000000000 no match [ 1283.707511] binder: undelivered TRANSACTION_ERROR: 29189 [ 1283.713909] binder: 30121 RLIMIT_NICE not set 15:10:56 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x7, @vbi={0x0, 0x6, 0x3f, 0x32315559, [0x2, 0x6a00], [0x3f, 0x3], 0xe1ee9115e82de20c}}) r1 = socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:10:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f0000000200)=[{}], 0x1, 0x1ff) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{}, {r3, r4/1000+30000}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000003c0)) alarm(0x9) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2e}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r6, 0xe3fe}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r7, 0x53, "f760e5de8d162c9c59282a934cea60853c336c011e57645194b8ed485f9718a0b9219ca3a6c422930703e97427aae30794585b3fd7cf9ac82e85f7fa97811d7793d32c9ec2830602a9862f657502ff6072bc3d"}, &(0x7f00000002c0)=0x5b) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xffffffff, 0x500) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x3, @remote, 0x7360}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x4, 0x4, 0x4, 0x6, 'syz0\x00', 0x7f}, 0x6, 0x4, 0x4, r5, 0x3, 0x2, 'syz0\x00', &(0x7f0000000300)=['\x00', ']#+]/wlan0em0vboxnet1vmnet1trusted\\trusted\x00', 'GPL+$bdev(lo]vmnet0#:\x00'], 0x42, [], [0x5, 0x7, 0x0, 0x5]}) clock_settime(0x3, &(0x7f00000002c0)={r3, r4+30000000}) [ 1284.252168] binder: 30139:30143 ERROR: BC_REGISTER_LOOPER called without request [ 1284.274165] binder: 30143 RLIMIT_NICE not set [ 1284.278979] binder: 30139:30143 ioctl c0306201 2000efd0 returned -11 15:10:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0xffffffffffffffff, 0xffffffffffffeffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x3, 0x4a, [{0x10000}, {0x4, 0x0, 0x4}, {0x8, 0x0, 0x1ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x2, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="04004c008c665cf8a7acc9933e3c8a33d84bc394a2fb85bd4366d8bba49b15cc3edcf065170ff67818fa411a69fe12f1813e5a6b64a91a44779786723fccf73832232bb8da76c3aca1d613d289e86aa8"], 0x54) 15:10:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000140)) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030700d3bf376808"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:57 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$peekuser(0x3, r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1284.796069] binder: 30158:30162 unknown command -754972925 [ 1284.802078] binder: 30158:30162 ioctl c0306201 204edfd0 returned -22 15:10:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x10000000000000, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x100, 0x3, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1284.858595] binder: 30158:30165 got transaction with unaligned buffers size, 9 [ 1284.866528] binder: 30158:30165 transaction failed 29201/-22, size 0-0 line 3018 [ 1284.893776] binder: undelivered TRANSACTION_ERROR: 29201 [ 1284.944234] binder: 30163:30164 ERROR: BC_REGISTER_LOOPER called without request [ 1284.971027] binder: 30164 RLIMIT_NICE not set [ 1284.975913] binder: 30163:30164 ioctl c0306201 2000efd0 returned -11 15:10:58 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x81, 0x220000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x4, 0x100, 0x6, 0x9}, 0x8) 15:10:58 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x7ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4002, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, 'port1\x00', 0x0, 0x0, 0x8, 0x7, 0x7ff, 0x3, 0x1, 0x0, 0x7, 0x6}) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000000c0)={0x3, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xd6, 0xfdfd, &(0x7f0000000240)="ef3ae70244a38aa9175e2b0699f78c86e6f87e95c62e906a15cc928946fe82d29e38d54bc0d7a9db5510ef99d3db611632ca32773013986cfcd48d70640257d93419f30ff945033fb0fbe925cf26cf4fa6b80d4fc81148d512516cb588d9d4d4b845ca4b571fcd5f673e1aed16561f4d0fd3e83618e9ee184b8e387fe597722ab4b9c3b50e9bd81f85fdeaa9214a46e6de819572eff3828a4122762e75c31a407b1af91f5fd83ed3cf20cbde157c677085c8101e253138a3f4c6a7b2281d6c39344a04bd5c1a014ccb5f6b85ad0c93a5e2baaab30f40"}) 15:10:58 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x3) ioctl(r0, 0x81, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x7ff}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x8}}, 0x401, 0x7}, 0x90) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x100000000, 0x10}, 0xffffffffffffffcd) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) 15:10:58 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl(r0, 0x7, &(0x7f0000000140)="9eadfc50ae51f218eab6ed93dfe9b0afb686b86002f8e6ac018972ac105ca038963a859673c1b2296b9b2604e73d40031870d30d8fad1fcf05aaa7796f2f5498c04ac95dc87319001830e9b5191685f9ff9b31516e4a04bd139ecda90f9f7f937adad90b68164eb8cc096c0f120a406840fc8235e6e2addc2e4e91543b15bd6540d2a4ed74d0a6f54754209f75ad897035abe6841d0fea32e3ac93c7c8b0dde67aad4678eb8fd30da2") epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) 15:10:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40042, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) r5 = gettid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000140)={0x6, 0x100, r5, 0x7fff, r6, 0xffffffff, 0x7, 0xbec8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0xaaaaab1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181081, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000000c0)={0x51, 0x7, 0x200, {0x7c3d, 0x2}, {0x9, 0x5}, @period={0x5c, 0x8, 0x6, 0x0, 0xec, {0x4, 0x101, 0x8, 0xffffffff}, 0x9, &(0x7f0000000080)=[0x8, 0x6, 0x1, 0x80000000, 0x400, 0xfffffffffffff000, 0x4, 0xfffffffffffffffd, 0x1f]}}) 15:10:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600), 0x10000498) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:59 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1ff, 0x420280) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x800, 0x8cd, 0x5, 0x1, 0x7f}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x100000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @loopback, 0xe7df}, @ib={0x1b, 0x6, 0x7f, {"fe2f8940d3f2da0b90c9f0dcaf7c4a35"}, 0x401, 0x7, 0x7}}}, 0x118) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000080)) [ 1286.036055] binder: 30206:30210 ERROR: BC_REGISTER_LOOPER called without request [ 1286.085818] binder: release 30206:30210 transaction 896 out, still active [ 1286.093198] binder: undelivered TRANSACTION_COMPLETE [ 1286.100930] binder: 30206:30210 ioctl c0286405 20000140 returned -22 15:10:59 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) mq_timedsend(r1, &(0x7f0000000000), 0x0, 0x9, &(0x7f0000000240)={0x77359400}) 15:10:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000080)=""/16, &(0x7f00000000c0)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1286.535258] binder: send failed reply for transaction 896, target dead 15:10:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x57, "f0a9c62d43d79f82b2c6df29b2ea1f57c94dc397c1f58d39a2a9eccd4099870b639f12cedc7574dbab6858b5f2de873ffde7f79cf89fded7b2d12c255068e4fb82c7da62add72ca7ae4436b65c6051de0a86407b9aadf1"}, &(0x7f00000000c0)=0x5f) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x200}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000200)=0x0) ioprio_set$pid(0x2, r4, 0xf9aa) 15:10:59 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x4000, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0xffff, 0x8, 0xf73, 0x4, 0x400, 0xff, 0x6, 0x5, 0x11, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:10:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:59 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1286.978178] binder: 30236:30237 ERROR: BC_REGISTER_LOOPER called without request [ 1287.023762] binder: release 30236:30242 transaction 898 out, still active [ 1287.024036] binder: 30237 RLIMIT_NICE not set [ 1287.030873] binder: undelivered TRANSACTION_COMPLETE [ 1287.035578] binder: 30237 RLIMIT_NICE not set [ 1287.035644] binder: send failed reply for transaction 898, target dead [ 1287.035691] binder: 30236:30237 ioctl c0306201 2000efd0 returned -14 [ 1287.232758] binder: 30244:30249 ERROR: BC_REGISTER_LOOPER called without request 15:11:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x103002, 0x8000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'teql0\x00', {0x2, 0x4e24, @local}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x100, @loopback, 0x8}}}, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x13, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000000)='trusted\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1287.276410] binder: 30249 RLIMIT_NICE not set [ 1287.281264] binder: 30244:30249 ioctl c0306201 2000efd0 returned -11 15:11:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x223) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r3 = syz_open_dev$sndpcmc(&(0x7f0000000680)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000006c0)) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000480)='/dev/video0\x00', 0xc, 0x3) socketpair$inet(0x1e, 0x5, 0xff, &(0x7f0000000700)={0x0, 0x0}) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000740)='trusted.overlay.opaque\x00', &(0x7f0000000780)='y\x00', 0x2, 0x1) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:00 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) dup2(r0, r0) lookup_dcookie(0x1, &(0x7f00000000c0)=""/235, 0xeb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r1, &(0x7f0000000000), 0x10000146, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x3, 0x80, [], &(0x7f0000000040)={0x0, 0x4, [], @p_u8=&(0x7f0000000000)=0x8}}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x41b) 15:11:00 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) timer_create(0x7, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000000200)="4ccdcca6bbca298010b599c8921f84e2a85c1c1fab263dd406e0eeee2a180419ed726a5cafcd07b1476355677b095b84976ff573de7a48f5de9269b71d4a9f29413709f1cf1cc106727be6a7ab86434d8c9a2b3221a96309f6bf3c082ec909d6ee53b86d6c2a66539e1cbbaffebb0329711c09048b952d680254d9a08de136553a58a1ac58bee8855a88771e9e4845a0541647f32ce083357628c357f67170744bc9542b7390877ad1ce899a8f389160c47ae6a3de2f5815d46920701e6903623b1469d8dee3ecb71719d8a946c95551ecac6c7f5ee3f89f69a1367419", &(0x7f0000000300)="00b7d928ef7679abb6fd2fb154a00e093065818a3dc2c4c61d35c0b166075533718e0fe9a2580469463b4910b1272a2d8594ba2c25a920590a250173c2aa5142122008988f7fb89320"}}, &(0x7f0000000380)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="10f3b29a2bd834a0253020faff2ef7d828a06a826d4970541bf9035837ae6fd8461c8ec4537eff78879ccf32407f6fdbb78cf8fbb1db310553c3dd4ac3d849de89815fdb96c107f189e515706ba31a24af") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b6300002915afe190dbbb6d60e1835909654ca859cb44c274336df2f10c6c8c00e16e589689bd1f751c36d77737c0e4c29241b94d54508136618382ae427f26fed2f9809f82ab06491ed38908bf793049674dce7290e21c77bfdc5831807f1671bf88476608b0c354c9d3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1287.589494] binder: 30255:30256 ERROR: BC_REGISTER_LOOPER called without request [ 1287.646217] binder: release 30255:30256 transaction 900 out, still active [ 1287.653621] binder: undelivered TRANSACTION_COMPLETE [ 1287.660990] binder: 30256 RLIMIT_NICE not set [ 1287.665939] binder: 30256 RLIMIT_NICE not set [ 1287.670605] binder: send failed reply for transaction 900, target dead [ 1287.677518] binder: 30255:30256 ioctl c0306201 2000efd0 returned -14 15:11:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1287.845463] kernel msg: ebtables bug: please report to author: Wrong len argument [ 1287.870491] binder: 30261:30266 ERROR: BC_REGISTER_LOOPER called without request [ 1288.053001] kernel msg: ebtables bug: please report to author: Wrong len argument 15:11:01 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x7f9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80040, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000100)={0x78, 0x0, &(0x7f00000000c0)="109079d5615673a6d95e6a3161e196f1285005198560af41fb531418939f8356a5764c", {0xf9f, 0x6, 0x0, 0x0, 0x8001, 0x6, 0x6, 0xfffffffffffff001}}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) 15:11:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r0, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) write$binfmt_aout(r0, &(0x7f0000000200)={{0x1cf, 0x6, 0x9, 0x305, 0x1e8, 0xfffffffffffffffe, 0x317, 0x48b}, "6379de7cbcab0836a4321ec6bf5ec4a86d3213006e9e9b57bff9eedae32ee5c499413a8d8cec11e6bd016a0728f5245cabaaaf4b84ba83b023a1d9eb0ac4b31fb88c7cc6d1a6ea0f78e3a609d280bd91d14181a7caa8b57434478e123451dc3a56aad93780e7c5aa54e25979238f47527833f675", [[], [], [], [], [], [], [], []]}, 0x894) 15:11:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xe06}, &(0x7f00000000c0)=0x10) ioctl$KDDELIO(r1, 0x4b35, 0x3f4a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a3010acae9a31b5a18aa354ea1cf86c68ed52c7f7c2125e74957c7b8e099f366d9c06e2041ed96fcc62f017988307ba56f0fe70439bf830ca7d46163bc7a7070b02b083d766d24e28daf218b58c3e2545156c99426021f0bf32ccefd1aa53c4b5e661393bc35e"], 0xffffffffffffff58) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x8000, 0x894}, 0x90) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 15:11:01 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0xe, "4da641e6fd55f5a58c1bd08e2d0c"}, &(0x7f0000000240)=0x32) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002680)='/dev/dsp\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000008c0)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x60, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x11}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x11}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000026c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000027c0)=0xe8) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x3, r4, 0xe, r2}, 0xc) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="86fd9f23c0089ef4e1808eb9f0", 0xd, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r6) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x4400) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000005c0)={0x7, @win={{0x800, 0x8000, 0xffffffffffffffff, 0xfffffffffffffe01}, 0x3, 0xf0, &(0x7f0000000700)={{0x7, 0x80, 0x0, 0x4}, &(0x7f00000006c0)={{0x8fd, 0xa000, 0x2, 0xd6f8}, &(0x7f0000000080)={{0x4, 0x100000001, 0x7, 0x15d}}}}, 0x0, &(0x7f0000000740)="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", 0xf4a9}}) r9 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) ioctl(r2, 0x400, &(0x7f00000004c0)="296b17df81e56267112111a78650766641aaf4496beb87df2eaee5a24eccf582b7e6bce6c5e604a73cafdd2c51996665783daf73b0c703fbd5a3d66205ca7a01956362e0be62b25805b7a6b6e21c8debce38a0cfd8bb98a9b15d7179833101a376b9a335e8815f9990898ffb575a882b6fa1fe61886f4ac64bb4f7c058128b1337e93709137ab8fde7f3768e914ad2d128628513f3b50ca614f4f326ae03a73c519195d564bf33263f22426c5796a44bec516830c3aa1974c67aa3323d3cb5a5c09033c643dbdb95bf68e7c92b245b89d8a9db3a5dd48f64ca3c5766515234c65d1ba2688376c83ccaa39e8ad185") keyctl$unlink(0x9, r7, r9) [ 1288.397943] Unknown ioctl -2144315894 15:11:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x3f, 0x3, r3, 0x8, r4, 0xfffffffffffffffa, 0x7f, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) write$P9_ROPEN(r0, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x48, 0x4, 0x4}, 0x3}}, 0x18) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000002c0)={r5, &(0x7f0000000280)=""/58}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1288.468011] Unknown ioctl 22017 [ 1288.548511] binder: 30288:30290 ERROR: BC_REGISTER_LOOPER called without request [ 1288.586469] binder: 30290 RLIMIT_NICE not set [ 1288.591204] binder: 30290 RLIMIT_NICE not set [ 1288.596032] binder: send failed reply for transaction 902 to 30288:30301 [ 1288.603248] binder: 30288:30290 ioctl c0306201 2000efd0 returned -14 15:11:01 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1288.673975] binder: 30288:30301 ioctl 5 0 returned -22 15:11:01 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0), 0xfffffffffffffec3}], 0x1, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@loopback, @remote, @mcast2, 0x8001, 0x194, 0x6, 0x500, 0x7fffffff, 0x0, r3}) 15:11:01 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) fallocate(r0, 0x40, 0x7, 0xbf) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000240)=0x3) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x4, 0x101}, {0x5, 0x1}, {0x7, 0x7}, {0xfff, 0x7fff}, {0x10001, 