345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000240)={0x0, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"6ef240fbaeb9e8b61a00"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x17c, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x40, 0x0) eventfd2(0x887, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0, 0xfffffffffffffffe, 0x5, {{0x3, 0x3, 0x1, 0x5, 0x8, 0x8, {0x1, 0x9, 0x10000, 0x45dc, 0x5, 0x3, 0x3, 0x400, 0x80, 0x0, 0x7d9, r5, r6, 0x7, 0x6}}, {0x0, 0x4}}}, 0xa0) [ 705.972400] binder: 18014:18015 ERROR: BC_REGISTER_LOOPER called without request [ 705.983540] binder: 18014:18015 unknown command 0 [ 706.010812] binder: 18014:18015 ioctl c0306201 20007000 returned -22 22:29:45 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0x1}}, 0x1c) 22:29:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) [ 706.037576] binder: 18015 RLIMIT_NICE not set 22:29:45 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x1}}, 0x1c) 22:29:45 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x650000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:45 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000], 0x1}}, 0x1c) [ 706.210118] kvm: pic: level sensitive irq not supported [ 706.238849] kvm: pic: level sensitive irq not supported [ 706.260258] kvm: pic: level sensitive irq not supported [ 706.285761] kvm: pic: level sensitive irq not supported [ 706.292084] kvm: pic: level sensitive irq not supported [ 706.317184] kvm: pic: level sensitive irq not supported [ 706.330773] kvm: pic: level sensitive irq not supported [ 706.345318] kvm: pic: level sensitive irq not supported [ 706.352903] kvm: pic: level sensitive irq not supported 22:29:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xffffff8d, 0x1}}, 0x1c) 22:29:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) 22:29:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) 22:29:46 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:46 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0x1}}, 0x1c) 22:29:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x4000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="023afbc30067a621ecdc1f") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2c8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x3f, 0xae}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x3}}, 0x9, 0x551769d5}, &(0x7f0000000480)=0x90) 22:29:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 706.362274] kvm: pic: level sensitive irq not supported [ 706.967263] binder: 18087:18088 ERROR: BC_REGISTER_LOOPER called without request 22:29:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") dup(r1) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000001580)=""/43, 0x2b}], 0x1) 22:29:46 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) [ 707.011599] binder: 18087:18088 unknown command 0 22:29:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) 22:29:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x1}}, 0x1c) 22:29:46 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 707.035874] binder: 18087:18088 ioctl c0306201 20007000 returned -22 [ 707.079661] binder: 18088 RLIMIT_NICE not set 22:29:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x65000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:46 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) 22:29:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505331, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000340)="c6d9be220dd9bba498f3301a7926e29c76fc4612b965c2fa960696e794e360128f084c9692d01d90bd33926296e460f05749b8226fe932420a589a0ded88418658e7bbe4a08f720ffb3984c520bd", 0x4e) tkill(r1, 0x1000000000013) 22:29:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000, 0x1}}, 0x1c) 22:29:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1}}, 0x1c) 22:29:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x1}}, 0x1c) 22:29:47 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:47 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) 22:29:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x2800000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:47 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x1}}, 0x1c) [ 707.976367] binder: 18135:18137 ERROR: BC_REGISTER_LOOPER called without request [ 707.993651] binder: 18135:18137 unknown command 0 [ 707.999599] binder: 18135:18137 ioctl c0306201 20007000 returned -22 [ 708.006506] binder: 18137 RLIMIT_NICE not set 22:29:47 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) 22:29:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0], 0x1}}, 0x1c) 22:29:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:47 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401], 0x1}}, 0x1c) 22:29:47 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000], 0x1}}, 0x1c) 22:29:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) r1 = socket$packet(0x11, 0x3, 0x300) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)='keyring\x00', 0x8, 0x2) bind(r1, &(0x7f0000000140)=@generic={0x11, "1ad42b67375f5c10070ac0cb42112823a3e2ec5b0f76138b1e31a5aa5a33c263c3afb939e6751ed67a43bc26ffc5d58ff744441d370400816880f11b3fd0659f95b1ef40968053f76f0a9d3aeb9d6ade3c7a5efb06a5265782105127d6c7f517096c43d99a6aa461bea48c283d2ca6c2dd28f2a08e55ca0cf35eb331f7df"}, 0x80) 22:29:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) 22:29:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x40000000, 0x1}}, 0x1c) 22:29:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) 22:29:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62000000], 0x1}}, 0x1c) 22:29:48 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x40000000000f, 0x804, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f00000001c0)=0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), &(0x7f0000002180)=""/4096}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x9, 0x80000000}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r2, 0x3}, 0x8) 22:29:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 708.949999] binder: 18214:18215 ERROR: BC_REGISTER_LOOPER called without request 22:29:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0x1}}, 0x1c) [ 709.001784] binder: 18214:18215 unknown command 0 22:29:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=""/119, &(0x7f0000000580)=""/4096, &(0x7f00000001c0)=""/80, 0xf000}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000400800000000000400190000075000000010000800300000000000000010000c000000000ffff0000070000b4be00000200000040000000060040000080a600000005000000080000004000000000000000000000000500000043aa0000f7ffffff05000000000000000000008002000000cab8000095720000b6000000000000000000000057953c02025bc51300f1e6381da610e9fa597909ddc314a55a6a800d95037c98"]) 22:29:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200000000000000], 0x1}}, 0x1c) 22:29:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000], 0x1}}, 0x1c) [ 709.027482] binder: 18214:18215 ioctl c0306201 20007000 returned -22 [ 709.065770] binder: 18215 RLIMIT_NICE not set 22:29:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0x1}}, 0x1c) 22:29:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x65}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) 22:29:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x6, 0x0) r2 = socket$unix(0x1, 0x10000000002, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x0) r3 = dup3(r2, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 22:29:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff000000, 0x1}}, 0x1c) 22:29:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30], 0x1}}, 0x1c) 22:29:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x28}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:49 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) 22:29:49 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x1}}, 0x1c) 22:29:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x1}}, 0x1c) 22:29:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) 22:29:49 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0x1}}, 0x1c) [ 709.986445] binder: 18290:18293 ERROR: BC_REGISTER_LOOPER called without request [ 710.023876] binder: 18290:18293 unknown command 0 22:29:49 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x2, 0x9, 0x6, {}, 0x5, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x7f) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206430000a84309c02623692500080003000200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 22:29:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 710.032321] binder: 18290:18293 ioctl c0306201 20007000 returned -22 [ 710.039583] binder: 18293 RLIMIT_NICE not set 22:29:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x1}}, 0x1c) 22:29:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x1}}, 0x1c) 22:29:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@dev={0xac, 0x14, 0x14}}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}, [{[], {0x8100, 0x5, 0x7fff, 0x3}}], {@ipx={0x8137, {0xffff, 0x2c, 0xfffffffffffffff8, 0xc81c1a2b61f54f3f, {@current, @current, 0x5}, {@broadcast=0xffffffff, @random="41ecd37c84bd"}, "edf8de38cae5569ece5562a98056"}}}}, &(0x7f0000000180)) 22:29:50 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x9) 22:29:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xe000000, 0x1}}, 0x1c) 22:29:50 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000], 0x1}}, 0x1c) 22:29:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x400000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x1}}, 0x1c) 22:29:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x1}}, 0x1c) 22:29:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500)=0x0) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() fcntl$getownex(r2, 0x10, &(0x7f00000005c0)={0x0, 0x0}) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000740)=0x0) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000bc0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt(r5, 0x1, 0x5, &(0x7f0000000f40)="c3cefbefc19ea7ec0fc2c04fad7ea40b6917c8a25c7462ced8a028cb86a561e908ad0220757b28e6279225a77e71611ed737ee3369c9fe5816c3049a2a26d7cb51008a2dae8ee574146b401c376d79cf93871969bec0b9af53f63112e45104a3905f75c674bed1258ae55011f5f9ec27a2db26ed03fe4411da25c46e528d66bf46ddd2cbf694edb2968215da30dcc0a2fd1e27a08411", 0x96) r18 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000e40)=0xe8) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001000)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c759cad01070da0f89611aabb47af045ec9c41b521a49072213415dee012824919aca599af3eb96ce0134247075b8efb394033a7d147b4ee46c2488784993a2df801fabc5f3ec73ec163fdb5ae025bc405ce05dfeeb8bc8adcf9200e37fb4de0ff50a50e791e70cde88bf3fe2c9359c965e8c8bfc4f0640f1216fde79111f02149a152", 0x83}, {&(0x7f00000002c0)="2e5402f3a16add574b84fbada9a10070199246c0f0a3404ad76e5d71d316d26cb0be61855f651ab2a61aafa344b54b49d71615c55c33a1551848834c61e23fc51019bf588f39650e1792b573baec242db61c7b", 0x53}, {&(0x7f0000000340)="3f78ddc4fa02686927a0f7cd9502986ef928d2d800c82b4abef1421cf779a9bb5cc961ba7c7e9bd545273f8d31e919dfac13427b181c005fb6d825742bc6bd9c6660574941e098fd8cf01ee78381ef2770870368093f43710917b3400330bad27d92de66d0bf29d4f252c6edb30fc3f04ca9292545e8426aef2bc81bc30dcaa40ce44e7ef10e15fb71a276c0785b541719515c9d8232d28b62fb71d1fa9767f2bdcd5f4bcf51cde9d799e762", 0xac}, {&(0x7f0000000400)="d2d6ff9a66d2126cf06edbc7d9eb7e5f53e530303b1ce98ee346facb1c840fe3ea53edd2af971289d1d21b18b63ab2937228a2629a0848614263e9790db0bc86a98ec3b85b9544ee5f3ef9315f8f7b819c18a934a7fbea0e3931d2b5ffc3142a69a08a7842c31a98d0beccd1214d459800162b118cf807374b854a4155f9ac4fbe752f3ac351cd6980a4042de379bfb415c54377815bed9de1d96a1ee3eca8beee282a4796c85e6bb43acbc5d6b64528c0b4f062e249aeaaf6a68a7044efa7bc69924dfff1b7f1bc0af79a76a6ecf1ed626cb3ba2b41a90c410c3a009ca32a4d6fe44fc05f3ec4ddab", 0xe9}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000f4ffffff0000000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4], 0x78}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="f698b8da3143cf9109d51b0ce1d44fb0218b6ce7913882e0aecaf76531deb8a7a7ab7b01d194186c0e72ac", 0x2b}, {&(0x7f0000000a40)="84530bd419ca63e4ca3dfd3817444e2b528e14116157", 0x16}, {&(0x7f0000000a80)="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", 0xfd}], 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="6778fb1544878200000000"], 0x88, 0x10}], 0x2, 0x20000000) ioctl$RTC_UIE_OFF(r2, 0x7004) sendfile(r0, r5, &(0x7f0000000280), 0xffffffffffffffe1) mq_notify(r5, &(0x7f00000009c0)={0x0, 0x40, 0x1, @thr={&(0x7f0000001140)="14156386380d7f6fecc8b46cf287b11d286d3a2ee2b0726a8f8c3d9f8a05b4749db755e90eca6865e50f304c718ce7a9e19b06a94809865200d11992501c00fdea3226fcf2c2340fd27b0168fff31edb9a36457fdd889768dc9e2dfd58c3c0f5512fbc", &(0x7f00000011c0)="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"}}) [ 710.951625] binder: 18341:18345 ERROR: BC_REGISTER_LOOPER called without request [ 710.965274] binder: 18341:18345 unknown command 0 [ 710.979527] binder: 18341:18345 ioctl c0306201 20007000 returned -22 22:29:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x1}}, 0x1c) 22:29:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) 22:29:50 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x900000000000000) [ 711.022494] binder: 18345 RLIMIT_NICE not set 22:29:50 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0x1}}, 0x1c) 22:29:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) fanotify_init(0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x13, &(0x7f0000000240)=@req={0x4, 0xfff, 0x2, 0xffffffffffff0001}, 0x10) socketpair(0xa, 0x3, 0x1003, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xfffffffffffffff9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) 22:29:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x1}}, 0x1c) 22:29:50 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:29:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001000000], 0x1}}, 0x1c) 22:29:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x1100, 0x1}}, 0x1c) 22:29:51 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xffffff7f00000000) 22:29:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000], 0x1}}, 0x1c) 22:29:51 executing program 2: r0 = memfd_create(&(0x7f00000000c0)="7d766d6e657431007be3df692f2a0eb5cf0a8d725e89839132a84e6ac07760791716508bb62d8413909fa0f006130c8c7e882194eb7df7b8134ddc25acf39a1d9f27fbaf75d949dfca62ec893cb3fe8e757d353e8ace598a027b854cfbb80595adebfc2d77444f61afad027b039bb995badc10c01b88005de4aa28f7697bd520d1684ea7ada397d1d6a41d4394a55c622353d1e7fc6eb91707048e746f346b4a1e1e1ce2df501cfa91afa7de982f69eb76a7d90a607240475ed37c5e4bf3cc9331c152ebf120085efae996760c79156bcae05d8aeddfe0d4b7c97913f52394dbb48adb8ef1d66c1826347b9f3a9c0a110f1a08ef2e2bc17b41709b4f44e3f953db663c666e7a9a94eb23014ab27fc4fa1a57a43f75c0229d78462bfc6b6945828141cdadbff252f585c7972a140f60e7f2048d870849da05648996ee74287d864e29a164b60eb723f86fabeb5a3bdc7b96ee6e4aa2df0a794bf229a0a25425d2e096bcf96ce462358d7ee58535", 0x2) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x5d6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000380)) 22:29:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:51 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000], 0x1}}, 0x1c) 22:29:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) 22:29:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:51 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee050000], 0x1}}, 0x1c) 22:29:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200], 0x1}}, 0x1c) [ 711.985718] binder: 18407:18413 ERROR: BC_REGISTER_LOOPER called without request [ 712.024586] binder: 18407:18413 unknown command 25361 22:29:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400], 0x1}}, 0x1c) 22:29:51 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x100000000000000) [ 712.044352] binder: 18407:18413 ioctl c0306201 20007000 returned -22 [ 712.078712] binder: 18413 RLIMIT_NICE not set 22:29:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x6500}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:51 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x1}}, 0x1c) 22:29:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400], 0x1}}, 0x1c) 22:29:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x1}}, 0x1c) 22:29:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x2000, 0x1}}, 0x1c) 22:29:52 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x1e526) 22:29:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558], 0x1}}, 0x1c) 22:29:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x1, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000480)={0x9000000000000000, 0x5, 0x7ff, 0x3, 0x401, 0x7f, 0x6, 0x0, 0x0, 0x1ff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) listen(r0, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000380)=""/105, &(0x7f0000000400)=0x69) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in6=@dev={0xfe, 0x80, [], 0x16}, 0x4e22, 0x100000000, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, r2}, {0x7, 0x2, 0x2e, 0x5, 0x1, 0x8, 0x100, 0x6}, {0xa5, 0x80000000, 0x4, 0x4}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d4, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x0, 0x3, 0x1, 0x5, 0x1288, 0x3}}, 0xe8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="86", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x1c) 22:29:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54], 0x1}}, 0x1c) 22:29:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1}}, 0x1c) 22:29:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0x1}}, 0x1c) 22:29:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:52 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x9000000) 22:29:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62], 0x1}}, 0x1c) [ 713.077956] binder: 18487:18493 ERROR: BC_REGISTER_LOOPER called without request [ 713.111971] binder: 18487:18493 unknown command 25361 22:29:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x1}}, 0x1c) 22:29:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) 22:29:52 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x40000) [ 713.142712] binder: 18487:18493 ioctl c0306201 20007000 returned -22 [ 713.168310] binder: 18493 RLIMIT_NICE not set 22:29:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10012, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40087602, &(0x7f0000000000)) r1 = getgid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0x9e, "795243bac076b658f1e4f78c6b98a190d6731023b21f9d6b5f90501a0a9de8e7c915a324b132ef5364e7fdd49e998a9175046d748e04ddfe79f7bd9373ae73cd7653704fb595d6e0e73e2d4d6dd36f37e8041e44bbe675be05ac5055bd09253dad49c2b7f1d08af9f3b21e0b469eed7df01a0cdbcf76faca6ea89909f3a9a17fa70684fcbbb1010528c02bd3594972b4d2a1818bd8413556ed845e1aef2d"}) setregid(r1, r2) 22:29:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x1f000580}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:53 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xfffffdef) 22:29:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3000, 0x1}}, 0x1c) 22:29:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) 22:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") flock(r0, 0x8) 22:29:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) 22:29:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001000000], 0x1}}, 0x1c) 22:29:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x12, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1}}, 0x1c) [ 713.968934] binder: 18550:18552 ERROR: BC_REGISTER_LOOPER called without request [ 714.001720] binder: 18550:18552 unknown command 25361 22:29:53 executing program 2: ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000340)) sched_rr_get_interval(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000c8c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000200)) socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc4c85512, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f559391133c552dd1c76c6e91f68e364a3238b17109db386e75830a143c5755ae184895c461436bad45232f258c32a1"}) 22:29:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0x1}}, 0x1c) 22:29:53 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xeffdffff00000000) 22:29:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000], 0x1}}, 0x1c) [ 714.030439] binder: 18550:18552 ioctl c0306201 20007000 returned -22 [ 714.045689] binder: 18552 RLIMIT_NICE not set 22:29:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x8005001f}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x1}}, 0x1c) 22:29:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1}}, 0x1c) 22:29:53 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x1e52600000000) 22:29:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfe800000, 0x1}}, 0x1c) 22:29:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:29:54 executing program 2: getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x5, 0x30, 0x3ff}, &(0x7f00000004c0)=0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="da8df81af0f7161fd80f1dd62b7d91a347be916951844427fd6739bb14ac575ab909392262dc446089691699b17ac858ccd5d59c16fd2567f5e5ef4951ee9f3dd923c8e24a4de0a44f8c2af511649cc1d315734497f4c37d6e25d536325ff443135b635310c49d502f273addb919c3e27b72c6b3ffa4322a61aad92f27b7e41760295b8a660fb2e8b3079be299f7d61aa91d3364725f7aa16b4f3e2add", 0x9d}], 0x1, &(0x7f0000000580)=[@iv={0xb8, 0x117, 0x2, 0x9e, "4001deea7aabf23936b490bf0f5696f3e82292e59031d12c3cb43ab9db21c452225d8e2aa33832abab5836fed9eca8433b4209bc430782886392ab228e46c73bf50fd8f366b0973dff3769acafca32d8197a6fd3801171610a1ed865895c6f017c8ada60f8f580fc9aa7431d69555d5143500cd4eea38a70b1adad9f8eb555665bfdc8e2d45e329a5020842a4f7c0bebf88d874ad919fe23f3a80fb5e83c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3}], 0x100, 0x800}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="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", 0xfa}, {&(0x7f0000000280)="fabb0cf6baefa3541f40e46d24e25a42397beb89eaa1e0a8533d2ef926df6fb9ca9f0e22dcb68e6b427f74335fbf3bd7dbb56e0648398b236c11ad68c632962c", 