0xfffffffffffffd38}]}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b6300b2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1288.969943] binder: undelivered TRANSACTION_COMPLETE [ 1288.975378] binder: undelivered TRANSACTION_ERROR: 29201 [ 1289.158551] binder: 30319:30320 ioctl 400c6615 20000040 returned -22 15:11:02 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x20, 0x30000) ioctl$TIOCSTI(r0, 0x5412, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@dev, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$xdp(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x4, r3, 0xa}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ef4f7beff0b2c53c854c27e3aa02f4701320b8b4b467da0ed8428f626f5742b735f26a3d0098b44275e9d4aa51ad5aee73906b1518a1830d910783ba102552d76ab550870d847e7c17387c89277611b4a864c9dcf3491dce5741d6205be85b25ba3ef7d9ab633c6be9fe9174d29a5637a39a1f83b9c992ad96c78fab3a761cf18bd236f53055d5700c199fef29c972cf2ebdc897f7dce3955694a20842fbebe3dda861ece21e5a21274b8e437c5cf79d468f88c0c7cec8c5a8ec7920", 0xbc}], 0x1}, 0x20000000) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x5) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000300)={0xc, 0xe9, "3d1aba455db76683bf4e0920ca8d10962d465d2aa193b0ccd1027993e19f0c253288c4217fd8f8ee9aff9c605f6e3beeb286ffed10687f89a5067c5e9c2136b625deebe64b566c60ade67aad5b1f208ba0441a29fe1640080db976494c92380ccf57aa4b2f90e5b3f129fddc783fb1387219a5ae05b66a890b4435e623b05c60af8f274b4c3c53c1fe9302533adb2c9a89a59c179c4edf61c78bc5cb43316e2e62f962510f0a415e751b756b420a4e79c0dfe8fc3ebf00681c5bacc344ce925800be15b248cf82bb1991b57f6255811fea308d29e124b8b5689d33a8938118f09788bacf689a03d775"}, 0xef) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) sched_setparam(r4, &(0x7f0000000440)=0x4) [ 1289.202298] binder: 30319:30320 ERROR: BC_REGISTER_LOOPER called without request [ 1289.222624] binder: 30320 RLIMIT_NICE not set [ 1289.227358] binder: 30319:30320 ioctl c0306201 2000efd0 returned -11 [ 1289.253603] binder: 30316:30321 unknown command -1308597493 [ 1289.259468] binder: 30316:30321 ioctl c0306201 204edfd0 returned -22 [ 1289.318628] binder: release 30316:30321 transaction 904 out, still active [ 1289.325946] binder: undelivered TRANSACTION_COMPLETE 15:11:02 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x1) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x77359400}) 15:11:02 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) io_setup(0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7f, 0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000080)="2288848eb0cb2d7d4f1891497eeec57037c52e262292cd48a94318126ca794afc773ef42826a35296005ee49495906458744279205fd7a10ede2183fab1ce3079e88ed6835ca004c7e7f450df720abaad5edfb5fbcb60419f3a212739fd071abab17b1f28ce69080ec264fb7a79f0a103ca75f897a3aa788acd60367e376085365250de0415bcaaadfc9be168e3ac114223ba886c339d1b0df53269068dfd1e618088d1d3475dd9f45b88259a50549d3549bce4c5f7c659faccfa63e1a0e94ade544210d72bb2f946873cf423f25e25cd1a8cdc72490b638a43a7e1b73ff694d63d6dd500fe11d9b90b801ed6d15c869d414b4a1e8e66f", 0xf7, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r1, r0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x2, 0x40}, &(0x7f0000000180)=0x8) [ 1289.670081] binder: 30332:30336 ERROR: BC_REGISTER_LOOPER called without request 15:11:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x97c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_DO_IT(r1, 0xab03) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:03 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2200, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000240)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:03 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x240, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r4 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000340)={0x72, 0x7d, 0x2, {{0x0, 0x4c, 0x82, 0x1, {0x21, 0x4}, 0x800000, 0x3, 0x5, 0x2, 0x9, '-security', 0xb, '+selfvmnet1', 0x0, "", 0x5, 'nodev'}, 0x11, 'system-{userwlan0', r3, r4, r5}}, 0x72) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0xffffffffffffffff, 0x48, 0x6, 0x0, 0x0, [{r2, 0x0, 0xfffffffffffffff7}, {r3, 0x0, 0xfffffffffffffff7}, {r2, 0x0, 0x4}, {r0, 0x0, 0x5}, {r3, 0x0, 0x8}, {r1, 0x0, 0x100000001}]}) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x38b, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1290.095909] binder: send failed reply for transaction 904, target dead 15:11:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c9b35a280b0966246f4194dc5573b75d907000000000000003b7f0bd5a300003962c46694e3750d15c1256e1f3c721f43be653fbe680ed35d4ab4cf07d290c297474400000000", 0x47}], 0x1, 0x0) [ 1290.414206] binder: 30359:30361 ERROR: BC_REGISTER_LOOPER called without request 15:11:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x79}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1290.469087] binder: 30361 RLIMIT_NICE not set [ 1290.473962] binder: 30359:30361 ioctl c0306201 2000efd0 returned -11 15:11:03 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116341f069590d3c8e429bbfc558e73d4e4e3867bb9edf5144251f076a72bb06dd"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) fsync(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:03 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3f5b10c32a0da4ab5b3ad1f907cb698f97944f2aae1437d1c86262674b23777c4732c204d45f545ae786ff8f6f935a3f05e04f97a50f16318aa55fa7d45f48a938a1b9db9d9c3f2a73bb54d73091cc1830372fa0ba012159c49f0972e95ced2f443c6e307d1fc4a1f8e8a66e5c54127fcfc7045fa921b024036ed1ce5778174b310400ffec3f336ea6d440154ea89eb2181b7e", 0x93}], 0x1, 0xe) [ 1291.113894] binder: 30386:30387 ERROR: BC_REGISTER_LOOPER called without request [ 1291.137752] binder: 30387 RLIMIT_NICE not set [ 1291.142579] binder: 30386:30387 ioctl c0306201 2000efd0 returned -11 15:11:04 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="fe7311ad6f077e265eb3b67690c8ca880000000000000000000000000000", 0xfffffffffffffd94}], 0x10000000000000b1, 0xa) 15:11:04 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) getresgid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) r7 = getpid() fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001140)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)="85215a7401bea890790df898d868fe3a33fadb5f892956b583684a5bfdafba1958d70478feedafdf0529cf7a738f755ffe9181ca0f08eb7e5f0d5c25af5c33dd29335e9dff860c7f51d4185f8d01f5e774120f74cfe4dc77df914ea33c711cdaabf9bae6d225b0362dec720edd69bf88f6f5ca6ed1580e8b803ac959162eb0b218cb5f81afcb3a99ac3e86bcebcecb66bd4707", 0x93}, {&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="450bad304d81ae2588eab75427ba25ff172d6dd9989b6b8aaba25aeb683b4fb5e7451e0388d628838d36aa0689a36bd4db75f2d61405d9198aabe82094378c2e404cf954c00c96700468ba6e256a790208ff626300603642f50ff74ec83ce81f082f1d0034c126917690b297c21bae66c8a32b980d43d806880f12f3b4b80f00b46ed31777339218797278588c05e3359663376a2badd24c40586f5774e07358be40dff21b1bc5e9ff5f74aa798ddc1c65199c12cccd177838834a239403baf3d5be5156daeab416001e23522c30c2e3c60bb175313baeaf9c094c", 0xdb}], 0x3, &(0x7f0000000840)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r2, r3, r2, r2, r3, r3, r3, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x70, 0x40800}, {&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000940)="d1396cc609e5228c7254b70ccb9e6eb4d0a7da349db62b953a65f167aa0404ea0d5f387192335f477be902a62943162f5a6904f30d8002e29e67b5e068114660b0ee398528fc306f1510c01d1600cc741b7944f6c6ecf1557dbd4c1a5c527562aeccbe049b6c6cfa0bf8f0d7d07966119f84953df0325975ac1f7ff276c242eec5594d83f42a24abc279ee91c39c11fe762006e3a4c8e21414c3eefffbf9c9bffeb59e7f7cffe0a83bac0f1631cd2fa3fec2dbe16e987fdcef38ab89cfa70d72c71a1f4b699d2cfb75f8d641b147", 0xce}, {&(0x7f0000000a40)="3b494c27a8afade4970f3637a764c09f0e0b0e6f9ba07336bc46dbffda9e8c6c2b63d4d786d02d3a5b8b717240781f5232b46cb3316003819f1463e45b41cbaa17451af75666d0b1fa3e6e60f25893b3e7d4480e36529620e6074b52133f53a0f5a457741a0a88cb081fadadb2e6810335def6c92186dcfc29139d01fc49d28ef03a33d9e908c6df1a787b8b3c6a46762479a759c74c279772cc4369258f5e82b7fbdb05cf2d938c8189a36f939415776727c1d5fe76327b352e92e62a7b51ef79c8209b6c5eb6c33bec66e94fa2f4330d843d4ed075b460551b5e566fd93d18bcf67e72981ba5913a0c83c1aa5b0bc063dc77f3", 0xf4}, {&(0x7f0000000b40)="5527bbf6ac63aac8669cd971a24488e0127617f993de7872cfba47fac158e35e5c81a05cbd0045f7cba3366e892720b0f48f06ee2f87dbf00de8b4c37ae42e04ecbdd8c17a94c8f3401a91a1781ec7952b71e3d3e167966afc5a75b0552998d0f3e9929df59af68b98444da6f259ebc8ada54c9078632cb1d0434ef752e16269a74360c4290c4a156d12daaeffcee73fcee1124036edca", 0x97}, {&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000000d00)="47217e8edf5fd269dee345f79c77b875325115ae997fcc277659058736728da322c299674db01b7e6d94d42c8a88c0b19261119da81aece2b19c3cd566cd07c6245c722457c7b5dc3eadce1792edff191c7a5cd8da2692bb8e3fffe43fd1fd3ae2e71f5e127667bd663ff0d89e4029543f05b2c66018721fa72826816f913c3362b81776cb217f2b47e468005d334040e9ead4bc3af97db3864667f02a", 0x9d}, {&(0x7f0000000dc0)="fc1614edbc3958cd4e3da9d70c2fc3", 0xf}, {&(0x7f0000000e00)="e9954b880f6196698767e2176aeb3d8f60bd5dc1921645f98ef40a13506d2be7d00840c7852cb2a5fb467393042346ee4168f63c6233fe085fddca89512739d011dce36243c1b18ae2b0d34707fd8191f7930aac27fb5a9df32e67cd946cb7d9c3f7aca6f4fedac1b6275e33e2b5cfa8016ad83150bf1108f6fb222cfd25e870698cc13878c923b9254c90b73a91f4e159647f0b839426116165e1b0e275d8ff0b72f3", 0xa3}, {&(0x7f0000000ec0)="bd50ee04045d080b15d4bd75d44fa1ad52b58319de2f0dea8c3bfe7de270fdf44640b63846aedee70f6893c12b77c1efaecfdb0c073280baafbded584eab36195c5d7b0b2ce85f8069e8dbf187166d4438de49cea6eef6088700613e2de22ccb7abdb55ba3dfb7cdafc234d474dfaeaee4a846848f9e12fb41de5c0a0a0dd348ec5f2b", 0x83}, {&(0x7f0000000f80)="8372214cb56bce3012e02dba8092ec4f8297f9e4da040c6335847e7ea4b5648bcdff925c837e45b3bea1c557c39e0fff20bae54ab4538ecbca6592a1445cb76e5ca2cb1ed5029cc6e382008e56d1b9b1be88fb76455a6faeaeb7c231", 0x5c}], 0x9, &(0x7f00000010c0)=[@rights={0x20, 0x1, 0x1, [r1, r0, r3, r2]}, @rights={0x28, 0x1, 0x1, [r2, r3, r0, r0, r3, r3]}], 0x48, 0x4000000}], 0x2, 0x4000000) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x15555563, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001300)='/dev/null\x00', 0x4000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001200)={0x1, 0x1, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=""/224, &(0x7f0000000200)=""/4096, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001340)={0x0, 0xd6, "7dd586a15860d33a117c3f750c93aa61f11eaf871c4f00ddff3f18f818c4a6721fabbbcde560256fee498594faa2bb2fde9b4dfc50af819716b5f1e3a8b89ce5706493485c7f7ed7cb82d2089e45cb094c37e9e7f7ded6a897ae80f0483971b3c72ecdb39e62e8d692b61b80b91a893434d0e60e7ee93c41735d8ede987aa2293266fbe2abdd90f4387af67f0ddcc907e768501ec8efd31a6be133edcb68499a874f67bb0917aa5738649f02dba7077473dcfc7539d58f6123fab7bb1112216b714762b7c162fe06ac96d3269c245c3be173fafcb40c"}, &(0x7f0000001440)=0xde) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001480)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1291.334973] binder: 30378:30379 unknown command -264150255 [ 1291.340875] binder: 30378:30379 ioctl c0306201 20007000 returned -22 [ 1291.355151] binder: 30378:30391 ERROR: BC_REGISTER_LOOPER called without request 15:11:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x101000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @local}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1291.604332] binder: 30400:30404 unknown command 0 [ 1291.609494] binder: 30400:30404 ioctl c0306201 204edfd0 returned -22 [ 1291.643415] binder: 30400:30404 ioctl c0306201 2000efd0 returned -11 15:11:04 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 15:11:04 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0bc871ed552bd2011344c6aa718c76e7208d63774880b065395600000000674bdec59b53ca979a51adc28d198d15f719a0f56d69f90a34c5876ee9f7ef8ad347c42c13a8053770"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x32, @rand_addr=0x4, 0x4e20, 0x2, 'lblcr\x00', 0x8, 0xff, 0x1}, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:04 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x4000000000009, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/27, 0x1b, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1291.944752] binder: 30409:30410 ioctl 40086602 20000000 returned -22 [ 1292.022932] binder: 30409:30410 unknown command -311310325 [ 1292.028833] binder: 30409:30410 ioctl c0306201 204edfd0 returned -22 [ 1292.099915] binder: release 30409:30420 transaction 908 out, still active [ 1292.107177] binder: undelivered TRANSACTION_COMPLETE [ 1292.137687] binder: 30419:30422 ERROR: BC_REGISTER_LOOPER called without request 15:11:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x8000}, 0x28, 0x3) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:05 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x96, "7d3225679b35365ea511e958e12b8be41e361dcc525d5f6569c6f564568a1a4059750bf642a40bc9b1de457e690bf5f35568fb57f2666ff30a30fc25b01d810901a5d05b05a64b32464d0fbe7b9f00d27adb8ae5e01d9060ae58983301d1e0cee037032ad928ec9f4166c1adbc01b5e7a7df4373b92d2a5bf83e19311b908a59993ade2a75d4d2a722535e38fa24eed40d749d5b1281"}, &(0x7f0000000000)=0x9e) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r3, 0x81, 0xff, 0x2}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:05 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1292.591226] binder: 30433:30436 ioctl c0306201 2000efd0 returned -11 15:11:05 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e20, 0x83, @mcast2, 0xfffffffffffffff7}, {0xa, 0x4e22, 0x4, @empty, 0x3}, 0x1, [0x4, 0x800, 0x40, 0xffffffff, 0x7ff, 0x80000000000007, 0x2, 0x20]}, 0x5c) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) setsockopt$inet_int(r1, 0x0, 0x1e, &(0x7f0000000000)=0xc, 0x4) 15:11:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x17, "07573dba8b6cd32fad26a24b2dfeee6b891b6c40c00660"}, &(0x7f0000000140)=0x1f) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3}, 0x8) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:05 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x2, [{}, {}]}, 0x48) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffcaf}], 0x89, 0x0) 15:11:06 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r2, r1) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1293.146004] binder: send failed reply for transaction 908, target dead 15:11:06 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") shutdown(0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0x1e0}], 0x1}}, {{0x0, 0xf4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4040, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$int_out(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000204}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c0, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x91d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4f0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x82}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8f}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x53}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x27}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x800}, 0x40) 15:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x15, 0x5}, 0x14}}, 0x0) 15:11:06 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x8001, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000240)=0x8bd6) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000280)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)={0x0, r4}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x2, 0x9, 0xffe, 0x7fffffff, 0x4, 0x2}) fremovexattr(r0, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00') sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x2, 0xfff, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000380)=""/171, 0xab}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000) 15:11:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r3, &(0x7f0000000180)='attr/fscreate\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1293.660486] binder: 30467:30470 ERROR: BC_REGISTER_LOOPER called without request [ 1293.696890] binder: release 30467:30470 transaction 910 out, still active [ 1293.704490] binder: undelivered TRANSACTION_COMPLETE [ 1293.715082] binder: 30470 RLIMIT_NICE not set [ 1293.719828] binder: 30470 RLIMIT_NICE not set [ 1293.724593] binder: send failed reply for transaction 910, target dead [ 1293.731535] binder: 30467:30470 ioctl c0306201 2000efd0 returned -14 15:11:06 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x6, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = memfd_create(&(0x7f0000000000)='vboxnet1user\x00', 