0x40}, {&(0x7f0000000340)="878d838e460f33210d559d48766c14049cf475ae93cb8a116bf18bb551fb4c776630e97e15742cba65d0abb01b95061919bd0916997e2d5ee28a401b52d7367de12573ad8e55e7346916fc2fcb88cd905a474d891784cf8ce4c7a1ce884932d76d2f8ff65738e0506049184d1312cebba9f749579d", 0x75}, {&(0x7f0000000780)="6ce7e2f2f13db431a2fb22ea79d167591bdfdd8abcd36aac4553da538673a04a80767a464beb53a1253872e82738a796384840b1b24aba49379c0f1587be729b69437b8afec3c511199d67b67224e6623adbdb10225695b0fb3796d11ae898d41cdb8bb0424bb0a08bbf3b95be8f8433c4eedca6c56d240f30fb0cebbe8bed9ddccf95b8890eb7e3c6aefb8d9312a5218f0555777c1bd312c2285ba3914affead77ac91542a8655f82fe46beff2ac1ddad0dcdcea23832780502987a2dc32db0a40578b428d1c7c9eaff7604ccf94115fc749a581341f18828ea72471bebca73f381c3ed2a6aad5be0bbbcfa74c39dc5cb07", 0xf2}], 0x4, &(0x7f0000000880)=[@assoc={0x18, 0x117, 0x4, 0x80000000}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xe8, 0x117, 0x2, 0xd1, "c838b4fbf47656d4009ff2e971e7ac49cfa416037e14fe5cf740ef57c5fb293a6a692ccd3feea1f8e92e884e2c75d4a58c6c42ce50809d39c9b57382debda167233fa10a32c187f123c9cb75aae89a72d7117131a8edfb138a8c8aded35a0a49c62cbf92663832bc63f62c289d173c2eadd06a2b3035d24068e0ca7e971b4869cb0f6e8f63adc3b730e2fd21aab3684f3bcf0d4d9f6384eb75dec8c222b1bc158e1fb8e34a46e5693fce459eab7085e1e14a0ce8e79ea77eff0ba733ad3e5b02d28628de4e089905ad25d86537efffac7c"}, @iv={0x60, 0x117, 0x2, 0x48, "af90ef6553c3643bcdee4033670fb66e018d2a1feb80481e0c64977eb2f8d4316b8e404eaf31bd92eacdd89462a24d137596fae1a72f4a74618dff48ebe1f6be128ef48333e22932"}, @assoc={0x18, 0x117, 0x4, 0x1ff}], 0x1a8, 0x40}, {0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)="6157ec869183f7cac5b07a5656727085cdf62a1db5bf077dfa9cd2c4a8b97d8929fe8cd0f2cf7023cd37ea62d019795d0babbd66e79ccb14d2345baa7955542f696a159ba7c5b68f19071318d9d87c3cd9717273896bdd53e643535269dc6878b0217c30e1d691a0681f831722205f20745e881f6d797a69d837c4c0c34ae72650b9d9e578476d10c5b68afd32dfb9851a", 0x91}, {&(0x7f0000000b00)="e0f720256da086a1a77722db42eee74df91b626b33cd92149dd9f536e27dba90ef46a6e2732a347edbc23511f55918dbb7e8c153f6906b5aff4c8d15f7654a5e61b4c9f701b13e9230954f1dfbbcff8c3422ff509a643bc84138c4ab86ada7fe9c3254c932eb58fb8a0bd00a80a77d814645b5470cb12311a59dd6ded912254517f13edfd78681abef1af3383c8c03720665a0fc25a7f11d58799582f752db70f611c398a8d8c82c61b8a4191850f41ca513316b702bd6b370a9d54c951ec12f11c5e12f1fbce64602bad2c1abc5289de8482ff84a96b593d3f0a3a61eec330039d249f9d1427252459e144428ece90870b9e0508c", 0xf5}, {&(0x7f0000000c00)="dfb1bbd7d473b12f8d", 0x9}, {&(0x7f0000000c40)="c20d9ad0571cc230ef42b0b243f80d1c25cdf6d7ccb7d779b78bbb0d6c7f6941842e7aa15df6c261902619df9e65445895e1b28078d3e260adabefbe1c3a8d74fd4f72ae73b5a1e4b5cde43c04f6cee696aa410d992531d8134f29a2f0adca9025d1d7c34389d0da3d71d05e12dfed9cdfd1012333078b797023cde4e24a7086791c57c31f259fd0bcc25e213132a9ae6ff0d7acb7ec392f68a36afa1fed40dff9029f73bb66b4535a3cb141c73cfdf559af7a9f96daba563cd7fc4183f9df63f7f81c3ab587c0da8f67aeed0b48c094bcacf4cf363d9c752a588fa1ef4653a850acf2e6687a3b8c6d2cd01c7803f2", 0xef}, {&(0x7f0000000d40)="6cc6092dd5225e18714fd4aa50f00c85f423c035b459060f063eddc6ca34faa55127a1e36ff69bac2c1c2125b68178fa79b4392b1e20b3e22f3cdd8a9d613fd325969a", 0x43}], 0x5, &(0x7f0000000e40)=[@iv={0xd8, 0x117, 0x2, 0xc0, "b19b7867bed3bdd2febae94438972c47d3fca99801b3d4e10e14283971e8809e3be73e32e4edee0b034bc8af419c53b3563d11f0e9c82dfb589f6ad7e163c6111fee8bee0225947e52fc35a10fc9c18a667de6c0993331d96facc21d1f712ce5b427a88092e773a571a1153ee781894d645f698654103f2f9466da3bfd9e79fee0ea5940646f52be8b9ad29a20e58a60bc7f79c3c93f95aa03a9404b5b2496b86879d4322239fe749432767b255890ad67e59214f6abf3a47554e304c1f3d00e"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @iv={0xa8, 0x117, 0x2, 0x8f, "8dc77830c144f04f642278f520fa74a65d2f53a525ff0dd88f1529c40d0ee7e629c95d58f145bf0dffb070450f69cdfe0ec35a001c6fddc370aa39a46809ed6a132d27e99e8480d878b30e5ed8c4c8f5f36f00bb842c36ccf075e27bdf6c45fba1d7c34fee2b363f0113bc01db177f86bb53df6f64aa90592b4d5b76fafc609a43f4ed2aff8df0325abb7630d37409"}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0xc2}, @assoc={0x18, 0x117, 0x4, 0xe5}], 0x1f8, 0x90}], 0x3, 0x40041) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffffffffe4f) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') inotify_init() ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000540)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000140)) 22:29:54 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0x1}}, 0x1c) 22:29:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) 22:29:54 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x1000000) 22:29:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000940)=""/48, &(0x7f0000000980)=""/135, &(0x7f0000000a40)=""/4096}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000480), 0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x89a0, &(0x7f0000000580)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth0\x00'}}) pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'sit0\x00', 0x401}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)={0xc169, 0x8, 0x3, 0x0, 0x0, [{r3, 0x0, 0x6}, {r0, 0x0, 0x3}, {r0, 0x0, 0x80000000}]}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000100)=0x4) [ 714.970301] binder: 18605:18619 ERROR: BC_REGISTER_LOOPER called without request 22:29:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000], 0x1}}, 0x1c) 22:29:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x1}}, 0x1c) 22:29:54 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4], 0x1}}, 0x1c) 22:29:54 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xd0010100) [ 715.017800] binder: 18605:18619 unknown command 4743953 [ 715.027195] binder: 18605:18619 ioctl c0306201 20007000 returned -22 [ 715.086666] binder: 18619 RLIMIT_NICE not set 22:29:54 executing program 2: madvise(&(0x7f0000b45000/0x4000)=nil, 0x4000, 0x100065) 22:29:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100020000], 0x1}}, 0x1c) 22:29:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x4000, 0x1}}, 0x1c) 22:29:55 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0x1}}, 0x1c) 22:29:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x1}}, 0x1c) 22:29:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000], 0x1}}, 0x1c) 22:29:55 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000700)={@local, 0x0}, &(0x7f0000000740)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001900)={0x0, @broadcast, @broadcast}, &(0x7f0000001940)=0xc) sendmsg$nl_route(r0, &(0x7f0000001a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@bridge_newneigh={0x54, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x8d, 0x2, 0x1}, [@NDA_VNI={0x8, 0x7, 0x2}, @NDA_PROBES={0x8, 0x4, 0x36}, @NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_VLAN={0x8, 0x5, 0x2}, @NDA_PROBES={0x8, 0x4, 0xa06}, @NDA_LINK_NETNSID={0x8, 0xa, 0xc2}, @NDA_IFINDEX={0x8, 0x8, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x94) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r5 = getpid() setpgid(r4, r5) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') mount(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000280)) 22:29:55 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x4) 22:29:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xf0ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 715.958903] binder: 18677:18682 ERROR: BC_REGISTER_LOOPER called without request 22:29:55 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) 22:29:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0], 0x1}}, 0x1c) 22:29:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) 22:29:55 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x900) 22:29:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x240, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x48, 0xd8cb}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x14, r3}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = geteuid() r5 = request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r4, r5) r6 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r6, 0x12, &(0x7f0000000140)={0x13, 0x9, 0xff, 0x3}) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 716.003778] binder: 18677:18682 unknown command 4743953 [ 716.018255] binder: 18677:18682 ioctl c0306201 20007000 returned -22 [ 716.026648] binder: 18682 RLIMIT_NICE not set 22:29:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:29:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:55 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x1}}, 0x1c) [ 716.124429] QAT: Invalid ioctl [ 716.258215] QAT: Invalid ioctl 22:29:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfc, 0x1}}, 0x1c) 22:29:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:29:56 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x26e50100) 22:29:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200], 0x1}}, 0x1c) 22:29:56 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0x1}}, 0x1c) 22:29:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xb000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) accept4(0xffffffffffffffff, &(0x7f00000005c0)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x80, 0x80000) sendmsg$can_raw(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x1d, r1}, 0x10, &(0x7f0000000740)={&(0x7f00000006c0)=@canfd={{0x0, 0x53, 0x8, 0x9}, 0xc, 0x1, 0x0, 0x0, "90ea4d25e65a89b7be3667f5ea8c2b37f9d3093676b6cea5f87e4b94aef3249eaec736c3e7503bcb857490d3430fee186388045b28e0a1d7b043d631c68b6e15"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket(0x24, 0x0, 0x0) 22:29:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000], 0x1}}, 0x1c) 22:29:56 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0x1}}, 0x1c) 22:29:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="045efc"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 716.968572] binder: 18742:18745 ERROR: BC_REGISTER_LOOPER called without request [ 717.006075] binder: 18742:18745 unknown command 4743953 22:29:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30], 0x1}}, 0x1c) 22:29:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x2800}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:56 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x101d0) [ 717.039728] binder: 18742:18745 ioctl c0306201 20007000 returned -22 [ 717.101920] binder: 18745 RLIMIT_NICE not set 22:29:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x1}}, 0x1c) 22:29:56 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:29:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x8000000, 0x1}}, 0x1c) 22:29:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54], 0x1}}, 0x1c) 22:29:57 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000400)="67400f35c74424009b000000c74424029dace042ff1c2466470f5b84b009f00000660f38827e062e67cd0066b81f010f00d0660fef9a0400000066b8f9008ed03636660f382a51f6c461a9fb91f3000000", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) 22:29:57 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x4000000000000) 22:29:57 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0x1}}, 