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000011c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) utimensat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+30000}, {0x77359400}}, 0x100) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f0000000d00)=0xc) getpgid(r6) recvmmsg(r3, &(0x7f00000010c0)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, &(0x7f00000004c0)=""/124, 0x7c, 0x7}, 0x200}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/70, 0x46}], 0x7, &(0x7f0000000980), 0x0, 0xffff}, 0xa0000000}, {{&(0x7f00000009c0)=@pppol2tp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/85, 0x55}, {&(0x7f0000000ac0)=""/107, 0x6b}, {&(0x7f0000000b40)=""/180, 0xb4}], 0x3, 0x0, 0x0, 0x3}, 0x1000}, {{&(0x7f0000000c40)=@sco, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d80)=""/235, 0xeb}, {&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/235, 0xeb}], 0x3, &(0x7f0000001040)=""/115, 0x73, 0x9}, 0x8}], 0x4, 0x20, 0x0) 15:11:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 15:11:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x200, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)) 15:11:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000140)="fac6c1b5181ad2fc8438c388a0a329d8f0a65e74b494a0920a6b96549bcd33f7d2618995ede6fe46d60a2ab616cbd274b35955272c8a381b2d545f887b249d6d5cf508ef654be4982695aaabca865f7fad0dd1973e653183c12856b1e42863cea27bf2cf075415540a4dbea6b57aeb5e494607121520e20f5e21964f7007dc888a9c2615ca21f29627fcd5ca64bdd404763cdf3b96d2e1acc0210f9dc4a6a5fb67db17100e62500b87a054dad76a7dd2a9bca01184ae8802e5ba094a339b7905035a4e3a91c6c582a61d29a6bd5e72a2e35f955b89455f8820fe5260e68892bba017b26484a5c81125af67fdf8fb985552a285", 0xf3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x37, 0x4, @thr={&(0x7f0000000000)="b23989373e04847321ea14ffc363026328ef2eb156872290f2b69328aff662e994344f9f12b378bab9deee1b1603ceb737", &(0x7f0000000200)="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"}}, &(0x7f00000000c0)=0x0) timer_delete(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000001380)=ANY=[]}) [ 1294.388686] binder: 30495:30499 ERROR: BC_REGISTER_LOOPER called without request [ 1294.442997] binder: 30499 RLIMIT_NICE not set 15:11:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="d9e8cbd55427d9fc39ff1fd0d4714a32eea34574c84785da000000000000089abbf38593514a266cf2144a57b1cf8338000000586e17c1a1f0da18b0f52bf187c447ae7005f427bbedcfb4f7f63df3463f11aec6f6965b415729b0b9f0b70a79f69a862bdf6d3cb5bc137e835156eb0058e420247058e6817b0d09e70f895520fbbea8abe0b219f7209d1450eb082956c04b93a4abdae82b33fe75654093b0857b2088dae05c0483ee75306d467001dc05162adb1e54198b072062413ddde1988d8d2d5d92d33a32225c", 0xca}], 0x1, 0x0) 15:11:07 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) setxattr$security_smack_entry(&(0x7f0000000000)='.\x00', &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f0000000280)='eth0\x00', 0x5, 0x2) 15:11:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000300)=""/202) write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0x7, 0x1000, 0x4, 0x3, 0x7, 0xd1f, 0x187, 0x38, 0x33a, 0x69b, 0x2, 0x20, 0x1, 0x2, 0x0, 0x15}, [{0x6474e551, 0x8, 0x2, 0x4, 0x1ff, 0xfffffffffffff3cd, 0x3}, {0x6474e551, 0xfffffffffffffff7, 0xce5d, 0x4, 0x6, 0xffff, 0x0, 0x94}], "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", [[], [], [], [], [], [], [], [], []]}, 0x1978) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001f00)=0x2, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xb7, "1209275544cf2dcda66b3f510aac56c0bab012666adf523be82f0124f9045e13fc6df57b82a939888290dc2d5cbf71c1525f8de328f65f783ebd0cf1fb6be2a9c61e2770d5b2cd1d679e5af0f50a1defed259117606ade45bdc29c254c4392b6cda554509a24157646939baf3948f718ecd7236a802623208982455f9f82c02f56e5e5129e538a425eee7ca394b32954550f4f3eb050e1993189f9360be5315c3eea148a53563525b30da2cc1ccc495a0c8d4b88bf542b"}, &(0x7f0000000080)=0xbf) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x3}, &(0x7f0000000180)) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000440)={0x1000, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)={0xdb, 0x6, 0x7, "9317ffa46b0c94228ae69489d498da01253e2d7fca93be60f6ddfd8dc403fb73f5533306164ec72012cedf95f576301e514093d4fa4548d00ded17a9a4be457a08b69f98af1189c8fa10f8839770e58601c556b16ff8d8d4d42a106b472d458daf91db0cf21af5bda4dbe9e8dbdc8915b817a4782c872516dcb0fd7c56fdd987d91ff2cb87dfb858fe75c6a27685e6d742f1269c6f74a4413fe8b96caf666029bcb33ab60b598ca9e776b4b5b3ce0b377c48bb8697cbafc2b7c62412d185335aa464a37dda86b7d1928ad2a2fd701df48486a14b30da60e27abf20"}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000400)=0xffffffffffff89f3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:11:08 executing program 5: socket$inet6(0xa, 0x803, 0x5) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x5) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)) 15:11:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x5, 0x8943, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x3) 15:11:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) restart_syscall() r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'team_slave_0\x00'}, 0xff9a) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) 15:11:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000140)='proc\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r1, 0x0, 0x7, &(0x7f0000000040)='vmnet0\x00', r4}, 0x30) [ 1295.675009] binder: 30538:30541 ERROR: BC_REGISTER_LOOPER called without request 15:11:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000100)=""/228, &(0x7f0000000240)=0xe4) 15:11:08 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x0) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x210000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) add_key(&(0x7f0000000280)="636570680082ad9ca4376810fffd83454ab7932b5267d0526eb1770686a562f014e6f127fe2995c00129bc34e19b391cb36d09357419bb8cd8465c45d0f83fa2e75ee699c42012a53b85357bda467fe339d5fb31d721cbf1b11fde805e780f1da831ab3a6f2f4ddbe6fe8f5bb69019a52819293cdd423c879c5d881be348f3be13412b47f7596d3959586ecf600d92ef34b6402498a84a0725b907311c7d4fc218c573b94a8afa54346129d79fa6e9ed0e8e78239c949deca3cd2ab723726c644d04199d", &(0x7f0000000140)={'syz'}, &(0x7f0000000000)="a7a9e2ee00fe000000000000", 0xc, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:09 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1295.931373] binder: send failed reply for transaction 913 to 30538:30541 [ 1295.940384] binder: undelivered TRANSACTION_COMPLETE [ 1295.945948] binder: undelivered TRANSACTION_ERROR: 29189 [ 1296.176897] binder: 30560:30564 ERROR: BC_REGISTER_LOOPER called without request [ 1296.211030] binder_alloc: 30560: binder_alloc_buf, no vma [ 1296.217148] binder: 30560:30564 transaction failed 29189/-3, size 0-0 line 2973 15:11:09 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:09 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getscheduler(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1296.334096] binder: 30564 RLIMIT_NICE not set [ 1296.339278] binder: undelivered TRANSACTION_ERROR: 29189 15:11:09 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x0) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0xffffffffffffffb8}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x4e20, @multicast2}}}, 0x88) 15:11:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) pipe(&(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:09 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="02", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1296.895417] binder: BINDER_SET_CONTEXT_MGR already set [ 1296.900837] binder: 30560:30588 ioctl 40046207 0 returned -16 [ 1296.992760] binder: 30560:30588 ERROR: BC_REGISTER_LOOPER called without request [ 1297.040190] binder_alloc: 30560: binder_alloc_buf, no vma [ 1297.046286] binder: 30560:30587 transaction failed 29189/-3, size 0-0 line 2973 [ 1297.086077] binder: undelivered TRANSACTION_ERROR: 29189 15:11:10 executing program 3: r0 = timerfd_create(0x9, 0x800) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:11:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000040)='G', 0xfffffe17}, {0x0}, {0x0, 0x16b}], 0x3) fadvise64(r1, 0x0, 0x7, 0x5) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:10 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348405413c989da58ffab02820ba502eb781386fa7c910de97c5300bdf2559060183b9193a03b693acb2c5ce2ffaea184871e9ae2130720b2b60828c6101b017147d2605af441910b3603236d10f2e5fb15f7940c97cd968e31774a8bdf88bd245657175e07a9a2c633dffc52f18cff1c968a0ee0494bb6416807d143da6b90707a0893ac507d6836e7d1573a9bb8333f74bf08a290be7af3f8c61fdb8052fec0b1534d26388f2e50be0d1a720c8e2ba821929a18e35c"], 0x0, 0x0, 0x0}) dup2(r1, r0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:10 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000d80)=""/4096, &(0x7f0000000400)=0x1000) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xa8, r3, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8204}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x9}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffe01}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) [ 1297.725326] binder: 30614:30615 ERROR: BC_REGISTER_LOOPER called without request 15:11:10 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0xfffffffffffffffd, 0x7fffffff, 0x10000, 0x9, 0x8, 0x0, 0x7, 0x5, 0x16, 0x100, 0x6}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1297.813055] binder: 30614:30615 got transaction to invalid handle [ 1297.819511] binder: 30614:30615 transaction failed 29201/-22, size 3227737781587448721-2199872772954382940 line 2834 [ 1297.863589] binder: undelivered TRANSACTION_ERROR: 29201 [ 1297.864887] binder: 30615 RLIMIT_NICE not set 15:11:11 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000280)={'bridge_slave_0\x00', 0x81}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) finit_module(r1, &(0x7f0000000380)='\x00', 0x2) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000340)=0xfffffffffffff58b, 0x2) shutdown(r1, 0x1) getsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0xdb, 0x1, @remote}}, 0xd517, 0xfffffffffffffff7}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r3, 0x2}, &(0x7f0000000380)=0x8) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xe8a, 0x30, 0xb280000000000, 0xffffffffffffffff}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r4, 0x7, 0x30}, &(0x7f00000001c0)=0xc) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000200)={0x18, 0x1, 0x0, {0x6}}, 0x18) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:11 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f0000000800)='/dev/snd/midiC#D#\x00', 0xfff, 0x40100) syz_open_dev$usb(&(0x7f00000008c0)='/dev/bus/usb/00#/00#\x00', 0xb43, 0x121000) sendmsg$unix(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)="4cc5137730485494d6e98d7046f8dc2fe005ecb45d18ba15ec1b092e548922e508de43edd4f1af08586e2e77a9e939f18fe5e1aa06893303132ff63e344cb0f0dea85d824c6aa3ef21ab8d886556b0b9de7168f259b87d6777c90e1d9121e6e27c67446a5d2923ea9fea57cc2abbd81e47da8e04", 0x74}, {&(0x7f0000000240)="de61f31e796715c8041f4624cdacefbfa1eb15a37c142c8326e939f648cb7883cb1f31d5054d6eee9a9de19425cebe7fdfc1fb5dfd56c672c9d5da348113ec8d742705a916671650dd14047f877c92feddd0d334e0163bc5088442dd012c8bcac35ad02e40229c4f3b3e0b78a6d4b95d70c27f3ac4672ccca4afe2b7868990e1c0d0e89722", 0x85}, {&(0x7f00000001c0)="59d57c12d0b6", 0x6}, {&(0x7f0000000300)="232fd2b531404d4988181df89855b8ac7b58649b792e0766850001aa5c09f86d2fe43ba742a5752b0e5e9e8e80789c8af183a22dec0f2acca114610233e06a8f07961d6b6ea29321f1baad74ad2888f808adb3adeba7938d9b76fff520b74b51a2a9e4592fb37e233600641f0a2a418f2d6b2c8e3e8f483a6223d38903a53eca706e5297b328acb62d0aca1999c5dffd86f153002ebfb196bd604edbf99d45af786333b384b4a0f9e9d8f3e6be0879ef66704c300b9fb9267edc6679e721790e486e7d1c99f76d5061079fe96921f52578b22c6ddea9d3b4d89ca0636fad534bc9dc8de23e5fe1c1b7a238464b9aca63a2cf4e3cef823b", 0xf7}, {&(0x7f0000000400)="534e48858527ad0adea77eec3a1d09a802ad919f0ebb1a568016e4dd8437fdd98bb80b50369340354f217d78b656cbad2e68b1e1bbdc5be34bfe76dbfe5e2ab60f280cdb8588576467f5a193be1ca3f26407467b5dfb67466a95f22f17dfe60532debc01bd5fe1961df9a6c8d67493882a5c0ddacc376cacd839e3529886027aed3810b93299fe5ce2d6777880d82043ced91237a851f966ac86e364188a5f8b8c17833db400a9137ab957df788f072652a7937705bd798680c4d56a971c612d435110e1f218dabe3d77ebe4be", 0xcd}, {&(0x7f0000000500)="e02bbd6dffdb0267e8e43262fc", 0xd}, {&(0x7f0000000540)="d44cd829c3e03b1c2f419a62d0bdedcee46cdbf378727d9ee2db512df97fa34cc70605ca7a8b5f00cda502624b10c9d24f673ad5f9ad2c572045becfc94f2288307f40907ddf8f4f379751aae5097adbdbb844d61491646e7572bdccb3f561445303220e517e5b95a7b32a437fae41e23d98b9ed9c5570ee879dd5a8ec9499b5c21a8d6d72", 0x85}, {&(0x7f0000000600)="fb9bd64079a0f703feca3375ae39b845319728ad2e5b74953287660647fb1ca8531adf597ea6e4a0086db1ad44241da18acee5a24522ed824501", 0x3a}, {&(0x7f0000000640)="afe716d21b2976850a450dff39400c35bdae5cc16560eb6c1306061b725fdfc8a8665ee0b078538ecd1cc54c4d7b51711f84074c7c07341f2024d497e4d1fc376f4a54fe9b0dde192996619e6e11b7274ad28e1d5e004cf88e1d3caade0a21a2f0d6b0526690f126e3579632850e7ebae0fcac30d844bc88caed2f4b3788b4e4421caa73ba3d2b1f2a56c17199a035b5f691bbbd1641255ebea51a3f4b669721dd6df251b4d19e8e6b97998b9f9dec72f44da9d2973565311d7c9530851e3f154a604f96068a", 0xc6}], 0x9, &(0x7f0000000840)=[@rights={0x20, 0x1, 0x1, [r1, r3, r1, r0]}], 0x20, 0x24000000}, 0x48000) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000980)='./file0\x00', 0x102) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x9, 0x6, 0x0, 0x0, &(0x7f0000000080), 0x1a, &(0x7f00000000c0)=""/26, 0x27, &(0x7f0000000300)=""/39}) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000009c0), &(0x7f0000000180)=0xfffffffffffffd46) r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt(r4, 0x9, 0x9, &(0x7f0000000200)="f226f72ea384776b7a374ed6b29d9864b70f709cc14e634759f332775f643eb4410570798c118c0f7852c6b88724333859f7bee448882e0928a39ef2eefd1babcb45a251363fec09ef14f879a1f16665efac3e15ef05d0fd8c4b8446d84af19ad69a7f6a9d708214d5217689ee69c236b3751afec5c9d6feef2b9afd48a2bd475b2e85041ffd01ddeae3f6023da3d55d4a6716947862b80cea12c8aee2ea57ea334a8fbe6a441b1988f76868714aaf8ca5df8872e5cff2926a60dc4bc15a4b3ea8768da6827a84a569df921e33fc92ca3172fede698a24ad842af5fb8927400843b253", 0xe3) 15:11:11 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) shutdown(0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) epoll_wait(r3, &(0x7f00000000c0), 0x0, 0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x6e3416e4d3af9864, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="ef"}) 15:11:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x8, 0x101, "40556b1077ebbc3bfd6b1654cc56682e365f009b3163294d2b1734543e98c303", 0x8, 0x5, 0x8, 0x81, 0x82}) 15:11:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x140, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001980)=0xef45, &(0x7f00000019c0)=0x2) shmget$private(0x0, 0x2000, 0x78001000, &(0x7f0000017000/0x2000)=nil) r5 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='-md5sumposix_acl_accessem0.