0x1c) 22:29:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000], 0x1}}, 0x1c) 22:29:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB='\x00\x00\x00\x00S\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 717.964784] binder: 18800:18808 ERROR: BC_REGISTER_LOOPER called without request 22:29:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0xf}}, 0x1c) 22:29:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) 22:29:57 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0x1}}, 0x1c) 22:29:57 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xd001010000000000) 22:29:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 718.028319] binder: 18808 RLIMIT_NICE not set [ 718.047786] binder: 18808 RLIMIT_NICE not set [ 718.056176] binder: send failed reply for transaction 203 to 18800:18808 [ 718.085594] binder: 18800:18808 ioctl c0306201 2000efd0 returned -14 22:29:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0xb) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2000, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(0x0) kcmp(r3, r4, 0x2, r0, r2) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x7, 0x2, 0x7fff, 0xff}) prlimit64(r4, 0x0, &(0x7f0000000180)={0x4, 0x4}, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{}, {0x2b}], r1, 0x1, 0x1, 0x90}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)={0xf7, 0x5, 0x5, "79d19f4e95ea29a4c6946737847ef00b0f61369546e5950ba6d758251b2982b8e75d3d564356584b202eb33e1347407ce4258b8ae5fdde2731069385cf604251cb45ca68fd3585754e4858f0bfa7bc0979c66733a2f2ebc0a554daa279864f11665fac9ae0b1357933542027ee51d464867fa7f040d2e381b4fd230dd08c8fc14a583f7f819f57e7b5ebba7381a39077de04508a6104c3e1bb5f88fc4dcb11d9bfb5d8cefa85895c441abb3685d3b401a2f45cac63138c4aa6527044ad365ff9de182a9144541679b4bf3a3ea6589dbea75d3d06b63d3a43c2d2c7860fbd156d99b8449dcaf076c2e315586c13aafc06190005062cdeb6"}) ioprio_set$pid(0x3, r4, 0x7) 22:29:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000], 0x1}}, 0x1c) 22:29:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1300}}, 0x1c) [ 718.147263] binder: undelivered TRANSACTION_COMPLETE [ 718.152524] binder: undelivered TRANSACTION_ERROR: 29201 22:29:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x9000000, 0x1}}, 0x1c) 22:29:58 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0x1}}, 0x1c) 22:29:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:58 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xeffdffff) 22:29:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x2}}, 0x1c) 22:29:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:29:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) [ 718.929716] binder: 18868:18869 ERROR: BC_REGISTER_LOOPER called without request 22:29:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x1}}, 0x1c) 22:29:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2003f, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') fstat(r1, &(0x7f0000003ec0)) [ 718.984545] binder: 18869 RLIMIT_NICE not set 22:29:58 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0x1}}, 0x1c) 22:29:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x501}}, 0x1c) [ 719.011397] binder: 18869 RLIMIT_NICE not set 22:29:58 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0xffffff7f) [ 719.038629] binder: send failed reply for transaction 205 to 18868:18869 22:29:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 719.085949] binder: 18868:18869 ioctl c0306201 2000efd0 returned -14 [ 719.125897] binder: undelivered TRANSACTION_COMPLETE 22:29:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="05a6dd000000000000"], &(0x7f0000000180)=0xd) listen(r0, 0x1) accept4(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 22:29:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x1}}, 0x1c) [ 719.131183] binder: undelivered TRANSACTION_ERROR: 29201 22:29:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x1f00058000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:29:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x3}}, 0x1c) 22:29:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401], 0x1}}, 0x1c) 22:29:59 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:29:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x4000000, 0x1}}, 0x1c) 22:29:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) [ 719.911843] binder: 18921:18923 ERROR: BC_REGISTER_LOOPER called without request [ 719.928395] binder: release 18921:18923 transaction 207 out, still active [ 719.935539] binder: undelivered TRANSACTION_COMPLETE 22:29:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000], 0x1}}, 0x1c) 22:29:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x400000000000000}, 0x1c) 22:29:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000], 0x1}}, 0x1c) 22:29:59 executing program 6: r0 = socket(0x20, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) bind(r0, &(0x7f0000d80f80)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0xfffffffffffffd0a) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/215, 0x9}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x100010, r1, 0x0) [ 719.996365] binder: send failed reply for transaction 207, target dead [ 720.050275] binder: 18942:18946 ERROR: BC_REGISTER_LOOPER called without request 22:29:59 executing program 2: process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x38f}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140), 0x2) r3 = fcntl$getown(0xffffffffffffff9c, 0x9) process_vm_writev(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/165, 0xa5}], 0x5, &(0x7f00000025c0)=[{&(0x7f00000012c0)=""/7, 0x7}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/77, 0x4d}, {&(0x7f0000002480)=""/230, 0xe6}, {&(0x7f0000002580)=""/16, 0x10}], 0x7, 0x0) [ 720.091333] binder: release 18942:18946 transaction 209 out, still active [ 720.098459] binder: undelivered TRANSACTION_COMPLETE 22:29:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) 22:29:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x800000000000000}, 0x1c) 22:29:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:29:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x1}}, 0x1c) [ 720.171527] binder: send failed reply for transaction 209, target dead [ 720.304495] binder: 18978:18985 ERROR: BC_REGISTER_LOOPER called without request [ 720.313897] binder: release 18978:18985 transaction 211 out, still active [ 720.320915] binder: undelivered TRANSACTION_COMPLETE [ 720.367718] binder: send failed reply for transaction 211, target dead 22:30:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf5ffffff, 0x1}}, 0x1c) 22:30:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:00 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) 22:30:00 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0xfffffffffffffff9, 0x9, 0x5}, 0x10) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) 22:30:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x40030000000000}, 0x1c) 22:30:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfdfd, &(0x7f00000001c0)}) 22:30:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54], 0x1}}, 0x1c) 22:30:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0x1}}, 0x1c) 22:30:00 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r5 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) getgroups(0x3, &(0x7f00000006c0)=[0xee00, 0xee01, 0xee01]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=0x0) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) getgroups(0x5, &(0x7f0000000a00)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) r14 = gettid() r15 = geteuid() fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005d80)) geteuid() fstat(r0, &(0x7f0000005dc0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005e40)=0x0) stat(&(0x7f0000005e80)='./file0\x00', &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005f40)='./file0\x00', &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000072c0), &(0x7f0000007300)=0xc) stat(&(0x7f0000007340)='./file0\x00', &(0x7f0000007380)) stat(&(0x7f0000007400)='./file0\x00', &(0x7f0000007440)) r20 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000074c0)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000075c0)=0xe8) getgroups(0x6, &(0x7f0000007600)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0x0]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000009e40)=0x0) r24 = getuid() lstat(&(0x7f0000009e80)='./file0\x00', &(0x7f0000009ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009f40)={0x0, 0x0}, &(0x7f0000009f80)=0xc) fstat(r0, &(0x7f0000009fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getpgrp(0x0) r30 = getuid() r31 = getgid() r32 = gettid() getresuid(&(0x7f000000a040), &(0x7f000000a080), &(0x7f000000a0c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000000a100)={0x0, 0x0, 0x0}, &(0x7f000000a140)=0xc) r35 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000b7c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f000000b8c0)=0xe8) r37 = getegid() r38 = getpgrp(0xffffffffffffffff) r39 = getuid() r40 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000b900)=0x0) stat(&(0x7f000000b940)='./file0\x00', &(0x7f000000b980)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000000ba00), &(0x7f000000ba40)=0x0, &(0x7f000000ba80)) r44 = fcntl$getown(r0, 0x9) stat(&(0x7f000000de40)='./file0\x00', &(0x7f000000de80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f000000df00)='./file0\x00', &(0x7f000000df40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f000000dfc0), &(0x7f000000e000)=0x0, &(0x7f000000e040)) r49 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000e080)=0x0) stat(&(0x7f000000e0c0)='./file0\x00', &(0x7f000000e100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000000e180), &(0x7f000000e1c0), &(0x7f000000e200)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000e240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000e280)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f000000e380)=0xe8) r55 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000e3c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000e400)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f000000e500)=0xe8) fstat(r0, &(0x7f000000e540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000e680)=[{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="0a3f0181982fc8dffb361a861a075ae48725d3394b327f12b01b75980751c741e63e130c4691ff5a50a11b6b931aecebdc33456697b02a5e9a0f1e7215c5774327aa3f4afb2e4ced1051a582c44caaceb930f02cccf7b0842bf9fe4082d0821b902409ae46032fc2f34de55f5eeb657ef8ef75e7061ca19e505496bb316c12f0e200028542beb08cafaf996ae1b57803e7f306ab25df7058c9952452d28cf672f17b346c2771cba36d01c5e37318dd81ae63a4b4097b8580cbd77727d17e812626c3f455c33287402441330a1c9263fd0585", 0xd2}], 0x1, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xa0, 0x10}, {&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000c00)="69b954504dd0e8935a517bbe3f2aa14e33f6e180bb44841e983d7e4568332cf5b051a425028f3262d76babc9b70eca79700c5716bee0633566a12757dbddbbb383547f55357988d443d38dcc90e4d9c4be5c71dadb36a626c33ecc9333ae0cc826e3f0ccfa5022a0f8c377b6c01f332b87863e1037ec891d3cebb9dd7ab075e914d70ca8ed798b5c49ae7b29e0ccc20f64b468aa3015b31732916db6e1537da71415daadd90ce3d0b5df5e0d43a0f805a77702ab42c9a1f67dff71", 0xbb}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000002d80)="5c269940966689bbc5a30ccc7f00d399629767df81ed1d7d4e6491defdc12246f7f7b81aef7573a5758add58c39700d33888345f078759b50cad945b477999aa9d97b1", 0x43}, {&(0x7f0000002e40)="71ce1ebea9f00d849d4415ceb81fa79dced5ba195e84bcd4a941561f3f487d6d872b5709bb9586281ca6912880d7c56bc9e680845a3611e01de4c7b4e90d26a87f224247da2c403dde32192a7cace9a68631b3d20b5f6bf46f954f049ad617ee035112b67a68bb6e7dd7ea4f4f3e777f4d6beb60e9ecddb21f5f2a86919365dd7bbfc8d98c43937054", 0x89}, {&(0x7f0000002f80)="66358f901b47940444286533fe372935753f045e32636880f2faf00ef041226d793d0b38af0684c91621fe45865818195bc296e8c0656ccddb06c0bf3102c88bd53414d89de216b9e6e8d7ab3b507bf558203ba5a77f388571d3bf354459010d48308d4ccc321f0a3a018158ce92f169c63fddc39f0915fef0755bff0a9e7368c752dd5f47c6edbf18ffa40df88e94d53fe2f10c3fcce78c5aea8d29db27f9d203c295546542374a4abb27dba0b38ecfbb90b5aa7842ef53593c", 0xba}], 0x5, &(0x7f0000003180), 0x0, 0x4000001}, {&(0x7f00000031c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003240)="f56c8b593564c28eabca097843d3f9defc7afb", 0x13}, {&(0x7f0000003340)="dbe070d16c54668b7ba2674f50e5a1229027573ead21b964f22222c28277c6a140a0b7cea2050e28831f47873c13d347b1f59d78ae58f0cf893f240e22087da55d9424d0292af3f26800dd2c6176a29cf50d078fadd177b4303ccaac532728405e821f7bae886f0490bf04dbe513a3c52a4e860a2a50e2558f0f34db6bd29d7ce0343453b852266b2c980d3dd890fee3f464ff0f840cbeb6c540083098228614867c806fa01fdc4e03cf6b60894370f6110b5990d7801bf4d8ae023f340194d975918d4353dacd9da92cf9d90b15", 0xce}], 0x2}, {&(0x7f0000004a00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005d00)=[{&(0x7f0000004a80)="ade8c9968f0e094277c5cf6847ff637333efacbf521bb29db93cf2aa10b96aac76b900443c1626cc6e91cfc34dade7091386086ff85e8f95fadeb7422f2909d1799fb79782a37253", 0x48}, {&(0x7f0000004bc0)="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", 0x1000}, {&(0x7f0000005c00)="4a492096579e4add291fd661a7a59d22134678452e057492ff4bc07bc4e28571ea9668", 0x23}, {&(0x7f0000005cc0)="a72163524774cc8e765556387f732804dcc92d67def8", 0x16}], 0x4, &(0x7f0000006000)=[@cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x80, 0x5}, {&(0x7f00000060c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007280)=[{&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007200)="b0bd20508b5fc745b761304f76d45651b58ca8f1b5feede39e15cf668ffddba3c9fa7b0a357d55713d7c2ed634f2064cc4bdfa7342ee9653df24627dec5add3974a00e03732204ed95770514", 0x4c}], 0x2, &(0x7f0000007640)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}], 0x20, 0x20040000}, {&(0x7f0000007680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000007700)="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", 0x1000}, {&(0x7f00000087c0)}, {&(0x7f00000088c0)="1004d19ea4caa6445862d5f36bbdbb314d9e700423fd996fbfa6e2152ffa4aaccd97bd7ebccc5e7e228e43af34b4ba8070f0e0ed874ea9a9972c64c6fcabb778fa2f0ed91fed43c51c88886e88c68d23e89c790c0d34b0fb04259eb833988102791abebd97dc394ab80eaf1b6a8aa4f6e9792c1c1a4286b912904b213891fecb0977af1c2708a1d79a90a6765c80cb3f65bbc0325da498c5d8a0c1ee18d724c3c249cc7b483316e5c14757d13f1a0155bdbf6b88b79f0f5836ddd9ce6fd650e6ab23f443a5848ab16b309a61671dd108eb26cbe08e341e850c51ffc2b87be63fa4431ad6919ab311f4", 0xe9}, {&(0x7f00000099c0)="6b4d20a4e9656805b2baaf9d313cb45e0dcb14e2cc2af807c3cc67473b75d21951c781018138aacc50e6dbd60b0f7361d57a4da7dcf05db74673ec38f4804866b5492c751fe1fd6712ed6bcce154138b4c4afad281c6ec1a40a45f24ac6deebfb77f49c5f33091792c175af15572381d5c11a0994122c41a4c0439dea118b3b26d0f6761a023a7ca5e1071e4e2d96f14fb5f0151b0439ac308cb1599c82e0b4a292ce20645be0f3bd10f93b81722602a38ab0b7d", 0xb4}, {&(0x7f0000009b80)="09b5df0206c27c4ef111808cb28d722eb80c73a60a40d31f648f26599ff79410ae4191c5a08a090fed7b96d4318d08cc2a31b975e7b93eeedca4d6e54594b606ef5f46dfd13064ce361cd05421b7d10f3437fb7fc3faf7f451a65e81349fac0034f2e3667c6cbdcf03dc59b9c5a36933c032b30475cb0c39b997fe0601408d4ccc2beceeef0b6e6ceab8c042b4b17a704b5dc28c38c7e22b556472e4f2619969632c0d7e1ac3fada27440cb0c1d7fb04b599e4f0fa789e9e68758be4a05dfb200ab1b2f0c53a50857a1be59505c9d6cbd7e2137debb4ca543bdc19c550daa5dbc617dcd1", 0xe4}], 0x5, &(0x7f000000a180)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x80, 0x805}, {&(0x7f000000a200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000b700)=[{&(0x7f000000a280)="3096eaed0c4373e2ca0d1aaf0da27b647122ca4695c2ad02c450fa9e14ae73fd6def804424990b6de30aaac698b769aac4f933f41173839e73fab030240a96338e11bd5262d548a3ca8340e3bb7b943e7e87f05c107f8b6abce1bcb9e3540595cc96820ce6", 0x65}, {&(0x7f000000b300)="28f93bc30e8149e825dad12136f43da47b00e3a75f80e0703126d09fed578def38fcffdfd92b969550a85a53f71c5f4a22c94a9b87f2898d6c0a199c94d49c84ec92d597f51e2afd", 0x48}, {&(0x7f000000b3c0)="ea6c05c8b48a2297312c278e4b0730732e828267b67816d4030caed2a94e5e6d29b1f122c25bb95b1db1fe2b5032ac20901762ed0b0e6694f5d11d733e8d60383b470bbed21b7ca1626394", 0x4b}, {&(0x7f000000b480)="5ca5ad1e8cae5cde0af167dc6b415e8e33826063ee534143c9d8390664d9f9c07fdf560e8dc8fcfe270246a91ee8cf8137052cc8a76a0abb1cddc035d423af945093a447192527f10354667d1734c0975aa64e0074aa69155bab1fdc3ff743c6191f78f90da495149ffa2aaed788423369fc586450a755b558ff1ed350fe84a2fff1464959857be6", 0x88}, {&(0x7f000000b600)="d3c3a4a27a0dfb75e42d6ec1a9e43e16e69a2b45f4a6e7c49b31c395568598c61c58480cebe614873a6c3f1a0b9096f1baf19dd43d06a94f55a2d2f16663449875235ddc27ec81743158bc7fcbdba52afca0a1c68443e84aaf92a02da28d2112a17f33e4b5167ba6d192a37aa9a616a34956b43989db31c3893d6d093662be6f44e3f9f5ce91804de9af302ed66681269a7979b6d28a4ea02699339119e57350519e73f57a930860597be657c79d7c3ea67c8701a88607c02bfec8d4", 0xbc}], 0x5, &(0x7f000000bac0)=[@cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}], 0x60, 0x4000000}, {&(0x7f000000bb40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ddc0)=[{&(0x7f000000bbc0)="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", 0x1000}, {&(0x7f000000cc00)="f663cd79a46365ad468d0c9af6bad4611f867ca73f1a8c4d8a510f0fafead6d63b6d29f65e0f2ccec61b8c9c", 0x2c}, {&(0x7f000000cd00)="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", 0x1000}], 0x3, &(0x7f000000e5c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYBLOB="0000000020000000040000000100000002000000", @ANYRES32=r50, @ANYRES32=r51, @ANYRES32=r52, @ANYBLOB="0000000020000000130000000108000002000000", @ANYRES32=r53, @ANYRES32=r54, @ANYRES32=r55, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=r57, @ANYRES32=r58, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4000}], 0x8, 0x0) socket(0xa, 0x1, 0x0) r59 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r59, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r59, 0x0, 0x485, 0x0, 0x0) [ 720.961835] binder: 19000:19012 ERROR: BC_REGISTER_LOOPER called without request [ 720.976142] binder: release 19000:19012 transaction 213 out, still active [ 720.983194] binder: undelivered TRANSACTION_COMPLETE 22:30:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe00000000000000}, 0x1c) 22:30:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfdfd, &(0x7f00000001c0)}) 22:30:00 executing program 6: r0 = socket(0x1e, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000000c0)="2f723acecf52b1676594d2c28f9ed65182fb9ed8946872a406bd2fa882946c764b9e01b75ee2886760d648b06468c30729326652f7a16d2b3049b166eea95ef82c051dcb0ee1", 0x20) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1}}, 0x1c) [ 721.047571] binder: send failed reply for transaction 213, target dead 22:30:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x28000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0x1}}, 0x1c) [ 721.166361] binder: 19030:19035 ERROR: BC_REGISTER_LOOPER called without request [ 721.209487] binder: release 19030:19035 transaction 215 out, still active [ 721.216630] binder: undelivered TRANSACTION_COMPLETE [ 721.281984] binder: send failed reply for transaction 215, target dead 22:30:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3000000, 0x1}}, 0x1c) 22:30:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30], 0x1}}, 0x1c) 22:30:01 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000100)=0xe8) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/133) r2 = socket(0x1e, 0x4, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x100000000000000}, 0x1c) 22:30:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000011c0)="b5", 0x1}], 0x1) writev(r0, &(0x7f00000000c0), 0x10000000000000a4) 22:30:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfdfd, &(0x7f00000001c0)}) 22:30:01 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x1}}, 0x1c) 22:30:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 721.906203] binder: 19065:19066 ERROR: BC_REGISTER_LOOPER called without request [ 721.929873] binder: release 19065:19066 transaction 217 out, still active [ 721.937050] binder: undelivered TRANSACTION_COMPLETE 22:30:01 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00000000c0)=@l2={0x1f, 0x73d4, {0x9, 0xb913, 0x8, 0x1, 0x3, 0x3}, 0x6bdf, 0x7}, 0x11) accept4(r0, &(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80, 0x800) accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x24000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x100000000) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x6200000000000000}, 0x1c) 22:30:01 executing program 3 (fault-call:8 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:01 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0x1}}, 0x1c) 22:30:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x1}}, 0x1c) [ 721.977334] binder: send failed reply for transaction 217, target dead 22:30:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000280)=""/11, 0xffffff28) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r3 = dup3(r1, r2, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r2, r4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 22:30:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 722.075147] binder: 19083:19084 ERROR: BC_REGISTER_LOOPER called without request 22:30:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x30}, 0x1c) [ 722.124684] binder: 19084 RLIMIT_NICE not set [ 722.135226] binder: 19084 RLIMIT_NICE not set [ 722.160412] binder: send failed reply for transaction 219 to 19083:19084 [ 722.201411] binder: 19083:19084 ioctl c0306201 2000efd0 returned -14 [ 722.213581] binder: undelivered TRANSACTION_COMPLETE [ 722.218866] binder: undelivered TRANSACTION_ERROR: 29201 22:30:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf00, 0x1}}, 0x1c) 22:30:02 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1000000003, 0x17, 0x94) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x80000001, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x20, 0xc2d1, 0xfffffffffffff001, 0xb55, 0x9, 0x0, 0x2, 0x81}) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x1}}, 0x1c) 