%\x00', 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="525dac1663f1653101d20cec", 0xc, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="46a0993b035c2cd1a90c69062e64932bce17f4af642a34d457805a905bdcb7fc5202ef99dded6042617a76f464a7723960d8b58e1503a98c1c36b504830c9d41b0782c71393b3a36d163c5afab1fee74fd7b1fccd57d0a47037e0f4d7c5215981284d06b9be45b3064eda930650d53cb75a4958adea233c0502cee6d2b94a75efcc78b517002feeb58a1d0cb3e37207c6c", 0x91, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r6, r7}, &(0x7f0000000440)=""/15, 0xf, &(0x7f00000014c0)={&(0x7f0000000480)={'crc32c-intel\x00'}, &(0x7f00000004c0)="3696221c5f2699be25f179e07715d5854219cab8154b678363619fa1424ba47c59303f0c367fc77eaf7804c6d873064043a7147aae5001164e6b146a7d2d7d2597a2ee1d890026e5b113597998f73c348848c057c36c32e837cdc8759c5cd619fa8bf51223bc50518f8ae98147c3b89e78a48e80da55d301659056a49c6e816a5892ba99cc4ccdb7391d661af49ec00a304332d42f2ff14ec8adc4ca38a8e71f2ee13a5326c414a1c75dfb96b419f17ef1c03b0535e836dec7cfa2dcaf55d805129215df957d408689f61c78088a14c273093acf51ae532e2985702b38bb00e97190c9a44a9e4f5744518952f8933f5c42153b592962319a53204e7d8d2b9cd8bddcbaeba1f18b3dfdbf85528695424a6205b60eb7429e77a64584958d4fbc6ba047cff24265c7a41aef14d0242b4bde3f6b11a79a0ed164c3698f81de2893d07b8abd3d5038f3ca4e65068f0b8ef876d730ed4095d09c2af5d054bcd9033c90356a5f1c92add24be51cc9b8eb94b1e75a05e38af7aa6a8bb27f0611207072e6513947f46f28f55d2a772250d73147ba145a0332c74a956fc60329b877a0b524fc957533a63c1cfdbcf20b782ac4fcef9abc5f8ec5e5356b8eb6da8cdd54b22c824ded0cae41513c0c2c62cdabc64a886a3dc6e93715d8d1e265ad19ca0a7aaea061697d30cb254892d1f8aa8b10718fff753a55c0805353db51eeca0271c0b1957d4f712a8d27e145720fc37b084a69ae3ae701ee1f01d9ba4fd41d640a66ade64660e773a5ebcedcb399500b32e44649437a90426f5334d0af9673ccebb79d4f416afd003bdf9ca3fb890beea2b8c98abca1d1f27147dc6bd06d3be1461e2e0cf94d4d672f8ec21b6fb1ccd2af887fa9ff237568fa3036ad85bd0c0490100b179a121a0abe291904b746de8526b0b58e65b4f545713e44c93fe19f7e5456df5c03788c32ee2f47821f7cc1b0b4d53e6dbdec399fd92453cb8567a8d401def67b8fcf824a1537c4f67738214f95f32bd110cdc7618142b6cd63d0ff3c2d30a21b24d6933505cc11ee4980a2b78b15aaf1d23699ad221aeef5569b315272309f703ac8601ad5211bb1d6e7a2e4f3efb171d1828559606befb0e74fbe18530e5dfbc31a7d7f2fa68acfd6c7dda879cddab72016b195c6d314544dded10c0b1c56d713e7c42e92c7988659018f070c48f9b28a9b945f31d532bdf27816378b7b75a644a743c37eaf449bf022f3d124918133c308048f05a73507a0043f1c8e1b28c679f266da2f9e4b26c255e138506f50772941ac28db23ed829439240719f72c404ca2042d393c8caacfcfec2d76ca2d104a430d5dcf182517d7dc56c4ec440ba8ccd97fe672240a70943d533c86e838fb5f1ac62db5a1ea44fc895992c27c446418053def57de6d2eefb3a73084e744fd1e569eddca7492151801f7436caf11406606ddd5c91fd6e101cfc5f64e62ca5bcfc88d465041b0d28b63c4f7972072fe5edd31c6ab9d771b13b4fa8563db789ac2ac5292570088ef7cef92e823276d3b219e467dbb0f66e54cf86ae27d9a1ccb1169a74581e5a2e974240400c7bede7702fcc52186121ba5ccb5f31f81f42ab08d459663c4576994700e87fe37d277c794aa7caa7ad484e9a0f00f7101d5646b410934d52e646efabc3622cdf0edbe91e12641e80877c6e80ca027c7bfe281e8e21e95767515a85d170bb0334ba5d7275d97aa3deb913494c9a4ae054d6bed0acc42427917a9d2902da142e44d91ffd30e79248456cfa6a28bdb0e8043780aaa190d4baf2d9ca7ac0f8e31fc8763434875ab898d0d12f7b292dab2ab18ab1cce2ca0a6b6fa1dea5c48aaa3c6d444dd5a2a5213a37e1437270badb35aebc2f182cc253eb209616adbeb12f127b506f69d7055e2575f69efd16f1fa71dfdce193f72bb4b6897aa05bc817d4add121c0b569472847c679d9778d11709f7f0792faffa8756268c76c302f58bce472ddef0edcb0bc4c50a4e27405c4db700cb118a97dd4540427d8f28d1c872fd1b8d57ad78520637c79cc6eac8fc4c3d2f15e9a0492c758573bd3b34b86022d7b3433588c59025e11425bab1997f0adcd5c4ccd99b306227afe42199d49908c03d21753267fd321c721863cf95e60fda92549d082815baa200a743523adbb0e328776fb8564c1d3b84ebba46777cfcbca8c7b5738e8b830859a5322ace8fe89e9ef02354e9a8ac8619db058d7f999ce62aaf0d403c74f17fc845685934b0643f75d72f27098709149691768f5a8e9343750efa0414f30f33adcbf27e07d3676214cc0f0e80464f9014886e8b068c4674993fdd78db1f22b9d4be176f23dc960ea01762788e8c2b4e02c40491d7b7ef103122a679b39a1d9d1cc6923ea42fee35db27394cab3524c3fc52e37575c932557ab6a923bfe2fa4bb9ad3eb05fed004c05edf461a346f2960c86d8e1016e544159a86de6160b2689a66c8f4e21a8070913a83b946d45ac0ca284680a3ac5a979c11385e1737031084ad6875d8ccb08ddca7f122eea4f57a2aa776e2b5edb0377a30af9589a74e293b19993175d822d30084e9eddd02535c1f4ead9c7f3733deeec0add2e202beb269ec2ad95bb21dc8033bcaee04fb69975d697ec0be410bfe582ede2da4017d3b9423239239fe8c08fcbd8524279bf7d9c40bfc3a510e186137abfe9dd3b20ec058b3173cad3b0300d48de1d38a32d32c637e9f53e7ad08ff0f96309e444b3cbde57632fdf7de9a817c6381943ea097c75fd86b564aec3d70b32a94079be66818d5aa657a0f6f2140f6897c1ffb8326677b25744b78176f6f73d7e1da35b2b9d1922824adbd68c3c9b6f38985bb121d0ec93f593cfaa6e5f07d52432d372b386ee8a32ac3ad2adc2c40619c1fe3479a8f9a411c14f59d80838f3b3205c5b5fd5ca60e5ac278c80b2b6bbd893bee8c056f6b96b4b2c97685f02f4d5283a0d334de5a61584ae60fb347b0f623c442b53485d3e0192437bcafb6ed4d0c5d7f50958991d1ae927e794f3e75cf2a638275d5357a4fc78b19f9ca56956814ce0cefdc8d64273e99234f98025039e13d386e7a705e091bef36470975abc551f5aac94adfb0ca0422aefdf0f05c8298b136c4ec8616fcef3896e102d1d26c03c2e37f93c2941f004bd381625ebd841b7c0bf0ef79516c8315d2d3d66ae4f46109c1fdaeb3b35cac667931784970f9ff6ab30867a9fdd27142192c69d6ebe15b14cf5cfbfedb2253337ff99a43a2f0e71dd09977682406ea7210404023d7ab03c80e02ec562a6e2c2213d5a250d26e715c4a34ef6e15139c7ae95e1c20b5f29bea9ca0e49fc6248b96cd49e7172aa3069967fb93fef6a0f1fbe730975f58f9543b0b55d5b9334c65f1f0e84a7c5eee7ffaf274cac02118b464802ea0c96f2564a41ad09f104f13814d633cdccadb7f55e1d0604bfbcc11c3add0572e76c2fe1cd34fe720e45c88e26791440f0cb166b356e10460a8493f8ac273aaec492f3aa03cb2a40070a93a9f292722ea0f9f67903b6eeb5967de90495159ebe29a0aac21ff3e1ab1383c78993050e5d4aaf8c6c7eb3ca52a123242b09403723087efb19843a5efb65d1020c06910a3add63a6d7599c557244bd73688ae2fad6a5d6e4708730448a24d129970f9d1418146bd43bb0f5b347a678b9ea9943973352628b438b70ef406719649b149d3bd27c3144f88470cb9afadcf1f51864db34a64797dd04dc4906a8ca221649f26b35ce7c0f5194782a5e56ffa4f616b9f716bd9a790e445b0efc170de8beb3d3c8b4a1c86f851532010400aa6f3c65ab3e92cfc182e02f6b5054ea65d145ca9bd939eef7ce6c26f98746cf4d465bd1a2440faec59cdb432b7868e0279e7d2093bb2d95218499e32a297d97ac070c5a922f1798f77a4259d1b3b68bd8f0d396ca0f1fe32c3ebe95a6db88b1f414857cf775a6b80604abc72b47784dadc46755f81f4728d0a7862cf189275dd4a0f69675a138580424e2059196929c85ad7825c3f820c17e189c31473f3b203b9a5bf53cdb7bc764b1e5d8cfcf9f82db427f522d5b1ccb610282efbbf769df444078bca663d8403a47f6447a408a87ad02252d17fd7f6fd65509ba0e73c089e938c9384ef66e73482c4cd275a6f0c0fde2661753131d24e3828ed3e7a904de6846af6d49b48ac000f12d2fdf414b0062f329a93a49b0057af2eb76af2590445474f1043da44e2f7d8c121cdb57e3d90413a67adf26ecd59dac9c8b6a77256bf2b3e5c5227ec8c48777ceda90341b8189e41be38e5ffbc450edd86060d572724cf42bb19b3cf78c130e0cf29318e9cd7a833aff91386672ce723a19d77151fce1a6718e90a6e3d91c7aab5257319031f17e928908a442314e7d2798f3462c0f8589438dc48121c06c40388f12f352bee7c42d60049a252a53d03098a32171c2a7064bc08a51639ac67b86bc4db75c3be251470ac7e1413ce712a0929aec8448fa158d0728eda3565347dd3afe999891b28148674d670bda4884dc4185bc4c687ae77caaaf876580b0270dffc327111d42035a4da81b30bb05f8769efa7a3c28f2580b8e846ff0f79d58f6c8c0b6cd5a666bbee3707372ca3ece218a473aade37efb295f71f6e4874facf0f799678e3253b166b88dd71f90330c8c01dc9534c5f1c649c622212fbd46301d44b0b4bfd84492bfc68ad52aee5a7f34057adae83614d555dd44a1e72b0eaab565923f52799b5ec6044abe3b045db55dd67bd4c83c39fed825b81f3c39ac91d7f94caad1050059200d9de3654eff2bd5df6a9ba447d26d4125d6aa522c2fff985be01c6e1f870f5c43e0d17934424da77745751531dbd8e7bcabff394560c91832282c880af5723a50ff48af216ff07824793ab9d32b0d778442c82e6f8c2d5dab11243f28abfa3aaa05cc52c7823216c9f62d07555ebbc001b1815c6b02fb3df0de8501ea2b1786238b04dec64da612053c803fb7932fa30cdadee6bbf68aa1963137faaac6e5137d738f1bc80ade7fd7a19e45f778031eaf6c18972081613c6b43279597b91a6f8410d226aaaf32a6cc6940f8144c3596fc6ad804a87b6d9c105c5db4ed4aba4f3503317684d7aa3520ddb7ab442c8023e9821282c37c2b90ee0a9656512154e16684b4e48c2685f137cebf1c1ef92b0abc49946f785c0b1d69f754681fcb0d6dd25d3c1c209e69196fcc32184fc5f89dedeac4aa96aeed9ffea8d6a706af6e61f060ee3188c287620b78553b0e943800ffd220081c61a87f8b18ccf8a198596e7b1e67f38140bcc500cc82e7e72ff7bac4fb6967194208ef64815368eaa7a5c687e2f2bd437ea38dd7dc63cdfcffb81eae112f5a320d2be0119ed512f138db97f073e6b92e3fd3cc26527e9f7592428fc204d80fcbef17dd42ffb2bc88fad351c7cb9dd49c19f7ff36e57f5088efc5a8f4f300cac302a6fb6683379b5f7f0a190670dda343779cf7e34a0a4132e8731ac12be8b9c630c8a2cf876ce9fef59338b1c0a2a2b5d0082d6c833e5c47186a1a0387b4712abc43c9a2ec8e9761b0b8f194917482caf891119744e08b7df420eab17344682bcb54cfabaf1eacb4ae8cfde7ab25c9084b0cc31bd37112e00488931a0f9c27dd1a9980aeb54a5a3b67b4459de2376f07473787ea27bc13cb0ed97e442670942381d817a61c3ba16ff68c3b9b95759da967ea7f34d9968444c38f6272871c381e0d96d5b603646dc26f3a081df6c150ca2286505a4b58a83effaf60d9b9a155455c9c7edd4a92a64b6fccec958f57a092fd06e1d46f", 0x1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1299.200841] binder: 30661:30662 ERROR: BC_REGISTER_LOOPER called without request [ 1299.260384] binder: release 30661:30662 transaction 920 out, still active [ 1299.267485] binder: undelivered TRANSACTION_COMPLETE [ 1299.274302] binder: 30661:30662 ioctl c0306201 20000000 returned -14 15:11:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x7, 0x7) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:11:12 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x4) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:12 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0x4100) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x8000000000024) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x100, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$TIOCCONS(r4, 0x541d) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x3, @rand_addr=0x1000}}, 0x1e) [ 1299.643828] binder: send failed reply for transaction 920, target dead 15:11:12 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1299.865947] binder: 30688:30690 ERROR: BC_REGISTER_LOOPER called without request [ 1299.905128] binder: 30688:30690 unknown command 808464432 15:11:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1299.910939] binder: 30688:30690 ioctl c0306201 20007000 returned -22 15:11:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x63) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x8f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x3, 0x5, [0x800, 0xf7e3, 0x10001, 0x363f5755, 0x1f]}, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) [ 1299.989234] binder: 30690 RLIMIT_NICE not set 15:11:13 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x24b}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000002c0), 0x4) listen(r1, 0x1000) 15:11:13 executing program 5: socket$inet6(0xa, 0x803, 0x5) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x4, 0x8, 0x2) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:13 executing program 5: socket$inet6(0xa, 0x803, 0x5) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:13 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x3f, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f8620000322f038a02783a93"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:13 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x800, 0xbd, 0x0, 0x2, 0x9, 0x1a, 0x3, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x9, 0x1, 0x7, 0x9}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @multicast2}}, [0x4, 0x2, 0x8, 0x1ff, 0x1, 0x1, 0x1, 0x3, 0x1, 0x8, 0x4, 0x8, 0xffffffffffffff03, 0x81]}, &(0x7f0000000340)=0x100) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create(0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_wait(r4, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:14 executing program 3: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000200)={0x8, 0x7fffffff, 0x0, 0x4, 0x6, 0x6}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0xffffffffffffffc8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x100000000100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80400) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETMODE(r0, 0x4b3a, 0x3) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="1b7bb8dc0e42a18a5f63f253553cffe02efb6d5d7cc3d3653e5ca620f3baa03d38861ad00d758bf98b9a8c8303e58ca68a0f216cd54e37589fd76c16f9f098a468f1ee8204c5e04d6f0e411f31e936245b86637e165d92d495ceb8c92f942633dca859771d81b7be315077ae0b4bd207110635c2663aaafac1a9f56727e3293547a81204598530ae86b55cb92de184672c1fb2a861aa8ce206d0e3431d1eb8457a5707ed7a60f52a4d5de86393d9211b9ceab62a50dc23e25d6fb32c", 0xbc}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0) [ 1301.053400] binder: 30732:30734 unknown command 25336 [ 1301.058858] binder: 30732:30734 ioctl c0306201 204edfd0 returned -22 15:11:14 executing program 5: socket$inet6(0xa, 0x803, 0x5) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1301.138201] binder: release 30732:30738 transaction 923 out, still active [ 1301.145765] binder: undelivered TRANSACTION_COMPLETE 15:11:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x2f, 0x4, 0x5, "a3d03465f1a7341b877f7d56549ad2ce", "9763470c270460ea8b0c8f9da989c80506a5fce808005b8d5bb4"}, 0x2f, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x8000000080000b, 0x800) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4000000, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000380)={'ifb0\x00', {0x2, 0x4e21, @loopback}}) 15:11:14 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x100000001}}, 0x3, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xffffffffffff0d38, 0xfad}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r2, 0x44, "0c65aeeee70a1d50353f92078ebb20abc21830ecf52015ab7c9b4374f4032b26b2227d6f50b9d268dc7c3c5ad02b185c893ad8a52cc235725d1a579a7793b220eb113705"}, &(0x7f00000001c0)=0x4c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x0, r1, 0x40, 0xfffffffffffffffd, 0xfa, 0xb66}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0) 15:11:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x10001, @mcast2}}, 0x2, 0x1}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x8001, 0x8, 0x1, 0x2, 0x8, 0xe000000000000000, 0x8, r2}, 0x20) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r3, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400002, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="660f2f89000066b9800000c00f326635000400000f3081d070710f01ca66b9920a00000f320f00d4baa000b88700efba410066b88000c0fe66eff6dd0f01df", 0x3f}], 0x1, 0x1, &(0x7f0000000280)=[@dstype0={0x6, 0x5}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x20, 0x400000000000, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000080)={0x9, 0x5}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1301.955529] binder: send failed reply for transaction 923, target dead 15:11:15 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x618000, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000100)="158ba0c2edb01871927044e6b9bb0c36c7a65c757f7054716d75bda11cfd4637c4f68985a190be10b02d4cb0a7ba96aea141b0964f0a22318445a80baf26050e7bbb590b37ab2edfb839ca1ff08a41ce70f19d95aa35aa9294aede80a1a088ba2c517917e03ce6ca9f5b655c8436a30936df17d1ab3a82d38a267cc3af5ad16d8a75ebffdb84c1e00fa70f5d2dda5a7e925a5dc7406e90af0c2af88a85a73589a7e5b135317f96f61eb3a6db8c4f708bb65380c4e0cfb5b03f7e69a771e6716bad1407e69d7dc296b8622f6216457a11") pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0xffffffff, 0x2, 0xb8, &(0x7f0000ffc000/0x4000)=nil, 0x5}) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000000c0)={@broadcast, @loopback, @multicast2}, &(0x7f0000000240)=0xc) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) 15:11:15 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:15 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x425, &(0x7f0000000340)="6bd1182ee38bcd7cca34abdd") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x18102, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1302.249429] binder: 30771:30776 transaction failed 29189/-22, size 0-0 line 2834 15:11:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0xc100) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x170, 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:15 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x401, "ccdd1cf913c125d1c3578165cc918db9316792e5b14a84028961aeae173f906f", 0x5, 0x40, 0x8001, 0x5, 0x8, 0x7, 0x652, 0xffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="1336bf32"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000080)=[0x38, 0x78, 0x18, 0x78, 0x58, 0x40, 0x30]}, 0x7}}, @free_buffer={0x40086303, r3}], 0x4e, 0x0, &(0x7f0000000200)="558f7da1829f1e995ef31802143dedbad194fd98647c8876b97331d60a96184a8a3bc3ff6b20ca8b6f514f87bf64a33e09ce33bf3ab891a27b128bcfb107d08df7eba0067dd38f3cd95284922ce5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1302.526402] binder: undelivered TRANSACTION_ERROR: 29189 [ 1302.791195] binder: 30789:30790 unknown command 851392019 [ 1302.797190] binder: 30789:30790 ioctl c0306201 204edfd0 returned -22 [ 1302.851623] binder: release 30789:30790 transaction 926 out, still active [ 1302.858795] binder: undelivered TRANSACTION_COMPLETE [ 1302.867333] binder: 30789:30790 got transaction to invalid handle [ 1302.873975] binder: 30789:30790 transaction failed 29201/-22, size 0-56 line 2834 15:11:16 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x10000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x28280) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0x0, 0xffffffffffffffff, 0x0, 0x13, &(0x7f00000009c0)='posix_acl_access,[\x00'}, 0x30) fstat(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x14, &(0x7f0000000ac0)="736563757269747947504c036c6f2c7070703100", 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000b40)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000c40)=0xe8) r12 = getgid() r13 = getpgid(0xffffffffffffffff) fstat(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0}, &(0x7f0000001280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000012c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000013c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0, 