22:30:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0x1}}, 0x1c) 22:30:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x54}, 0x1c) 22:30:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x8005001f}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x1}}, 0x1c) 22:30:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1000000}, 0x1c) 22:30:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) [ 722.888283] binder: 19125:19131 ERROR: BC_REGISTER_LOOPER called without request [ 722.907750] binder: 19131 RLIMIT_NICE not set [ 722.912588] binder: 19131 RLIMIT_NICE not set [ 722.917979] binder: send failed reply for transaction 221 to 19125:19131 [ 722.926097] binder: 19125:19131 ioctl c0306201 2000efd0 returned -14 22:30:02 executing program 6: r0 = dup(0xffffffffffffff9c) getpeername$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xe2d1, 0x801) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="9379568d814fee4f2e37da9332f58991d44c0c1bfb60605c4821abcb441499fb49d3e862232adc973102081b8973b3c968d69aaa5a9ee760f4761551766680c29d13d3a44bc718cf0fb9e0086d239383d6d861671ed7848e328db6e6a2a4d5a8996e8801b92e3653013e8895905643fd", 0x70) r3 = socket(0x101e, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0xa73, 0x4}) bind(r3, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000380)="f88307e2b9be676a529ae895ed4bf1a98360a5d8d603606e34d58f202cc73eb9b119bf0c9581c23c6675a453edf21754b27ee80ce123aad497d71298f95f1a6b67cb4bb415726b9b3464e3f452674a17e4196f3408b66867ec2f8307ff2027f4356339694e2aa78e67d0adebcd50ad767c6bcb3918ec39b45d99c84965a314cb8e60b7ed950374548fa720ca949fd814fee44564bc1f81383c6af96f359d2a1b80d779240fb435c1c27097b08d2487bbc41c39168eeaa3435fd2b9db6716770e4ddb13daad36ec5fe5b3b31e46b6e36324ec876b765284903363f0fe92aa0a8fab", 0xe1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x2) close(0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) sendmsg(r5, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x10000000000) 22:30:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x1}}, 0x1c) [ 722.975126] binder: undelivered TRANSACTION_COMPLETE [ 722.980588] binder: undelivered TRANSACTION_ERROR: 29201 22:30:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 723.113711] binder: 19160:19162 ERROR: BC_REGISTER_LOOPER called without request [ 723.158494] binder: BINDER_SET_CONTEXT_MGR already set [ 723.165555] binder: 19160:19166 ioctl 40046207 0 returned -16 [ 723.174537] binder: 19160:19166 ERROR: BC_REGISTER_LOOPER called without request [ 723.183647] binder_alloc: 19160: binder_alloc_buf, no vma [ 723.189346] binder: 19160:19162 transaction failed 29189/-3, size 0-0 line 2967 [ 723.198136] binder: release 19160:19162 transaction 223 out, still active [ 723.205156] binder: undelivered TRANSACTION_COMPLETE [ 723.211486] binder: undelivered TRANSACTION_ERROR: 29189 [ 723.217141] binder: send failed reply for transaction 223, target dead 22:30:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000280)=""/11, 0xffffff28) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r3 = dup3(r1, r2, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r2, r4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 22:30:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) 22:30:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe000000}, 0x1c) 22:30:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xa00, 0x1}}, 0x1c) 22:30:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:04 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803], 0x1}}, 0x1c) 22:30:04 executing program 6: r0 = socket(0x1e, 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x9, 0x1, 0x3, 0x6, 'syz0\x00', 0x20}, 0x1, 0x10000000, 0xd43, r1, 0x1, 0x1, 'syz0\x00', &(0x7f0000000040)=['eth0ppp0vboxnet1eth1\x00'], 0x15, [], [0x4, 0x7, 0x400, 0x5]}) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1000001e, 0xa, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:04 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) [ 725.181504] binder: 19173:19175 ERROR: BC_REGISTER_LOOPER called without request 22:30:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x11000000}, 0x1c) 22:30:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62000000], 0x1}}, 0x1c) 22:30:04 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x52001) ioctl$TIOCCBRK(r1, 0x5428) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/205) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x28000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 725.240628] binder: BINDER_SET_CONTEXT_MGR already set [ 725.250181] binder: 19173:19192 ioctl 40046207 0 returned -16 [ 725.291294] binder: 19173:19192 ERROR: BC_REGISTER_LOOPER called without request 22:30:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4], 0x1}}, 0x1c) [ 725.345169] binder_alloc: 19173: binder_alloc_buf, no vma [ 725.350926] binder: 19173:19175 transaction failed 29189/-3, size 0-0 line 2967 22:30:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xc0ffffff}, 0x1c) 22:30:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) [ 725.395976] binder: release 19173:19175 transaction 226 out, still active [ 725.403119] binder: undelivered TRANSACTION_COMPLETE [ 725.454918] binder: undelivered TRANSACTION_ERROR: 29189 [ 725.485788] binder: send failed reply for transaction 226, target dead 22:30:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x7, 0x371, [0x4, 0x2772f48, 0x0, 0x7ff]}, &(0x7f00000002c0)=0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x2, [0x1, 0x7b9d]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r4, 0x8000}, 0x8) sendfile(r0, r3, &(0x7f0000000040), 0x2000000000008010) ftruncate(r0, 0x96) 22:30:05 executing program 6: r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000595ff8)) close(r3) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0200000012070def2678b2157fda91d5c1f7f08a2ad7b5b2ad8508d5d4c2005b10c2199d5f431dd00600ce9e1282aeea959809000dcd4501d25e9042d9f2f515601b630eb67d831b9dead445145811f1c53685f3978d5d331a109879a5f778482756bac083faccdfca8069969114f8dbe1b3401f24f00a40fea1e41171c51552fcf91616f5a5dcf59184f3ad66fa5e00000000000000000000000000000282c1a92db5ba01e5c8a39912"]) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000000c0)={0x13, 0x5e, &(0x7f0000000040)="ef67bfbdfa5678e0707495309f5ac382440e133c687f97f8793d1c68c5b69fa8d23c1296d7d63ebc589a28a434820d5139ed772f8b5c2db240a4cd406644ecef1569e818298ced6f52c297d5e00dfea2b43c9c4b18f73d269f60d158841e"}) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000500)=""/141) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r4 = socket(0x1e, 0x5, 0x0) sendmsg(r4, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2=0xe0000002, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e21, 0x0, 0x4e24, 0x10000, 0xa, 0x20, 0x80, 0x0, r1, r5}, {0x7f, 0x7ff, 0x5, 0x5, 0x445, 0x2, 0xfffffffffffffffd, 0x2}, {0x80, 0x0, 0x9, 0x4}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d3, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x0, 0x3, 0x0, 0x200, 0x400, 0x3af}}, 0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@local={0xfe, 0x80, [], 0xaa}, 0x7a, r1}) 22:30:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x40030000000000, 0x1}}, 0x1c) 22:30:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0x1}}, 0x1c) 22:30:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x11}, 0x1c) 22:30:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0], 0x1}}, 0x1c) 22:30:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 726.129472] binder: 19235:19237 ERROR: BC_REGISTER_LOOPER called without request [ 726.150403] binder: BINDER_SET_CONTEXT_MGR already set [ 726.159232] binder: 19235:19242 ioctl 40046207 0 returned -16 22:30:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001000000], 0x1}}, 0x1c) 22:30:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0x1}}, 0x1c) 22:30:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x3000000000000000}, 0x1c) 22:30:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x181, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', r3}) setrlimit(0x1, &(0x7f0000011000)) r4 = memfd_create(&(0x7f000093afb8)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x0) write$eventfd(r4, &(0x7f0000500ff8)=0xfffffffffffffffd, 0x8) [ 726.213157] binder: 19235:19260 ERROR: BC_REGISTER_LOOPER called without request 22:30:06 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x440, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x65000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 726.327527] binder_alloc: 19235: binder_alloc_buf, no vma [ 726.333307] binder: 19235:19237 transaction failed 29189/-3, size 0-0 line 2967 22:30:06 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) accept(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400564407605ada000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 22:30:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000], 0x1}}, 0x1c) 22:30:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x34000}, 0x1c) 22:30:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1}}, 0x1c) [ 726.387059] binder: release 19235:19237 transaction 229 out, still active [ 726.394167] binder: undelivered TRANSACTION_COMPLETE 22:30:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306209, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 726.452150] binder: undelivered TRANSACTION_ERROR: 29189 [ 726.488610] binder: send failed reply for transaction 229, target dead [ 726.593665] binder: 19304:19306 ERROR: BC_REGISTER_LOOPER called without request [ 726.608494] binder: 19304:19306 ioctl c0306209 2000efd0 returned -22 [ 726.647714] binder: BINDER_SET_CONTEXT_MGR already set [ 726.658140] binder: 19304:19311 ioctl 40046207 0 returned -16 [ 726.666973] binder: 19304:19311 ERROR: BC_REGISTER_LOOPER called without request [ 726.675923] binder_alloc: 19304: binder_alloc_buf, no vma [ 726.681094] binder: 19304:19311 ioctl c0306209 2000efd0 returned -22 [ 726.681591] binder: 19304:19306 transaction failed 29189/-3, size 0-0 line 2967 [ 726.696634] binder: release 19304:19306 transaction 232 out, still active [ 726.703684] binder: undelivered TRANSACTION_COMPLETE [ 726.714295] binder: undelivered TRANSACTION_ERROR: 29189 [ 726.719908] binder: send failed reply for transaction 232, target dead 22:30:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xa00000000000000, 0x1}}, 0x1c) 22:30:06 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) r2 = semget$private(0x0, 0x1, 0x40) semop(r2, &(0x7f0000000080)=[{0x2, 0xb2}], 0x1) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r3 = memfd_create(&(0x7f0000000040)='posix_acl_access\x00', 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 22:30:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1}}, 0x1c) 22:30:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0x1}}, 0x1c) 22:30:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='loginuid\x00') write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x5, 0x1000}}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)}}, 0x20) 22:30:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x20001000000}, 0x1c) 22:30:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, 0x1c) [ 727.174561] binder: 19324:19327 ERROR: BC_REGISTER_LOOPER called without request [ 727.210303] binder: BINDER_SET_CONTEXT_MGR already set 22:30:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0x1}}, 0x1c) 22:30:06 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480200, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f00000001c0)=0xb) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xfffffffffffffebe, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000300002300000000fd01fe06000200000000060001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 22:30:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x1}}, 0x1c) [ 727.233212] binder: 19324:19336 ioctl 40046207 0 returned -16 [ 727.251949] binder: 19324:19336 ERROR: BC_REGISTER_LOOPER called without request 22:30:06 executing program 6: r0 = socket(0x1e, 0x800, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x187, 0x2980) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) fcntl$setflags(r1, 0x2, 0x1) setsockopt(r2, 0x1, 0xfffffffeffffffff, &(0x7f0000000100)="e81c0e485958955bd9eb0947d857e6f0e584bff42d54e03551bce21f66c9fdb9542353617fae26afca29ecfb115fdfb6009beed471fe2458cb28fdf5fe", 0x3d) sysfs$2(0x2, 0xfff, &(0x7f0000000200)=""/253) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 727.285674] binder_alloc: 19324: binder_alloc_buf, no vma [ 727.291459] binder: 19324:19327 transaction failed 29189/-3, size 0-0 line 2967 22:30:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000}, 0x1c) 22:30:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 727.336411] binder: release 19324:19327 transaction 235 out, still active [ 727.343509] binder: undelivered TRANSACTION_COMPLETE 22:30:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) sendmsg$rds(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f0000000280)=""/225, 0xe1}], 0x4, &(0x7f0000000780)=[@mask_fadd={0x58, 0x114, 0x8, {{0xffffffffffffffcc, 0x1}, &(0x7f00000003c0)=0xffffffffffff8001, &(0x7f0000000400)=0x2, 0x5, 0x3, 0x40, 0x9, 0x12, 0xb9a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x8, 0x5309, 0x7f, 0x0, 0x2, 0x40, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x200}, {&(0x7f00000004c0)=""/223, 0xdf}, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/125, 0x7d}], 0x1, 0x2a, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0xffffffffffffffd8}, &(0x7f0000000680)=0xfff, &(0x7f00000006c0)=0x40, 0x7, 0xdff, 0x7, 0x6, 0x48, 0x7f}}, @cswp={0x58, 0x114, 0x7, {{0x10000, 0x4}, &(0x7f0000000700)=0x79, &(0x7f0000000740)=0x1d, 0x5, 0x7, 0x2, 0x3, 0x0, 0x6}}], 0x1a8, 0x1}, 0x4000000) io_setup(0x4, &(0x7f0000000980)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000009c0)={{0xa, 0x4e22, 0x20, @local={0xfe, 0x80, [], 0xaa}, 0x8}, {0xa, 0x4e23, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x8001, [0x200, 0x634, 0x4, 0x7, 0x9, 0x0, 0x0, 0x7ff]}, 0x5c) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000a40)={0x40, 0x100000000, 0x0, 0x9, 0xfffffffffffff800}, 0x14) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001ac0)='tls\x00', 0x4) getpeername$packet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001b40)=0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001bc0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x74, r3, 0x8, 0x70bd26, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001d00)='tls\x00', 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x7c, r3, 0x310, 0x70bd2a, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x37c}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x705}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xaf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc3a8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ec0)={r2, 0x0, 0x1, 0x2, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001f00)='tls\x00', 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/hwrng\x00', 0x80002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000001f80)={0x2, 0x0, 0x6, 0x20, 0x6, 0x8, 0x9, 0xffffffff80000000, 0x5, 0x1f}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000002000)=0x0) process_vm_writev(r7, &(0x7f00000024c0)=[{&(0x7f0000002040)=""/233, 0xe9}, {&(0x7f0000002140)=""/112, 0x70}, {&(0x7f00000021c0)=""/229, 0xe5}, {&(0x7f00000022c0)=""/115, 0x73}, {&(0x7f0000002340)=""/125, 0x7d}, {&(0x7f00000023c0)=""/206, 0xce}], 0x6, &(0x7f0000002780)=[{&(0x7f0000002540)=""/216, 0xd8}, {&(0x7f0000002640)=""/152, 0x98}, {&(0x7f0000002700)=""/105, 0x69}], 0x3, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000027c0)={r4, 0x0, 0x7, 0x65246b28, 0x3}) ioctl$VT_ACTIVATE(r6, 0x5606, 0x5) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000002800)) recvfrom$unix(r2, &(0x7f0000002840)=""/242, 0xf2, 0x0, &(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e) utimensat(r6, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={{0x0, 0x7530}}, 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000002a40)=[@in6={0xa, 0x4e24, 0xfffffffffffffffb, @remote={0xfe, 0x80, [], 0xbb}, 0xffff}, @in6={0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x6}], 0x38) [ 727.413721] binder: undelivered TRANSACTION_ERROR: 29189 [ 727.456281] binder: send failed reply for transaction 235, target dead 22:30:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x900000000000000, 0x1}}, 0x1c) 22:30:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0x1}}, 0x1c) 22:30:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x8000000}, 0x1c) 22:30:07 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x10001, 0x1) close(0xffffffffffffffff) sendto(r0, &(0x7f00000000c0)="ed0019aa0e115d77b6c06682732738d2e12878853bdadc092c4e386bf0e1785cbbb5fd54e398391a6b718afe7f7a3d9acacb31f9be1eacdebd420f041294a6f62946fb79d224d9469f44c20b2457b7d2", 0x50, 0x10, &(0x7f0000000200)=@llc={0x1a, 0x200, 0x7f, 0x4, 0x20, 0x800, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) r1 = socket(0x18, 0x5, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x3) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 728.175333] binder: 19384:19389 ERROR: BC_REGISTER_LOOPER called without request 22:30:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) 22:30:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x1}}, 0x1c) 22:30:07 executing program 6: r0 = socket(0x2001e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) 22:30:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x62000000}, 0x1c) [ 728.223592] binder: BINDER_SET_CONTEXT_MGR already set 22:30:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x1}}, 0x1c) [ 728.289118] binder: 19384:19396 ioctl 40046207 0 returned -16 [ 728.299092] binder_alloc: 19384: binder_alloc_buf, no vma [ 728.304917] binder: 19384:19389 transaction failed 29189/-3, size 0-0 line 2967 [ 728.327607] binder: 19384:19403 ERROR: BC_REGISTER_LOOPER called without request 22:30:08 executing program 6: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xf4cf}, 0x1c) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) [ 728.399566] binder: undelivered TRANSACTION_ERROR: 29189 [ 728.413956] binder: send failed reply for transaction 238 to 19384:19389 22:30:08 executing program 2: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0x2b1, 0x800}, {0x7, 0x8, 0x800}, {0x6, 0x3, 0x80000001800}], 0x3, &(0x7f0000000000)={0x77359400}) [ 728.444155] binder: undelivered TRANSACTION_COMPLETE [ 728.449409] binder: undelivered TRANSACTION_ERROR: 29189 22:30:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x1}}, 0x1c) 22:30:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x2000000000000000, 0x1}}, 0x1c) 22:30:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) 22:30:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x1}}, 0x1c) 22:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:08 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x0, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x4, 0x2, 0x5, 0x0, 0xfc, 0x94}) 22:30:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xb00000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:08 executing program 2: r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x1, 0x3, 0xb8a, 0x9, 0x0, 0x3, 0x9800, 0x3, 0x6685, 0x7, 0x6, 0x3, 0xedd, 0x8, 0x7, 0x1, 0x5, 0x6, 0x0, 0x2, 0x2, 0x8, 0x3, 0xaa96, 0x0, 0x1, 0x81, 0x9, 0x0, 0xfa, 0x5, 0xdd7, 0x40000000000000, 0xd92, 0x83, 0x80000000, 0x0, 0x7, 0x6, @perf_config_ext={0xffffffffffffff81, 0x2}, 0x400, 0x1f1, 0x7, 0x4, 0x2, 0x6, 0x70b}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0xb) fchmod(r0, 0x60) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xa448354000000000) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="d25b972083fd7ea7fa7177a75eb34d05cbaf22f5c63e7c2cfcf86b1217ac6840b8b3b50232a26f34096f1ac268fe86a3b6b786cda478ab0c2a045c8b35736c97b689a51aad19e441b08068f375ef5363129f121859376ecda4e3390b64068f2fb986e2cb7822dd280b40285cbef3ab42b82c8e51def285d7703662073cfe7cdafc0823e71e2ecc18dd3664baadced17a6ac65cf408f63029311221f35f1621bfa8451fda8b538c0692b177a10e1c143becf2195421d1fd44463a87488ba94a0f99dd5fd501c11a2bc54511a59e1a7a74b2f8ebe3c302bb15cb6088e7a91118a8bf3a3980f23ad2f896201a5a2c43b3b83e245d3076b9e934a9bbc362f3", 0xfd}, {&(0x7f00000003c0)="dbe91ae08d9266682e9afe4c5219ab68f7d7835947a0acb27d4405e01faf2627de3564f64ea5af2fedd5e234de9a94cb37c9618bd99a260b8408104cb6b1afdbaa089da15f890f71ba666a8025a326d8978abe368b2427f080cf76374ce437abb0a260491a37d29eb25bc358047c77c63864ef5176a3cd636593d95b1be05070f96fca8fbc0f032caffcb2290ed3f8af3bf0e0644cda8c1844a847db4f809808636006eab0db8867588f760318cdc8a314d6fbc2a1eaf9a967d680f95c80e483954d200b1093e202a300c290bd913465486bd99b3fd4b5b191014593220206cd8928d538836e59d13562bd8f7446d842a836c5", 0xf3}, {&(0x7f0000000180)="e7f277be6f37d115fd28c03aaba7445d73ea1263e78e3a087ff3729259cb04047cf9ed5e2d38084f986b75c1aab5d4696af5aec5aab422062639a47b2f04cf92e4f50e1e0856370c02ddb1aece88b70847a052b6fbbf09311f35a8e90e623786190f4fb0ff548786e7", 0x69}, {&(0x7f00000004c0)="aaf221deb989a2cfeaf2461e9600323c7660c5560f58b3ff9aabc7d570b1e4b87feb1a", 0x23}], 0x4, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x103, 0x100fff) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={0x80000000, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0xcff, 0x100000000, 0x780, 0x5, &(0x7f0000000680)='ifb0\x00', 0xfffffffffffffffc, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000600), 0x1) pwritev(r3, &(0x7f00000000c0), 0x10000000000000b0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000005c0)={'veth1_to_bridge\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) ioctl$TIOCCONS(r4, 0x541d) 22:30:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffc0}, 0x1c) 22:30:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0x1}}, 0x1c) [ 729.156941] binder: 19453:19454 ERROR: BC_REGISTER_LOOPER called without request [ 729.193294] binder: 19453:19454 ioctl c0306225 2000efd0 returned -22 22:30:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)='%!