0x0}, &(0x7f0000001440)=0xc) r19 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000001bc0)='\x00'}, 0x30) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e00)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001dc0)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001e40)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001f40)=0xe8) fstat(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = gettid() r27 = geteuid() r28 = getgid() sendmmsg$unix(r3, &(0x7f00000024c0)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="a49bf3cf31e7b2f4145df63830e78a718a025357366898e3424fd91e21f88340c262c24cfdfbb12dc72e4130e65f5d46defd82b07d41a5d1bc67e0e9ea0a000fb426495fee2a069d2941364879d9182b783abe9234cbb1b65f99db2dfaa0cc018e38ef3e744eae782b01130ebd4bc4284836bf9b34fab73e23ad204c7f8357e7df4a2626dad851f427f5ffd46a96aeafe982c2230a53e8ccecc510417b9481e6cae58964d975cd40786902069bb90de03a1e14524984fe4ecbf3ebdd6ded8d0a66", 0xc1}, {&(0x7f0000000440)="fe283f0117164361ca4f987156dcce08e7bb433ba7cc7bf7dee71c0bc7ae33c76384e06ea630f2b1ffd45c394fbc67b592d80e90de251b29b86fe209af829c5957877a22d373bde98198d40e5b4082949e8094a15a9d26fc", 0x58}, {&(0x7f00000004c0)="72d1d75ee1b3ea414553e32f5917f89afe3745bf2e7b54a726306fd69932d4fdb4db807921e1d9eed91de1c6c898c10c005c0429de9185c19611fa3d67333f5fa222a5d98491830de1cc6605b1e52bc978439f9353717421d146c6283fb510c9bf6f0209c3bc524f96c5af57e7ce85edd14df368bccffce937ba2c4bfee39e719d1ecb8717cdcf3c6d05886bdebe46c82dc34d6344c483969dbebc9b30ba4360fc92ce7e1ecf3e59851fb822c2f36641487b0e82688f12b005f6ebdb0acaa44bfd08c0bbc3315d034bedd0a0e67185fbd5e94ca7c11f0c419cc08338651c0eda155cfa", 0xe3}, {&(0x7f00000002c0)="6026aa2821bf3a91a83e3fd6fb5ac0386e1484d698945d9b54449243e13b595d86e2155d1d4fba3aff6e15ce", 0x2c}], 0x4, 0x0, 0x0, 0x4010}, {&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="cafc567306a291fd5e8fc4e8655676f9a4536c16e4067282b19c4fd35ac6437ad6f407326e4fbdb0eaa475fd0fec2a674f30a68527a9686b8cdb05ec914e23a2e90088f60f9f1357a8bcf1b3860561240cfda59942f2", 0x56}, {&(0x7f0000000700)="f7975356e6d69a1279f175c5d8fbc9e9d8dc5ebbe27f869b07e1b5667f8a475665b38cd79272fcc29ed2cb597c7f6ba8325269b318867d7c334004a2454a4e2092a2345d40e107d8faf5c045a078543580cae3c6171a2aef11fe121b7af36cc5ba72b18136ec4dba06c28ad41f29ef1534704d1a552baef19d14ff2d281eb2a400eb5359e877702c9a19fa5ead33c69a6f11ea2314a1c189e2d8152da1560b36c402", 0xa2}], 0x2, &(0x7f0000000d80)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r2, r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xb8, 0x40001}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="8a0b77a2f34417802682e4b38f1c59afb1ceaac0d6f29469662eb38353e36c987c67177524c403f931cf5a2bd51b8117edae5a82be87b39d2bf4826bc3448dfd06a334c0066713e2b7c0b3bca3fa0b480dbd56af5210d3b4c471a73bec55af01546f64ac6ff2ecc16dc5c02e7741f8bd7042f2c3d53d70b448fedfde39e02504841d53389345c68971d3bbeae3896b3cc04629cbddc3bae1fb57f6119a680b59978eae04a975a485b06b407a7c3c28577f60b23f25a865b52142618cc14d19a63f91f987333b03fcd5de8fe2", 0xcc}, {&(0x7f0000000d00)="ef9d45cb7ed5b194c0eefacc5ec31a872b741ae9c5cd19a2bcd61333675245daf3", 0x21}, {&(0x7f0000000fc0)="790acb9fadfbee4e5fc3c4301df08f102de25c5aa89a86e3a0f64ae8008e28de42fb6fc3822959d44e66a7a3d72be50eaf621c3ce289f9d0e8e093c47371775cd8bbc53d582eb1993ef2ec35ac07ffad6d9d397b1f63e66633edf930dab70c66be94269002f7eb3000d6f826ba39abd155dc7a2f8659c55cfb95d4cd1f2dee895f0b1c25b35bddd7aa518ce3b946521a08f077947bea0d01035ff54a08b50cbe9e3c9ae62a435ca6889505ec0071af5ea9f7", 0xb2}, {&(0x7f0000001080)="8ddd8313518738a426af9f059b26502664a28a24ed57970d2bf37bb6b16adc9637e345b93dbb7b886172f1f924537f6a9fa779c44a704a6bc2f61ceca7b94e5bf31830def3230ec16d62de57f7d01872ae7d34a94b", 0x55}, {&(0x7f0000001100)="9e49480b210f033d998ba0af4e02b49170f29ca3c874a45d32907fea9e42fe2c4317eff0c364b5015dd495ea746d10bf1a58703682894f587d9df42fed39bddd3575bc4f7c9fd7", 0x47}, {&(0x7f0000001180)="b87bef8840bedb7f7c8a3dfe7d9c4f76041ea9f2c6bbe62fae5902aba6b685dc9ec01d2fa8d788e36ca74771e396b4", 0x2f}], 0x6, &(0x7f0000001480)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x10}, @rights={0x38, 0x1, 0x1, [r0, r2, r0, r0, r0, r0, r0, r2, r1]}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r2, r19, r2]}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r0, r2]}], 0xe0, 0x40}, {&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001600)="fab0629b4ab2e929cb47fe7ca54f1b6687cc9b56c8ddeef7b1e574856da751886eb487c42580fb1761fc68a8f423697ad0decc717a3cc2730a3fbf329c720f96c5a25725a4fc29335805fb9885da031e3d4f2546266bb1044775c72df96fe8efc71b1b4cd241198e7b3f20a5304decad5ee698a717223216fa6891f355e3c471aac9c62ed00f592a0567c007d4bc9793cec484536d8f84f52843a275dfc1e31d1f73606744081bf4fa98fb7fabd0160f72130ac377a7d6a066be78c6ab5d13a861ec", 0xc2}, {&(0x7f0000001700)="881bf7ef42a95a87a68e1c3c2ae95061d12431ae443720b57c9dea672b1d3b429bc2ce228e4a9f5b596b27a7c7889d0932951a2175e46b760c6554e61f2415204de4e3276239b61fba1094b94ef9b8282736fd7b5280a3a355ef2102ad1dc1ba6b6713e4087c82b161220839d8901dfc08c6b454", 0x74}, {&(0x7f0000001780)="0a6714629f245d361021b586be7a8a2bf4938efb3e7ff1b319bc2c08277c13bd05e7b95b150e6897f4a3a05a5076640ecc42b7f311d71f59e65de2c8dd7ef4b21523ea8f76d38bf6daa8a21db43d67be376dd3b4350f7fc88ca5a5449e727880212c2dcd155814ddd10b84b4e262017faa557e3399be4ab43274c097e482d9b95b2b4ca04c7190a612eeacf549588533acda0c6dab0c934dd75027db151fea80e36b123664ad0e7f056e1ad40fb0b281a7fae04b0d774174bdf8a36e94f5321b08fd2e44b64cdb490d76ab5a620d68351860d92a5a369cc2ff17652e66c7af3473e61ac04f8456067f5e40a6677bdb0db7", 0xf1}, {&(0x7f0000001880)="198a94dbaddf3b6a7aca1c84d2d01872fc5bf7b6b212ca454eb7de7797bf1199a18a014e756bb412d3742895dddf5589aca01a3b6602e6f75025f9b90d214e4028b1643175e39a5140c5fcd2b61ecb26a8999b44dae27544c54527e9d57f9dbb6e424405329c1cac5c74700430460399568d3423c4b6d8fe499a0afd5a254a6b1d3b9e3a49820fcb29aa90faee9244464fb50b1cf54b023cd70428090748d9ab87e518a8c94504a75ddb4bdb17704cb636713b635c307b2d43d526be3d7afee0fae8007b0f89634218b22591438b1800be6ede867cd9ed9e079075deeb1e0ca158c10f53f0e4161219dbd314922b083a17f088114a1a0e54710f2236da01", 0xfe}, {&(0x7f0000001980)="38d5b7d7a38fefea9e9c918a5518192a36c6d77770ae5ef8c46a78de3df7c03a84f800e9482cecbb33225484fc14f8b8c5a0229b594edb740d2a4750ed740fd7a55843639c00614ad0c99c0efc4250ee45731f9cddf77f5abd47ae33d82605fe39b7984ca097ca623d363150eae13ddfcb795527e823da27e79f6497bf42411847414de0f1be007a5c5710e51380607986d293dde9dc60428db95c3da686551d6e0ff17ad814dfbaccb73e2cf2d84f7e12dbf2506c62b9e5c4998248eb2581c5b539c708027419a0bb5647eb6b4814390ec6d186933e45a51932d0e6c2beb2be082210fa3c71d120e04a", 0xea}, {&(0x7f0000001a80)="bf5912e96822419cd9606a9e0e80ef9f98b347aa3d5f6272f624735c9005a1ed386704f8b7da26f2779f9f9d20448c6ba126906baa83d01b", 0x38}, {&(0x7f0000001ac0)="2be072750d82ae0c16cd067794a28efa24683ab45e276e2f5487a0390187b4a324419d2e6aadc3942eacd7a2a44367dd26de81cbc0fa5bdb832120fed747724977411a7e4c4b2261f6ef69aa17e6e68140b5cd", 0x53}], 0x7, &(0x7f0000002000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x28, 0x1, 0x1, [r0, r0, r2, r2, r1]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x30, 0x1, 0x1, [r2, r0, r0, r2, r2, r2, r1]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x100, 0x40000}, {&(0x7f0000002100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002180)="60946ff2265dbdb9e6d3c909cc9181aeda6f1c69beea8da6bc6ace38fb66bd983e5fb765d2bb4856f9c3c55b1c9f31c198fc69e6847b31932d067ab769d6e4d92492a15b9890ac363f36b3ef1f58760c85a759f7d8b2d704a119a49539ca055b3c486803b5470fb6700479", 0x6b}, {&(0x7f0000002200)="b8fd20943a77e744512934e0ef102460738443ee85fd53256ef796da6dec9348a10fcb68a651ff8a6bba7e165b1306779f088d120a1840f7b24740a6ceb960880a8d9dc35048baf03de17b1a0bbb9ec4ed964feb216b26f930f6a1f5a99252c8ea81257b76bca0f070dc", 0x6a}, {&(0x7f0000002280)="881744f032615a191de19dca0028fbd438c21116bd1b855f4b159c05f640f44fe10639c8b4074116d6fb5aa3cfdaa9849615268d572a69b77fec63ce8fd9c71e99140451dbc0c3d73eab5ac4ee115a794e279aff70e0e89c17c745b16cc95554cbfc09d799c691b4440c76f2d133cb27be44d4780a69903c252bb36fef8a6b1726642cda24199b75606e6d5466", 0x8d}, {&(0x7f0000002a00)="de4997f2748a91d0083db6cfc45a944616c638187c914e4012198b87b8075bbe70dbe45bcf5fc710a6fb2b6ce0410d1b876bdf93c470c25810fc1770513cbecb290468fb22d06e2cf9da1bf2a99690234bfd4dd0f96ed046f79982da4c07ef306fecd21996a82da369e29e344d1ce055190d5c951970df2e6090910c490115c91a46e1f236c4257228ad4eb6892f7dc49e000e9691cc155e5ec9f69dc3aaebad004e3d0f2e03df8a252a91ba0bbf10bea6f9412f9bbef48ecfdbe9dc176523b170b1f7e79819eb5509a5f29efb2ac6d49f3f63f0ce9663f637a7a5e5ea666470224b9cd80aeacb067ba995ab8323f9fa8b8de93fd89fd8826382e96c56c35375e3b8e6dab5943505344afc1410d0ccfd7c44073031d342f7a2c4850cc8881fef63b6f8f9b178fb34c48d4a1fb5bf81122847c0bd80610022a936a861ac17f4fc3bdfe1ec196ccab931c2d31b116ae05405f40ac4376b3972e240e9d262ae0f28f0b6b54af08ea9482e3ceaab0f2cf6ff54d060565d842e2bf68f5196cb2889cce961af6b618116302deafb4c8a5f5d28cf91e5ea8049ce3eb21f6096f630fd3725260b9b33551c5e194f06d718deb5a64cc53bd45f19254ab01f5b885c0169a2116ee4c2551735b02fbf4bc60f2bf3abc8b4a22a49f2330937a770f3c7f6ffff97b155200b53f5ae0bd4ad9c25dfb545775b1351df4b01a101d64c65852da88f10b21b40694156586fc75179461ee1ec89e709c19b796c73b08f0eea256b491a2517447810197059bfe875f2d61ddceaec6d8d92c0422d3f413a801c5380e64057fcbfcb27119e254e5ca698eb172e1b6168ba0606b4e22a289e173919d6ecbf9e9de67f4ec93b42af9910ae2cf7f526ee28cf32dc3fcfbb61b9c4a2b26aeb67db392b2fb62495d42621fb31d7d8431038c9f474dc23da272c455a4c88492b862d388c08baee75c718ce11092c8653483473f7050a049c14f79b2952de070e25931edfd17d8dbd8f2c4f54a9a43d5682b06d03fd3334459540c0cc95c824f50df2aaa7d8ee6e655bb6855df92245bb9dffa647e7ec21b2537702717046118db693b46b4154bed627cc9290572495eb4e8951e1b7ff5dd0263459a368df6ad0519e80cea2db86ce7519a32d0915ec40e95a8807120e7410a70064cd5f583a8efe368945977c8b48a8e8d7e6033f4c7b72ce403c986a009402a838c9fd5b3e8c11d348436f9b3bb9167524b3270ae6d46904a5cd175290c0de0635a6d9364ce658dce72280abd7749448acd97962347d13ae9bf7ac91b6473e0acf83a749ccd47ff01ab50de1a6dc0be900606cb7699d307a38fdc473f461580801a074b83cae43feeabee893b44cca50e146397fd50763f5f3753d56abb8b31e7ee61fd12e0940e360d9657f4a6573803b0c57f5254dc59ed7952722bcac187a161c542a1f7ce0c40b427b3c097fcca27ed98a4ffcb8d97ccf88ca5b7a088746271bed588e38fcbc6d1436ce340e00e68020b394d216980640ab17950e8f051d8a97f50014ebd89aafa9126603221b7cad00f33e0e80055a49da24e37d2c4a7f353c6b30e7dc8c24e980a5dac15904c9fab1101b3d2b15f9dc0adee807af6aa5830fd8935301f980481dde31c2e980c67b277df71337d3c66a79e2c3d816b5cec8c82cfa4974d40f6e661fbd2fdc969bb1676fbf78e736e7aa20bbc2c3d005a900397a42a3283cce61b74b8daf3611f119b0cd6bad629d6bce1c9a27626fad841484f9a36a3ce29d20222b61eb7fdfd519b0bdf7143e4209d8d4b588597191b8da8895a120ac7afe2be04f169784c4e68c2048db7d68b154bb104d80d81d7667ccd1b8915e214bf85ca10558180935d69ad1bf2aaf10e86ac06b476a13ca4ec0b215e9d889e00843ad199986fa69468b7b84b93abcb1eb7ee296963419579a1ded1e4704ccc414b9c58a2fe3b9a4f9dc108c61011c3566de05a18003abe88d5d6d63917beb8ec996c77fe565b77dc90ed38d24c5d43c5b82875b2b53416aeae494db7fb785116d5d0b02f56d0c81ff8cb5cb077975bb42144b07d11f523285ce64afc3ae4b8aba7e2a19bcf77cd945295c284461170d2de19c780adc4e8d3d4697f2e61952063e848e4ec8719cf6b7595d8ee62d217eeb7e94cdb4e2a9298aae59c1f989cc932f5cbfe6b65b65645a9219463ffe3e5127b2fbef544477f08dc68700d8848ac0679b12a4a401cca36e58ae06508e99c2163e6d99f7b010cc28b3bdb9a2ed34eff3494326ea91cf874a8acd090a0f264f7fe0d9d43b563213e35ca7cfaed9b79d75f7c15dd39fb3e5fa19f7786e44bca541e34290e6a9ec40eb21f7fde5ef3918f2d4f23b6fb411abce0d7e21f7649184950941df14f3f4bc9a53a5c88e38b0acd70a2b9ac12f755de698e5871a8d388a6cb63730e5739a560135c920fcee5602df2c95f1e1937956fb7f8075cb00d9618397880902c4a7e67fc93935bb9762108d75fe7aaacdc6ce54b86d14eafa5126cca9fd7011a18851c5802189882fa1f58d5ae5b48be3be3fc43c16c8807171027bd97d7ba8792c6a0e5acc9489e3277a1f886a477d037a88e1a676556c86e7272c35b8accc07707a2783dca7a9bbca7c5f376199fbe32fefa141637ab0b72c76f9cc1ef8ae4402613f251362aa2abba04daac028ebd3daf7f9707df0aa2b4168f130080eddabbd2a4dc7eab00acc66079e9d8547e8feb3221785f2b72894002283b33f3aa6837f606b802267fa81449ac84322db660f5d3b4815d75e034be99c2bb9a1c1cedb87107ad4b72d8ce6524c44314167139f18933311c12b211824bde0e5cd15f58d7b06b369e311f0b78fa3f84b166e6eb94170f452575dfa90d4bd9315d029cdeb37b1b3e894edcc6f0cbe83d8abf3dd1e2388de7b4c2903feebe30ad961b7d3dd15440e29ebda76ccfb2b81a5f33973245371936a8210f5a0f1545cbb017423cc90b7cf78995d6ebf8d26acba83811d68fe28d48411c3d5cb39b6faf405157ba40dba9efa035d047d4b5bd2b9b2d45413a85df3586c5360e97ce353489a156c62c368be8170567535eca90403d5ad0faa4e2c82fbcd3b3ea38e7d460c367cf8f8cadbd6d53f94a55d84f36bc6d92acb750acaeb39892c7620d1c37aa1175e3199224197f0e58538bae85f93ed17746182c08129724d2571498c943086c12810ffe003b42b0fa61b5b311791d2203dca07384914318bda76823b24ad3a2a2a626376dcc3991ae596ab3dabc8beb0925943481e499970ae7b04fa7875bb089067787424bda89b48185900cb109fcb434a4c3311c48e9fb6da502e7fc20aaff6fd1a0bd23bcca03ea757b17ec95a36ab41ea9ae4703d8d8357c0e55acfaa2b9522a6bac4a8f60e9af377c0c710dfa890f93ae4d2f6b5c384cf7580c63550345b4d807db6b7bfedf53687649b6cbd901818e7eba40f35d6dddd5c5d19debdb0a1b4802475af5fa377f6091feeb5a7a5316028e86c1d394ff04cd1d37dbf8abf886eced74aeffe9b345732c11e6e3bca03310c901cb115e090b07923da909bfbf5201ead0d48142257f2d8512a31b5cea926c421f889a7e3373b1b7eb4cbd10cc7c04968a4ca3699855cba1c0467d0159139bf9ebff29af81d308047696569807f6de054c3f301c6fd94ce513fa9b7221b30800ca8357fd3bd603d17e0b0ddb5c1d0c653e67ba7a0906d6af327cad9781db03f8a0024922a9ace7c1544949a840497799b4ecd042a59f3637e68327a9d09b4452e993ff41f1199de5acaa072977c6d0f7ef2fbe18f3951cba1016c2989a880a1f111213acfe29627dbc0566d32b3e4a89fba1da892459c6a8209d3623ecd09b3a8f9fac12279422fc01ae2babd20d66de287672197546d972da637725e139b172ccba35b51fb1dd315156708503765f4744f9d226b55c59d2328de65480ba06e4a3009164f61fb805598376832c6a2f19ff7cdc83b8894bf0eea7aa5fcd83ccb1453dd54630fa62d7d97a67f2e462a5c0036afd72030d819dfdb567cdee1022e627e3540263846216282c56bdf331b1184c1d34425ee199254a8b3d11a7fc80910671806821612a98fa162f503da80261b4d9a3f77c0450b27dd03452cdd47e098e5e73eb3a55eeedbf3233b0b05812969ec41db3d386b9aa96b6a6cb5e1c9a02142819b986a8a804a630b1b1f87c28b732cdec179773947a6a51b8d19749e7f8d0ff7ab2cea0581c551b3fff86074c37750ef085b16f002f6d0fa8a4ab75aba3fd83d2aa566c9ed5e63f66ccdac9319cee38a90518883826f81d2f720681f5199838474ff48b222b601e58e06fd8bc5e4fa8fad8d456b1a6e0a40dc9a92ee8b5ebd311db9875a683dce743a2d6ba7141603517888bb41674cebd270825f52ba78b24b9067d1aafcf46f765272fe00af3bab9258981810984c9438931506f73c090d68b67c610a97461f7ac098dbc930adda9eb28bded12faef77177863d9a1fe60de8925ca8408d758d4783c49abe9ba38ce6ad3b4774b02d85ab46563b858dd19f6b15999e75827b5a48202d86a81c879cea222b06d57ea7153d8339cfc64c8c97bf095c47f34f8c3b3f9f91b1ee39cd5b142204204d84eaf7cb5108aca6a25cb7450f1af5f44bcd97429107b8c6d9ac3bbacd64f7326aeeca8d80144d4d852bef1e5a72e7b05f42c6ef05ab0511be0bb72c16b99bb2352b8a64235c0fb033bedfbbb226d0742b3551c4fdfd7000d012c5dec971261f880f7441d24dc882d3dfb95fa274a68f577cb4f423a8e854c70915d4b6e52d6ecd24d2d5bf5d126d4adf45c1e2ba9399653083fc6a5ab7f79734d7d6a43f11201882c1c47698d5a7dd848a2e02c1310c4fc654779fbeb0999a5595e509c335c22068cb0a2564c6c8201ad9cd0de58269d633f2f08a79724c094fa5e39104b230ca2b2e2b63a0f68fb884a0a26c383eb0651f090a405ebaf6e19a26d736c9a2531b2d8f806c7dd891861eb499c7c8630e29780e32d7568ad50f8e9e938347868f9eb63803f873d058e71b2ed65238ee777ccefae6ac07d6d9c0b109b197d2ac2f57055d53097949849fce03625801bf1d7786df895c84d0d32884ade717c816d26bfc2fdc0fb4572a3fa950ef842f3b147deb06e00e7fe0e250b76a4ab12bf828fed94fab158cc739ed4a8d8ad3fe984f25cf0a60dbbde8d751446ff24f2725ae086f706096fd4843565465f48f2c997a5de7f6fbf2e140e9bde1d503b7bd0399583a98c5faff116b124da0254dda6e31b68fdf1d7c24657504cbac316526f61ab56a6b86069070ae5617b75c60f20e4a76eaa6efc43f6a273c9322522d4b0a6d5e5c9081917ef8d9dcef83b933df0a2fc8a8741245073b7434130561d40f3c143baf23548912dc18a7affab42c21bc090af8fe59317e1bede083055002590d6c1e910c7e207ccd23655870120ddfc6fbbb9244fde4ba678351fbe22567784f43076f523192082a7330e0cabc020cbd61a0023ec0e3c77b30d77a631d537b61a603487886f45ccc650d40d5c4bd98db576bc4c855571a9e8645a577a4436eb1cd7baf332ebceb6e1c95300021191f9c50e359346e5d06fd19561b322f65b64b2189d229c948ba6413c9774178785e4c5b150c2fbc6de253d8752821570b7a493b5689659f7a8f91af55498c8fecf9bf5b4a3966d6e0bd8807e32dee5b9b711227cc37ae1c8799e648abc7c224145f585933b3d3303f4118932f72d58c7d69a22a9794b29a770bcf5b8f0ee01247567813472e9fadcdfb5fe6674c938bb8de518634392462", 0x1000}, {&(0x7f0000002340)="d472802572894009728b289c4ddd", 0xe}, {&(0x7f0000002380)="be8c2fa7dcaf33e1294a13b17abd4beea10594a9eeca8778bb16a229881cde3a01ce734d03889c5b17d9063734b420624c0551b65542f2de75fd2e258ecb368c1717f16d9769c7325cc917d1cea09e3e544907d0a5028b29545b398fb28dbf97a1431817e930f2084c13354422b5313dc3a60bb65ea0cac80d90b23848299db5cb33c1f2a370864a3465b84448351c412302b2f555a3ca6e0b60ea405c6366e3f4c43cdbb611a8c7cbbb99fdd32901", 0xaf}], 0x6, 0x0, 0x0, 0x4000040}], 0x5, 0x20000000) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x149200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:16 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1303.175296] binder: send failed reply for transaction 926, target dead 15:11:16 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:16 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x18000000000) r1 = dup2(r0, r0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0xffffffffffffff00, "c6458de3eb7a446590eef4001ff7b08287abfa1329b9e7b315ece11ba34ce96f", 0x7, 0x8, 0x4, 0x28, 0x2, 0x5, 0x10001, 0x81}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000300)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0xbc1a, 0x2, 0x3, 0xc, 0x7, 0x1, 0xba4e}, 0x20) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r3, 0x2) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000340)=""/229, 0xffffffffffffff31}], 0x1}}, {{0x0, 0xfffffdf7, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/199}], 0x108a, &(0x7f0000000280)=""/127, 0x7f}}], 0x79, 0x2, &(0x7f0000000600)={0x77359400}) fcntl$getflags(r4, 0x3) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) r5 = getpgid(0x0) process_vm_writev(r5, &(0x7f0000000100), 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x4, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, {0x5, 0x5, 0x6, 0x7, 0x3f, 0x3c8f}, 0x788c}, 0xa) write(r0, &(0x7f0000000000)="58b8b5327f01a66669b82adec228de6a2b3c643485e9fc839f6fc091a654163237b64fa201e65255541063ae1070817c4ea25bef9be5882aff4c5d6582c4a1c6fc8b3623ef39366f6e49f4469399a68ccb98dd00ef776c001a23a69193", 0x5d) 15:11:16 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) socket$bt_rfcomm(0x1f, 0x3, 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1303.862306] binder: 30813:30833 got transaction to context manager from process owning it [ 1303.870985] binder: 30813:30833 transaction failed 29201/-22, size 0-0 line 2825 15:11:17 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1304.120992] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.126687] binder: 30813:30833 ioctl 40046207 0 returned -16 [ 1304.189843] binder_alloc: 30813: binder_alloc_buf, no vma [ 1304.195933] binder: 30813:30833 transaction failed 29189/-3, size 0-0 line 2973 15:11:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1304.289071] binder: undelivered TRANSACTION_ERROR: 29201 [ 1304.297659] binder: undelivered TRANSACTION_ERROR: 29189 15:11:17 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:17 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000340)={0x101, 0x7, 0xb4, &(0x7f0000000240)="5e79a7747607d11ccdc44d2504f77d47681e3252cd60738f2534819b5a8e823ee7c0647702e15cbe65a5a1d7056903795100feb733c0f679062bd57bdea39bfeacc681ae94717b3a1d0e49b35a9836ad6883ccee416cf8b2e55c37fdce27f1eb3160bbd8a56ec976d15148ba7a700402a689b7a10962198fae0f8ba9546082724381a557e23b992edd66aaf06d78b8ee8e7bc82c2a300cf6eb56276c5b379988179295df14670d791cfc01fe418b28c4346656bf"}) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e24, @multicast2}}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1304.924469] binder: 30875:30879 ERROR: BC_REGISTER_LOOPER called without request [ 1304.937732] binder: release 30875:30879 transaction 932 out, still active [ 1304.945037] binder: undelivered TRANSACTION_COMPLETE [ 1304.958315] binder: 30879 RLIMIT_NICE not set [ 1304.963222] binder: 30879 RLIMIT_NICE not set [ 1304.967802] binder: send failed reply for transaction 932, target dead 15:11:18 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1304.974699] binder: 30875:30879 ioctl c0306201 2000efd0 returned -14 15:11:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="8f1bbff608e343c26a3cf95f7cb83ea0e9e9e8607ae7a74de750", 0xffffffffffffffb4) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) epoll_wait(r2, &(0x7f0000000200)=[{}], 0x155556e9, 0x1ff) socketpair(0x17, 0x0, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1305.088143] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.093877] binder: 30875:30885 ioctl 40046207 0 returned -16 [ 1305.156284] binder: 30875:30879 ERROR: BC_REGISTER_LOOPER called without request [ 1305.196524] binder_alloc: 30875: binder_alloc_buf, no vma [ 1305.202425] binder: 30875:30886 transaction failed 29189/-3, size 0-0 line 2973 [ 1305.255905] binder: undelivered TRANSACTION_ERROR: 29189 15:11:18 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x0, 0x3, 0x5}}, 0x14) 15:11:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x9}, {0x7bd3, 0xeb2c}]}, 0xaecc289f1c098465, 0x2) write(r2, &(0x7f0000000200)="c853f25cb765a0c9a3bb757c8429914d19606d77691fb731bf622a37bc63e8272166282d30ad60fdfdf26bbf5b639288d954c579a48f8bb02942a2907a3551fd47013293ad31041946f30cc3c04e733fc3fb85f1d281b014d332b5450618a722efebd344b85b68ae0edb873868f30699d3bfd124f20358cb4eda1cc3b77ec6713089f6929a2ca782fe1250be31d10a4c81deca8ef040d924e4e134cb8d6cab5d8ba9033fcf090816b993d1b35be85700b2da5c9940", 0xb5) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) accept$packet(r3, 0x0, &(0x7f00000000c0)) 15:11:18 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000000000000200000000000000ffffffff0000000001000000000000f909000000000000002603000000000000000804000000000000000000010000a00900000000000000"]) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000500)}], 0x10000000000002d6, 0xfffffffffffffffe) [ 1305.818612] binder: 30909:30915 ERROR: BC_REGISTER_LOOPER called without request [ 1305.902530] binder: release 30909:30915 transaction 935 out, still active [ 1305.909554] binder: undelivered TRANSACTION_COMPLETE [ 1305.916506] binder: 30915 RLIMIT_NICE not set [ 1305.921117] binder: 30915 RLIMIT_NICE not set [ 1305.925895] binder: send failed reply for transaction 935, target dead [ 1305.932793] binder: 30909:30915 ioctl c0306201 2000efd0 returned -14 15:11:19 executing program 5: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0xaaaaaaaaaaaae72, 0x4, 0x0, 0xffffffffffffffea) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116b5127"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:19 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3, 0x7d36360eb3353fde, 0x6, 0x6, r2}) r3 = semget$private(0x0, 0x2, 0x90) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x80, 0x0, 0x200, 0xffff, 0x20, 0x8, 0x7]) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0xd0c3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000200)={r4}) r5 = epoll_create(0x5) ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000100)) epoll_wait(r5, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0x0, 0xdc1, 0x6}) ptrace$peek(0x2, r2, &(0x7f0000000140)) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)=""/19, &(0x7f0000000280)=0x13) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r2, &(0x7f0000000140)=""/139}) getsockname$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000340)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:19 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000000)="1b0080023c126285718070") syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xd0, 0x402800) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:19 executing program 5: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1306.769426] binder: 30938:30940 ERROR: BC_REGISTER_LOOPER called without request [ 1306.779640] binder: 30938:30940 unknown command 659647249 [ 1306.785666] binder: 30938:30940 ioctl c0306201 20007000 returned -22 [ 1306.913140] binder: 30940 RLIMIT_NICE not set 15:11:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000300)={0x2000032f, &(0x7f00000002c0)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000280)={r3, 0x14}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000010000000000000000000000000000000000000000000000200000000000000003000000000000000500000020000000d100000004000000000000000000000006e30000000000005af80000000000000000000000000000040000000100000037c8ffff07000000000000000000000009000000ff0f00000000000000000000000000000000000000000000000000000300000000000000000000010000001f000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000800000000000000000000000000900000000000000"]) 15:11:20 executing program 5: socket$inet6(0xa, 0x803, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:20 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x4000000000000000, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x5, 0x5, 0x7, 0x80000001, 0x8000, 0x3, 0x45, 0xfffffffffffffff7, 0x7}}, 0x43) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x10, 0x3, 0x6}, 0x3}}, 0x18) 15:11:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x6ee, 0x7, 0x40, [], &(0x7f0000000080)=0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="0b63f763"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x3}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0x7, 0x3, [0xffffffffffffff3e, 0x10001, 0x200]}, &(0x7f0000000240)=0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:20 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x3, {{0x2, 0x4e22, @rand_addr=0x10000000200000}}}, 0x88) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e23, @remote}}) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x6, 0x9, 0xef9, 0x7285, 0x0, 0x80, 0xe10, 0xf, 0xfff, 0x100, 0x81, 0xe3b, 0x7e73fb74, 0x6, 0x8, 0x200, 0x4, 0x3, 0x101, 0xffffffffffff0000, 0x8000, 0x9, 0x8001, 0x5ba8, 0xdf79, 0xa6, 0x8, 0x7, 0x8a1, 0x5, 0x1, 0x1, 0x7, 0x2, 0x5, 0x40, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8, 0xffffffff, 0x8, 0x7, 0x64, 0x7, 0x7fff}, r2, 0x1, 0xffffffffffffff9c, 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0) 15:11:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180), 0x0) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x21) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xea1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xa71, 0x101080) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$dupfd(r0, 0x0, r2) syncfs(r0) [ 1307.866534] binder: 30979:30980 unknown command 1677157131 [ 1307.872762] binder: 30979:30980 ioctl c0306201 204edfd0 returned -22 15:11:21 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:21 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="c84bde864496a3c708"]) socketpair$inet(0x1e, 0x5, 0x3, &(0x7f0000000000)={0x0, 0x0}) shutdown(r2, 0x2) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x9, 0x24000) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x80000, 0x0) 15:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:21 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x200002be, &(0x7f0000000100)=[{}, {}]}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:21 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x12200, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x101, 0xc, 0x2, "7c84b0f44a44f307538a6e1d0ba0b7620b108e9c61f294d92bdca34e1ac3db31", 0x4e93702c57f7fb9a}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000340)=0x78) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:21 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x52) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x0, 0x100, 0x2}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'rose0\x00', r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x103000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xd518, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000240)={r6, 0x1816}) epoll_create(0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000280)={0x1}, 0x4) [ 1309.074974] binder: 31018:31019 ERROR: BC_REGISTER_LOOPER called without request 15:11:22 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x20, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1309.122786] binder: release 31018:31019 transaction 939 out, still active [ 1309.130012] binder: undelivered TRANSACTION_COMPLETE [ 1309.143361] binder: 31018:31019 ioctl 5382 200000c0 returned -22 15:11:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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", 0x11c) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000600)) r2 = epoll_create(0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x2, &(0x7f0000000280)='\'\x00', 0xffffffffffffffff}, 0x30) clock_settime(0x2, &(0x7f0000000040)={0x77359400}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000400)={0x7, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000440)={r4, 0x2}) timer_create(0x2, &(0x7f0000000300)={0x0, 0x3f, 0x4, @tid=r3}, &(0x7f0000000340)) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f00000003c0)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1309.393746] Unknown ioctl 1074816054 15:11:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1309.479821] binder: send failed reply for transaction 939, target dead [ 1309.558857] Unknown ioctl 1074816054 15:11:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20043, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1309.715408] binder: 31037:31039 ERROR: BC_REGISTER_LOOPER called without request 15:11:22 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3f, 0x48c0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0xfffffffffffffa30, 0x3, 0x3}) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1309.818774] binder: release 31037:31039 transaction 941 out, still active [ 1309.826121] binder: undelivered TRANSACTION_COMPLETE [ 1309.833499] binder: 31039 RLIMIT_NICE not set [ 1309.838164] binder: 31039 RLIMIT_NICE not set [ 1309.843000] binder: send failed reply for transaction 941, target dead [ 1309.849790] binder: 31037:31039 ioctl c0306201 2000efd0 returned -14 15:11:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x5, 0x0, 0x10000, 0xfffffffffffffffb}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x1, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:11:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b18b31e6411e5a5dc712b214e700bef97f017b8a45563000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = getgid() r4 = getegid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = getgid() r8 = getgid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000280)=[r3, r4, r5, r6, r7, r8, r9]) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) write$FUSE_LK(r10, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x4, {{0x2, 0x3, 0x3, r11}}}, 0x28) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1310.636295] binder: 31057:31060 transaction failed 29189/-22, size 0-0 line 2834 [ 1310.862670] binder: undelivered TRANSACTION_ERROR: 29189 15:11:24 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x41, 0x10000, 0x2, 0x2, 0x40, 0x10000, 0x91, 0x9}, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) io_setup(0x4, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000140)="9fb42f37b8493bf742d0a272857c345c42cad0974d17f7df0db676eb19eae5b4d9f8b1a5bd9a32538fe0f496e6c984f035ccab483a6caddbf66c1ab9e87be370420285b55c761499b9751055300ecb5247f62d2feb1343b1df23a316d6db187f5fc18d023c1372f9c55c521b7ae2167dd26accc96169421a127a33174c293982d84cb6734ba28cab30309c53537892f608c5190742b222212fe14998a386fc5bf4", 0xa1, 0x9, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000280)) ftruncate(r1, 0x401) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x1f}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r3, 0x8}, &(0x7f0000000380)=0x8) 15:11:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x20e2c219, 0x100) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x2710}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000200)=@generic, &(0x7f0000000180)=0x80, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000003c0)="fff0dea518dccd9edfcccb6dac7c016d9b6647db9aad13bf8cfa18acebcc650f", 0x20) r2 = epoll_create(0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) signalfd4(r2, &(0x7f0000000380)={0x1}, 0x8, 0x80800) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x47f2, &(0x7f0000000040)={0x10000}, 0x8) connect$packet(r1, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) read(r2, &(0x7f0000000240)=""/189, 0xbd) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) open_by_handle_at(r1, &(0x7f0000000080)={0xdd, 0x45, "1262eb06eca45199384bfb8140a0719ff65888a23c98ff8bdcff98988a5a1936d2b4aee4591a7ef2d8bf3ea021809112f69dc4142703ee2e1d7a34a0a7932a0ffa82c1e0840ba51b3b70442aa9910fae2bcf47bf58a74146acff9e42be323a40b2676892470649feb94b90784d2549bc5fc408dd2c7be92737b1f141f00aac935bf698a7d71a5c1aa6165f8fd5e1817e2549b437e91e78d7654a96cc278198659e07ab2c23b5e72ca543efbb577d28de1f822279512967c6ebca7fc0d97ed304a7340111281bbcb0479e8526f27a8126ebe9412b23"}, 0x8a80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1311.806695] binder: 31068:31073 ERROR: BC_REGISTER_LOOPER called without request [ 1311.832591] binder: release 31068:31073 transaction 944 out, still active [ 1311.839802] binder: undelivered TRANSACTION_COMPLETE [ 1311.849777] binder: 31073 RLIMIT_NICE not set [ 1311.854598] binder: 31073 RLIMIT_NICE not set [ 1311.859174] binder: send failed reply for transaction 944, target dead [ 1311.866112] binder: 31068:31073 ioctl c0306201 2000efd0 returned -14 15:11:25 executing program 1: socket$inet6(0xa, 0x803, 0x5) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000000000)={0x0, 0x989680}) 15:11:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="9cfcc7f7b7a0ec2503004473d824dc49e35cd585f48a13acaef153e78510b4861d4470fd4924ad3ab454901eaec10000000000200002b16463bd7df977f5f5e7fadeafb9b272982c6cb2f1c520e68eabc97d682aae54036c5d2f0382a6236cd263ff7becf416cfa109fa95d3d9005c71e04abfe1944a92a0b5de69a7a08892d762f0eeb08e65ed999c0e711bb972d1b9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="1b", 0x1}, {0x0, 0x1}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1312.394179] binder: 31086:31090 transaction failed 29189/-22, size 0-0 line 2834 [ 1312.513214] device bridge_slave_1 left promiscuous mode [ 1312.519045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.589463] device bridge_slave_0 left promiscuous mode [ 1312.595337] bridge0: port 1(bridge_slave_0) entered disabled state 15:11:25 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x802, 0x4, &(0x7f0000000240)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0, 0x11d}, {0x0}], 0x3) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="71a0046fa2b235551f99fc19691fb3bcf55e1e958c011135e508cad8a4b4ffe0c91e", 0x9749770}], 0x2f1, 0x0) [ 1312.772684] binder: undelivered TRANSACTION_ERROR: 29189 [ 1313.057333] team0 (unregistering): Port device team_slave_1 removed [ 1313.131085] team0 (unregistering): Port device team_slave_0 removed [ 1313.180515] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1313.331290] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1313.454392] bond0 (unregistering): Released all slaves [ 1313.938993] IPVS: ftp: loaded support on port[0] = 21 [ 1315.659589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.666160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.674508] device bridge_slave_0 entered promiscuous mode [ 1315.753770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.760196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.768513] device bridge_slave_1 entered promiscuous mode [ 1315.846967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1315.925835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1316.165020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1316.247847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1316.330011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1316.337182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1316.416531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1316.423875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1316.664614] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1316.673097] team0: Port device team_slave_0 added [ 1316.751101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1316.758931] team0: Port device team_slave_1 added [ 1316.859570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1316.940248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.018372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1317.026041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1317.035297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1317.116690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1317.124161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1317.133293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1318.004983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.011427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.018456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.024979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.033292] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1318.341999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1321.368347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.668427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1321.972385] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1321.978733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1321.986931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1322.289981] 8021q: adding VLAN 0 to HW filter on device team0 15:11:37 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0xb, "0159"}, 0x4, 0x1) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}, 0x4}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300), 0x3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffca9, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) personality(0x800000) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x20}, 0x7}}}, 0x90) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000240)=""/176) 15:11:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000080)="bd0b5c9d6b919e05a1") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2800) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) readahead(r5, 0x4c58, 0x101) 15:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0x8001, 0x410, 0xd58, 0x0, 0x8000, 0x3f, 0x7, 0x4, 0xffffffffffff8001, 0x8, 0xffffffffffffffff, 0x7ff, 0x7ff, 0x7, 0x2}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000900)={r4, 0x1, 0x6, @link_local}, 0x10) 15:11:37 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000006c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xa3, 0x200) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xf8, 0x10}, 0x4844) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={0x0, 0xffffffffffffffc1, 0x3, 0xaa, &(0x7f0000ffb000/0x4000)=nil, 0x7000000000000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040)) epoll_wait(r4, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000004c0)="b71f43972fa1ea40d221bb85d70b35038713f7f15f6d7ec4c2df3d56fb9d8e0967c7df672097b86724bbf92f6ae71f5ed428211b0188349316b43cb3eb3433b6b738ca55593b0627f8eef8b947c779891f932ea3b732ee259554feeea02133f62e72efc085eb0ed9ca3fb7ad403817823d03000000378d93dac0feaa2934d445ce6eed1a38664202cb3665e76cab3fef3f09e15a04d28c6c595bf1a40ef83679395a381d2b4ea2c3069d42b5dd170e611b970000000000000000000000000000000000", 0xc3}], 0x1, 0x0) ppoll(&(0x7f0000000600)=[{r3, 0x400}, {r1, 0x4400}, {r1, 0x10}, {r4, 0xc0}, {r4}, {r4, 0x30}, {r2, 0x20a8}, {r1, 0x1000}, {r3, 0x8}], 0x9, &(0x7f0000000000)={0x77359400}, &(0x7f0000000680)={0x3}, 0x8) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000140)=""/154) 15:11:37 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x1000, 0x4) shutdown(r0, 0x2) 15:11:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x5, 0xfff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:37 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:38 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:38 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1325.110534] binder: 31405:31412 ERROR: BC_REGISTER_LOOPER called without request [ 1325.165593] binder: release 31405:31409 transaction 948 out, still active [ 1325.173032] binder: undelivered TRANSACTION_COMPLETE 15:11:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x10003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) 15:11:38 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x3, @mcast2, 0x1f}}, [0x7, 0x7, 0x2, 0xffffffff, 0x0, 0x5, 0x86f, 0x3ff, 0x8, 0x5, 0xfffffffffffffffa, 0x5, 0x81, 0x8, 0xfff]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x2}, 0x8) r2 = socket$inet6(0xa, 0x803, 0x5) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x2) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x7fffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'rose0\x00', r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x103000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xd518, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000240)={r6, 0x1816}) epoll_create(0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000280)={0x1}, 0x4) 15:11:38 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2c0400, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10, 0x0, 0x2}, 0x10) 15:11:38 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) 15:11:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xda, 0xfdfd, &(0x7f0000000200)="07930a931002efba60d90c7166bc0a4232a4032f1cefcf7e972393de3a96b10a31b7c7cb2797079572fa66eeaa0a6f4b6f489c24a4ce5bc23cecebf0da1c048fbd4946ee17d370cf522f0a31355c8d032f58ce49b2ce21db640029da0091587b85c546c91cfd5697aa44e49b1c602718ea8edcbc08000000000000003dc666210f5957e0ce21110fcd92a729c233b82178d781a110c6b9bee53701e05b4df583c969d0e5d07d16028282203bd468f85a859a907bb8d35f1e36dc03007fa8d4021599886ba56160bf569100000000000000000000000000000000"}) 15:11:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'rose0\x00', r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x103000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xd518, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000240)={r6, 0x1816}) epoll_create(0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000280)={0x1}, 0x4) [ 1326.024475] binder: send failed reply for transaction 948, target dead 15:11:39 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:39 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x1) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0xffffffffffffffdb, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r3 = shmget(0x0, 0x4000, 0x7c000090, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 15:11:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="c82a9993060eed71c5301f93", 0xc) r2 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x40000002}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1326.606249] binder: 31459:31469 ERROR: BC_REGISTER_LOOPER called without request 15:11:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xc, "81148acb95f6136aeefeb3e328e158137d93"}, 0x14, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'rose0\x00', r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x103000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xd518, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000240)={r6, 0x1816}) epoll_create(0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000280)={0x1}, 0x4) 15:11:39 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x5, 0xfff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1327.281098] binder: BINDER_SET_CONTEXT_MGR already set [ 1327.286849] binder: 31487:31490 ioctl 40046207 0 returned -16 15:11:40 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xc8, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50, 0x20, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x1, 0x25}], &(0x7f0000000140)=[0x38, 0x30, 0x0, 0x78]}, 0x10001}}, @acquire_done={0x40106309, r4, 0x4}, @acquire_done={0x40106309, r5, 0x3}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x4, 0x3}, @increfs_done={0x40106308, r6, 0x3}, @clear_death={0x400c630f, 0x1, 0x4}, @increfs_done={0x40106308, r7, 0x2}, @exit_looper], 0x22, 0x0, &(0x7f00000003c0)="a4dc26369df2e4b79bcda53c2f7d8872e21b54b64eb0d3a9202e7b359340ef7f104b"}) [ 1327.479301] binder: send failed reply for transaction 950 to 31459:31469 [ 1327.491356] binder: undelivered TRANSACTION_COMPLETE [ 1327.496739] binder: undelivered TRANSACTION_ERROR: 29189 15:11:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x63) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x8f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x3, 0x5, [0x800, 0xf7e3, 0x10001, 0x363f5755, 0x1f]}, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 15:11:40 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a5c2d023c126285718070") seccomp(0x2, 0xfffffffffffffffc, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:41 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:41 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffff9, r1, &(0x7f00000001c0)="27070962b7e563fa0afaa04976e011af4211dd660ce4023847a61730493baf8d32d394794517e866dea943ddc03cc43df85883e4e531bb3413105d3a7610cb668fe83401c34757f0e6", 0x49, 0x1, 0x0, 0x1}, &(0x7f0000000140)) r3 = epoll_create(0x2) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4c0000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r2, 0x1}}, 0x18) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) epoll_wait(r1, &(0x7f0000000680)=[{}, {}, {}, {}], 0x4, 0x40) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x0) r7 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x88010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x38, 0x0, &(0x7f0000000540)=[@enter_looper, @free_buffer={0x40086303, r5}, @increfs_done={0x40106308, r6, 0x4}, @increfs_done={0x40106308, r7, 0x2}], 0x9c, 0x0, &(0x7f0000000580)="57fd06ef4b54e9917c9fd6b7b150545640d53ab928bd7a512ad4c3f9f06a812804ad7904ad7bd9823bba12ceafc3ca59841336f1abf8af0cc5acde711143cce01f6b5571a5c78de4bab3fe076fb8ec23b18e41a3bce6e6ab647bbea2345cd4faddf769dee241eab5629dbb33c63e03bfa62270178f7c2ac6f62f58fba524cbb048c8768eb8080861ae1aae6bcc808dad011e2047443b84b64900c26e"}) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1328.169356] binder: 31502:31503 unknown command 0 [ 1328.174691] binder: 31502:31503 ioctl c0306201 204edfd0 returned -22 [ 1328.202425] binder: release 31502:31503 transaction 952 out, still active [ 1328.209518] binder: undelivered TRANSACTION_COMPLETE [ 1328.264058] binder: 31502:31522 got reply transaction with no transaction stack [ 1328.271601] binder: 31502:31522 transaction failed 29201/-71, size 80-32 line 2741 15:11:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x63) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x8f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x3, 0x5, [0x800, 0xf7e3, 0x10001, 0x363f5755, 0x1f]}, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 15:11:41 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1328.516642] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.522265] binder: 31502:31522 ioctl 40046207 0 returned -16 [ 1328.554793] binder: 31502:31534 unknown command 0 [ 1328.559714] binder: 31502:31534 ioctl c0306201 204edfd0 returned -22 [ 1328.594421] binder_alloc: 31502: binder_alloc_buf, no vma [ 1328.600256] binder: 31502:31534 transaction failed 29189/-3, size 0-0 line 2973 15:11:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xba) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @ioapic}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) r5 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r5, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00', r6}, 0x30) write$P9_RFLUSH(r7, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) [ 1328.745841] binder: undelivered TRANSACTION_ERROR: 29189 15:11:41 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1328.812548] binder: undelivered TRANSACTION_ERROR: 29201 [ 1328.818117] binder: send failed reply for transaction 952, target dead 15:11:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x5}, 0x8) 15:11:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x63) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x8f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x3, 0x5, [0x800, 0xf7e3, 0x10001, 0x363f5755, 0x1f]}, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 15:11:42 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:42 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xe}], 0x3b7, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1329.604553] binder: 31562:31565 ERROR: BC_REGISTER_LOOPER called without request [ 1329.663990] binder: release 31562:31563 transaction 956 out, still active [ 1329.671087] binder: undelivered TRANSACTION_COMPLETE 15:11:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xc, "81148acb95f6136aeefeb3e328e158137d93"}, 0x14, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:42 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x24b}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000002c0), 0x4) listen(r1, 0x1000) 15:11:43 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:43 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x40, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) 15:11:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="a3000000598b22e447d152582784919fb0114c31b036f2400763ca6017a79660a05b404fee7293b21d0d7933da439e67231de9cd91672b0c1b722f5f130c517e0c19cd87a526fe3f13f1c44a8e726bbb92fd27173b6de8e33902af6bd146562d471d9fb5e227ce8dc46e6c8aeccb4c23cb9ec4e96b71974625a0626e140088d8d72ad22cb94bceb7bb627519922d6a953460b9acb1e9eccd4d08ab4442889504c7a63a973c014a19d7ccf3a5e54be363bd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xc, "81148acb95f6136aeefeb3e328e158137d93"}, 0x14, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB="06000058"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x53911, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0xffffffc6, 0x0, 0x0, 0x51, 0xfdfd, &(0x7f0000000000)='\x00'}) [ 1330.453474] binder: send failed reply for transaction 956, target dead 15:11:43 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348405413c989da58ffab02820ba502eb781386fa7c910de97c5300bdf2559060183b9193a03b693acb2c5ce2ffaea184871e9ae2130720b2b60828c6101b017147d2605af441910b3603236d10f2e5fb15f7940c97cd968e31774a8bdf88bd245657175e07a9a2c633dffc52f18cff1c968a0ee0494bb6416807d143da6b90707a0893ac507d6836e7d1573a9bb8333f74bf08a290be7af3f8c61fdb8052fec0b1534d26388f2e50be0d1a720c8e2ba821929a18e35c"], 0x0, 0x0, 0x0}) dup2(r1, r0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:43 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) r1 = getpgid(0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getgroups(0x8, &(0x7f00000002c0)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r1, r2, r3}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r4, 0x2) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1330.844585] binder: BINDER_SET_CONTEXT_MGR already set [ 1330.850091] binder: 31599:31603 ioctl 40046207 0 returned -16 15:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xc, "81148acb95f6136aeefeb3e328e158137d93"}, 0x14, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1330.979016] binder: 31598:31607 ERROR: BC_REGISTER_LOOPER called without request 15:11:44 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1331.059135] binder: 31598:31601 got transaction to invalid handle [ 1331.065754] binder: 31598:31601 transaction failed 29201/-22, size 3227737781587448721-2199872772954382940 line 2834 [ 1331.085870] binder: 31599:31603 unknown command 1476395014 [ 1331.091613] binder: 31599:31603 ioctl c0306201 204edfd0 returned -22 [ 1331.127402] binder: release 31599:31604 transaction 959 out, still active [ 1331.134625] binder: undelivered TRANSACTION_COMPLETE [ 1331.152348] binder: 31599:31603 ioctl c0306201 2000efd0 returned -14 [ 1331.180259] binder: undelivered TRANSACTION_ERROR: 29201 15:11:44 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1c0c0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0xc7, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r2, 0x2) 15:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xe, 0x0, 0x0, 0x0) get_thread_area(&(0x7f0000000080)={0x81, 0x20001000, 0x0, 0xf81, 0x257a9ba8, 0x5, 0x2, 0x8, 0x20, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000200)="1b", 0x1}, {0x0}, {0x0}], 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'\x00', {0x2, 0x4e21, @rand_addr=0x8b5d}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:11:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b420000f316928731eb23d5db30e52ec20bdd3c6028537ac031f2c018"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:44 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1331.714258] binder: BINDER_SET_CONTEXT_MGR already set [ 1331.719650] binder: 31630:31633 ioctl 40046207 0 returned -16 15:11:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x101000, 0x0) socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x7, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x10, 0xbd6, &(0x7f00000002c0)={0x0, 0x0}) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000640)=""/206) 15:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 1331.795926] binder: send failed reply for transaction 959, target dead [ 1331.866993] binder: 31630:31633 unknown command 16907 [ 1331.872579] binder: 31630:31633 ioctl c0306201 204edfd0 returned -22 [ 1331.893082] binder: 31630:31633 transaction failed 29189/-22, size 0-0 line 2834 15:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x4, 0x946, 0x8, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7fff, 0x20002) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040)={0x3, ';\v*'}, 0x4) getsockopt(r3, 0xfff, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000440)=0x55) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:45 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1332.331653] binder: 31644:31653 ERROR: BC_REGISTER_LOOPER called without request [ 1332.377862] binder: release 31644:31653 transaction 962 out, still active [ 1332.385072] binder: undelivered TRANSACTION_COMPLETE [ 1332.391002] binder: 31653 RLIMIT_NICE not set [ 1332.395849] binder: 31653 RLIMIT_NICE not set [ 1332.400446] binder: send failed reply for transaction 962, target dead [ 1332.407384] binder: 31644:31653 ioctl c0306201 2000efd0 returned -14 15:11:45 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = dup(r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) prctl$PR_GET_SECCOMP(0x15) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x105000, 0x0) connect$vsock_dgram(r4, &(0x7f0000000240)={0x28, 0x0, 0x2710, @reserved}, 0x10) ioctl$RTC_WIE_OFF(r4, 0x7010) shutdown(r2, 0x2) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x4, 0x946, 0x8, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:45 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) exit(0x0) dup2(r1, r0) 15:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:45 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1332.875324] binder: undelivered TRANSACTION_ERROR: 29189 15:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x4, 0x946, 0x8, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:11:46 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x189440, 0x0) syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x9, 0x20000) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)=""/22, &(0x7f0000000000)=0x16) socketpair$inet(0x1e, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0}) shutdown(r1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000340)={0x1, 0x3, 0xc05a, 0x9, 0x400, 0x2}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1333.190528] binder: 31672:31676 ERROR: BC_REGISTER_LOOPER called without request [ 1333.208372] binder: release 31672:31676 transaction 964 out, still active [ 1333.215756] binder: undelivered TRANSACTION_COMPLETE [ 1333.252528] binder: 31676 RLIMIT_NICE not set [ 1333.257304] binder: 31676 RLIMIT_NICE not set [ 1333.262044] binder: send failed reply for transaction 964, target dead [ 1333.268778] binder: 31672:31676 ioctl c0306201 2000efd0 returned -14 15:11:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) close(r3) dup3(r0, r2, 0x0) 15:11:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)) 15:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x139, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 15:11:47 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x400800) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000240)={0x1, {0x77359400}, 0x3ff, 0x7fff}) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:47 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) 15:11:47 executing program 4: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/66, 0x42}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/36, 0x24}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/50, 0x32}, {&(0x7f0000004a40)=""/127, 0x7f}, {&(0x7f0000004ac0)=""/161, 0xa1}], 0x8, 0x0, 0x0, 0x3}}, {{&(0x7f0000004c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004c80)=""/234, 0xea}, {&(0x7f0000004d80)=""/6, 0x6}, {&(0x7f0000004dc0)=""/112, 0x70}, {&(0x7f0000004e40)=""/134, 0x86}, {&(0x7f0000004f00)=""/102, 0x66}, {&(0x7f0000004f80)=""/247, 0xf7}, {&(0x7f0000005080)=""/74, 0x4a}], 0x7, 0x0, 0x0, 0x7}, 0x3}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005180)=""/144, 0x90}], 0x1, &(0x7f0000005280)=""/142, 0x8e, 0x10000}, 0x1000}, {{&(0x7f0000005340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006680)=[{&(0x7f00000053c0)=""/5, 0x5}, {&(0x7f0000005400)=""/219, 0xdb}, {&(0x7f0000005500)=""/170, 0xaa}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/91, 0x5b}, {&(0x7f0000006640)=""/54, 0x36}], 0x6, &(0x7f0000006700)=""/94, 0x5e, 0x568}, 0x7}, {{&(0x7f0000006780)=@can, 0x80, &(0x7f0000007a80)=[{&(0x7f0000006800)=""/207, 0xcf}, {&(0x7f0000006900)=""/103, 0x67}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f0000007980)=""/241, 0xf1}], 0x4, &(0x7f0000007ac0)=""/252, 0xfc, 0x1}, 0x4}, {{&(0x7f0000007bc0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000007c40)=""/155, 0x9b}, {&(0x7f0000008080)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/125, 0x7d}, {&(0x7f0000007d80)=""/208, 0xd0}, {&(0x7f0000007e80)=""/71, 0x47}, {&(0x7f0000007f00)=""/229, 0xe5}, {&(0x7f0000009080)=""/22, 0x16}], 0x7, &(0x7f0000009140)=""/126, 0x7e}, 0x1}, {{&(0x7f00000091c0)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000009300)=[{&(0x7f0000009240)=""/152, 0x98}], 0x1, &(0x7f0000009340)=""/25, 0x19, 0x80}, 0x1d}, {{0x0, 0x0, &(0x7f0000009500)=[{&(0x7f0000009380)=""/238, 0xee}, {&(0x7f0000009480)=""/106, 0x6a}], 0x2, &(0x7f0000009540)=""/252, 0xfc}, 0xe9}], 0x8, 0x2000, &(0x7f0000009840)) 15:11:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)={[], 0xff, 0x7fff, 0x0, 0x0, 0xc9, 0x6000, 0x5000, [], 0x2}) socketpair(0x17, 0x80001, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1334.304487] binder: 31705:31709 ERROR: BC_REGISTER_LOOPER called without request [ 1334.312337] binder: 31705:31709 ioctl c0306201 204edfd0 returned -14 [ 1334.373578] binder: release 31705:31714 transaction 966 out, still active [ 1334.380801] binder: undelivered TRANSACTION_COMPLETE [ 1334.387823] binder: 31709 RLIMIT_NICE not set [ 1334.392732] binder: 31709 RLIMIT_NICE not set [ 1334.397322] binder: send failed reply for transaction 966, target dead [ 1334.404342] binder: 31705:31709 ioctl c0306201 2000efd0 returned -14 15:11:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x37) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x400005e, 0x0) 15:11:47 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1f) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2080, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x4) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) [ 1334.423739] netlink: 60 bytes leftover after parsing attributes in process `syz-executor4'. [ 1334.455795] ================================================================== [ 1334.463266] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x1a85/0x2700 [ 1334.470022] CPU: 1 PID: 31716 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #95 [ 1334.477338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.486715] Call Trace: [ 1334.489339] dump_stack+0x32d/0x480 [ 1334.493001] ? _copy_to_iter+0x1a85/0x2700 [ 1334.497297] kmsan_report+0x12c/0x290 [ 1334.501165] kmsan_internal_check_memory+0x32a/0xa50 [ 1334.506327] kmsan_copy_to_user+0x78/0xd0 [ 1334.510531] _copy_to_iter+0x1a85/0x2700 [ 1334.514689] skb_copy_datagram_iter+0x4e2/0x1070 [ 1334.519562] netlink_recvmsg+0x6f9/0x19d0 [ 1334.523776] sock_recvmsg+0x1d1/0x230 [ 1334.527628] ? netlink_sendmsg+0x1440/0x1440 [ 1334.532082] ___sys_recvmsg+0x444/0xae0 [ 1334.536112] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1334.541606] __sys_recvmmsg+0x65d/0x1170 [ 1334.545747] __se_sys_recvmmsg+0x253/0x350 [ 1334.550034] __x64_sys_recvmmsg+0x62/0x80 [ 1334.554215] do_syscall_64+0xcf/0x110 [ 1334.558081] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1334.563301] RIP: 0033:0x457569 [ 1334.566524] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1334.585480] RSP: 002b:00007fba8d479c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1334.593221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 1334.600556] RDX: 0000000000000008 RSI: 0000000020009640 RDI: 0000000000000003 [ 1334.607873] RBP: 000000000072bf00 R08: 0000000020009840 R09: 0000000000000000 [ 1334.615164] R10: 0000000000002000 R11: 0000000000000246 R12: 00007fba8d47a6d4 [ 1334.622483] R13: 00000000004c3996 R14: 00000000004d5f20 R15: 00000000ffffffff [ 1334.629832] [ 1334.631481] Uninit was stored to memory at: [ 1334.635832] kmsan_internal_chain_origin+0x13d/0x240 [ 1334.640980] kmsan_memcpy_memmove_metadata+0x1a9/0xf70 [ 1334.646292] kmsan_memcpy_metadata+0xb/0x10 [ 1334.650646] __msan_memcpy+0x61/0x70 [ 1334.654392] nla_put+0x20a/0x2d0 [ 1334.657791] copy_to_user_state_extra+0xcc8/0x1e80 [ 1334.662747] dump_one_state+0x33a/0x5b0 [ 1334.666754] xfrm_state_walk+0x451/0x1340 [ 1334.670934] xfrm_dump_sa+0x275/0x780 [ 1334.674769] netlink_dump+0xc79/0x1c90 [ 1334.678686] __netlink_dump_start+0x10c4/0x11d0 [ 1334.683396] xfrm_user_rcv_msg+0x9b3/0xae0 [ 1334.687655] netlink_rcv_skb+0x394/0x640 [ 1334.688767] Unknown ioctl 1074025830 [ 1334.691750] xfrm_netlink_rcv+0xb2/0xf0 [ 1334.691774] netlink_unicast+0x1699/0x1740 [ 1334.691797] netlink_sendmsg+0x13c7/0x1440 [ 1334.691824] ___sys_sendmsg+0xe3b/0x1240 [ 1334.691849] __se_sys_sendmsg+0x305/0x460 [ 1334.691874] __x64_sys_sendmsg+0x4a/0x70 [ 1334.691898] do_syscall_64+0xcf/0x110 [ 1334.691928] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1334.691936] [ 1334.691946] Uninit was created at: [ 1334.691972] kmsan_internal_poison_shadow+0x6d/0x130 [ 1334.691997] kmsan_kmalloc+0xa1/0x100 [ 1334.692019] __kmalloc+0x14c/0x4d0 [ 1334.692039] xfrm_add_sa+0x3017/0x5570 [ 1334.692059] xfrm_user_rcv_msg+0x7c6/0xae0 [ 1334.692095] netlink_rcv_skb+0x394/0x640 [ 1334.722735] Unknown ioctl 1074025830 [ 1334.724329] xfrm_netlink_rcv+0xb2/0xf0 [ 1334.724349] netlink_unicast+0x1699/0x1740 [ 1334.724369] netlink_sendmsg+0x13c7/0x1440 [ 1334.724391] ___sys_sendmsg+0xe3b/0x1240 [ 1334.724413] __se_sys_sendmsg+0x305/0x460 [ 1334.724434] __x64_sys_sendmsg+0x4a/0x70 [ 1334.724464] do_syscall_64+0xcf/0x110 [ 1334.724487] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1334.724510] [ 1334.724525] Bytes 126-179 of 608 are uninitialized [ 1334.724568] Memory access of size 608 starts at ffff88807d1b50c8 [ 1334.724581] Data copied to user address 00000000200029c0 [ 1334.724591] ================================================================== 15:11:47 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r1, 0xfffffffffffffffa) socket$inet(0x2, 0x2, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x11, @local, 0x4e20, 0x1, 'rr\x00', 0x30, 0x7, 0x1f}, 0x2c) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1, &(0x7f0000004540)=""/127, 0x7f}}], 0x2, 0x2, &(0x7f0000007580)={0x0, 0x989680}) [ 1334.724601] Disabling lock debugging due to kernel taint [ 1334.724616] Kernel panic - not syncing: panic_on_warn set ... [ 1334.724643] CPU: 1 PID: 31716 Comm: syz-executor4 Tainted: G B 4.20.0-rc3+ #95 [ 1334.724657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.724668] Call Trace: [ 1334.724699] dump_stack+0x32d/0x480 [ 1334.724742] panic+0x624/0xc08 [ 1334.861819] kmsan_report+0x28a/0x290 [ 1334.865661] kmsan_internal_check_memory+0x32a/0xa50 [ 1334.870828] kmsan_copy_to_user+0x78/0xd0 [ 1334.875016] _copy_to_iter+0x1a85/0x2700 [ 1334.879162] skb_copy_datagram_iter+0x4e2/0x1070 [ 1334.883991] netlink_recvmsg+0x6f9/0x19d0 [ 1334.888209] sock_recvmsg+0x1d1/0x230 [ 1334.892052] ? netlink_sendmsg+0x1440/0x1440 [ 1334.896503] ___sys_recvmsg+0x444/0xae0 [ 1334.900511] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1334.905967] __sys_recvmmsg+0x65d/0x1170 [ 1334.910126] __se_sys_recvmmsg+0x253/0x350 [ 1334.914404] __x64_sys_recvmmsg+0x62/0x80 [ 1334.918592] do_syscall_64+0xcf/0x110 [ 1334.922429] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1334.927649] RIP: 0033:0x457569 [ 1334.930867] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1334.949810] RSP: 002b:00007fba8d479c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1334.957543] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 1334.964858] RDX: 0000000000000008 RSI: 0000000020009640 RDI: 0000000000000003 [ 1334.972148] RBP: 000000000072bf00 R08: 0000000020009840 R09: 0000000000000000 [ 1334.979449] R10: 0000000000002000 R11: 0000000000000246 R12: 00007fba8d47a6d4 [ 1334.986783] R13: 00000000004c3996 R14: 00000000004d5f20 R15: 00000000ffffffff [ 1334.995146] Kernel Offset: disabled [ 1334.998789] Rebooting in 86400 seconds..