}.]:eth0\x00', 0xb, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff6000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="672eff8b80e5660f38827e7b660feeebb96d0300000f32b8010000000f01c10f01df0f63757466660f38822dfd00000066b826010f00d866b86c008ed0", 0x3d}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000280)=""/243) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:30:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200000000000000], 0x1}}, 0x1c) [ 729.242855] binder: BINDER_SET_CONTEXT_MGR already set [ 729.278854] binder: 19453:19472 ioctl 40046207 0 returned -16 22:30:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0x1}}, 0x1c) 22:30:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xb000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe00}, 0x1c) 22:30:09 executing program 6: r0 = socket(0xf, 0x9, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 729.326316] binder: 19453:19472 ERROR: BC_REGISTER_LOOPER called without request [ 729.355524] binder_alloc: 19453: binder_alloc_buf, no vma [ 729.361296] binder: 19453:19454 transaction failed 29189/-3, size 0-0 line 2967 22:30:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x1}}, 0x1c) [ 729.444153] binder: 19453:19472 ioctl c0306225 2000efd0 returned -22 [ 729.473540] binder: release 19453:19454 transaction 241 out, still active [ 729.480686] binder: undelivered TRANSACTION_COMPLETE [ 729.509649] binder: undelivered TRANSACTION_ERROR: 29189 [ 729.536321] binder: send failed reply for transaction 241, target dead 22:30:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x5, 0x1}}, 0x1c) 22:30:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x1}}, 0x1c) 22:30:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x30000000}, 0x1c) 22:30:09 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={r1, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:09 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x5, 0x0) clone(0x4000, &(0x7f0000000040)="43c29603fa12d75bb362696289005fabf52519234d713ef640ef979fb265bd4e098e259677c9fd33d8f32c2be55ff26a2f3e76ad667e7bf18429d792822b4d203e3ead25d20f9080110df2", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="56ad8c62e4a287b0329fed0939dcad6cd19e940d2282c33f7f938e94e021e38632163f2c0745d2e8a7c8623466a04854e25c4526f58a4d87d2") sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x1}}, 0x1c) 22:30:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x1f000580}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 730.172223] binder: 19520:19521 ERROR: BC_REGISTER_LOOPER called without request [ 730.191326] binder: BINDER_SET_CONTEXT_MGR already set 22:30:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:30:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000], 0x1}}, 0x1c) 22:30:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) [ 730.222492] binder: 19520:19542 ERROR: BC_REGISTER_LOOPER called without request [ 730.233020] binder: 19520:19537 ioctl 40046207 0 returned -16 [ 730.242460] binder_alloc: 19520: binder_alloc_buf, no vma [ 730.248143] binder: 19520:19521 transaction failed 29189/-3, size 0-0 line 2967 22:30:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x54000000}, 0x1c) [ 730.319392] binder: release 19520:19521 transaction 244 out, still active [ 730.326465] binder: undelivered TRANSACTION_COMPLETE [ 730.346104] binder: undelivered TRANSACTION_ERROR: 29189 [ 730.353043] binder: send failed reply for transaction 244, target dead 22:30:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:30:10 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0x1}}, 0x1c) 22:30:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x14050000, 0x1}}, 0x1c) 22:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x200000000000000}, 0x1c) 22:30:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100020000], 0x1}}, 0x1c) 22:30:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0x1}}, 0x1c) 22:30:10 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(des3_ede-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) socketpair(0x1a, 0x6, 0xf307, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x2, 0x1, 0x20, 0x2, 0x80}) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000540)=""/4096, 0x20001540}], 0x1) [ 731.207529] binder: 19597:19604 ERROR: BC_REGISTER_LOOPER called without request [ 731.235894] binder: BINDER_SET_CONTEXT_MGR already set 22:30:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee050000], 0x1}}, 0x1c) 22:30:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x400300}, 0x1c) 22:30:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) 22:30:10 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00000002c0)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x108010, 0xffffffffffffff9c, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x40086310}, @clear_death={0x400c630f, 0x3, 0x1}, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, r1, 0x1}, @free_buffer={0x40086303, r2}, @increfs={0x40046304, 0x1}], 0xa3, 0x0, &(0x7f00000000c0)="1fe9f60c6ca6913d90aa8ef8ee448a5ef16bf490b7ad5426876728e7927ddd6b6f623ef1fb0b0f1136b30f0fa6f789bb884f2e0a5f8bd80d84abd278370cf266b6480d0b9672ed1fa5a8ff17e519419da887a9fe278b7196897081190820fee7be9f8a07b4636b3395956f244a23ad1d557ef35ee25cf50e02981cf604c8d2e033fd9ac9e019c21008d0228c16c80657a7211ab2fb808a72bd5cfcfd80bc53b6910a4b"}) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 731.259349] binder: 19597:19608 ioctl 40046207 0 returned -16 [ 731.297724] binder: 19597:19608 ERROR: BC_REGISTER_LOOPER called without request 22:30:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:11 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0x1}}, 0x1c) 22:30:11 executing program 2: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000007900)={&(0x7f0000007640)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000077c0)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, &(0x7f0000007800)=""/207, 0xfe44}, 0x0) close(r0) r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r3, 0x0, 0x70bd27, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x191000, 0x0) getpgrp(0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000200)={@nfc={0x27, 0x0, 0x0, 0x6}, {&(0x7f0000000040)=""/59, 0x3b}, &(0x7f00000001c0), 0x1}, 0xa0) [ 731.378075] binder_alloc: 19597: binder_alloc_buf, no vma [ 731.383835] binder: 19597:19604 transaction failed 29189/-3, size 0-0 line 2967 22:30:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6200], 0x1}}, 0x1c) [ 731.422320] binder: undelivered TRANSACTION_ERROR: 29189 [ 731.433838] binder: send failed reply for transaction 247 to 19597:19604 [ 731.464379] binder: undelivered TRANSACTION_COMPLETE [ 731.469602] binder: undelivered TRANSACTION_ERROR: 29189 22:30:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x500, 0x1}}, 0x1c) 22:30:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1100}, 0x1c) 22:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306207, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:11 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) 22:30:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400], 0x1}}, 0x1c) 22:30:11 executing program 6: r0 = socket(0x1e, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100c0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7fff) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000], 0x1}}, 0x1c) [ 732.221250] binder: 19656:19667 ERROR: BC_REGISTER_LOOPER called without request 22:30:11 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee05000000000000], 0x1}}, 0x1c) 22:30:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x5400}, 0x1c) [ 732.268363] binder: 19656:19667 ioctl c0306207 2000efd0 returned -22 [ 732.290480] binder: BINDER_SET_CONTEXT_MGR already set 22:30:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = epoll_create1(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000040)={0x2}) close(r1) r2 = memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r1, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r1, &(0x7f000014d000), 0x3d0) close(r0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7fff) 22:30:12 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x650000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 732.320860] binder: 19656:19676 ioctl 40046207 0 returned -16 22:30:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x6200}, 0x1c) 22:30:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x1}}, 0x1c) 22:30:12 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x1}}, 0x1c) [ 732.375301] binder: 19656:19676 ERROR: BC_REGISTER_LOOPER called without request [ 732.424564] binder_alloc: 19656: binder_alloc_buf, no vma [ 732.430333] binder: 19656:19667 transaction failed 29189/-3, size 0-0 line 2967 [ 732.485207] binder: 19656:19676 ioctl c0306207 2000efd0 returned -22 [ 732.495392] binder: release 19656:19667 transaction 250 out, still active [ 732.502556] binder: undelivered TRANSACTION_COMPLETE [ 732.527315] binder: undelivered TRANSACTION_ERROR: 29189 [ 732.552354] binder: send failed reply for transaction 250, target dead 22:30:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x514, 0x1}}, 0x1c) 22:30:12 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0x1}}, 0x1c) 22:30:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x62}, 0x1c) 22:30:12 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306205, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x1}}, 0x1c) 22:30:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 733.218345] binder: 19725:19732 ERROR: BC_REGISTER_LOOPER called without request 22:30:12 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000], 0x1}}, 0x1c) 22:30:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) 22:30:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1100000000000000}, 0x1c) [ 733.261324] binder: 19725:19732 ioctl c0306205 2000efd0 returned -22 [ 733.289833] binder: BINDER_SET_CONTEXT_MGR already set 22:30:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0xc, 0x5, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000100)}, 0x10) 22:30:13 executing program 6: r0 = socket(0x1e, 0x2, 0x0) flistxattr(r0, &(0x7f0000000040)=""/194, 0xc2) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @rand_addr=0x93}}}, 0x84) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x2, {0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0x8000}}}, 0xfffffffffffffc75, &(0x7f0000d0bfd0), 0x0, &(0x7f00000004c0)=[{0x70, 0x117, 0x1, "b1991e3c9a16508f8e48aa9cbf44f0c6599b502aef2e72a0341e1973a7c3f3469ec5e43c2c6986d7d9f5d1bb85488470c9c7a7f3200fde26e7131d0daca02bddae587ee193aac176f302189ecb8e0085868307fd8cb6bd6c7716"}, {0x18, 0x104, 0xb93, "6f4bf2c8"}, {0xd0, 0x88, 0x4, "0b19deaaec37fce4feaaa7ae195e8c93409110d704342a7c46cce6ed9ce80c873f043f7b4119d848fe499bba87fb5fcf30816117f264164981a1168e2966b5bc2f14f2172f1a2b30c7bff7feb5fbc28f3d9c901202f0459f3b1e21e67423f5ee1ddf808b21760fdd2a456966aa09a6a099b6925756b7ac02a761dcb718bfbadd921305074a4b076684fff866dd36f990fe10d511f9b1639280b378263e117d3e255cc0b4c66c2270d69b13aeb595cb4847fd11300e4ba09fe2b8bc"}, {0xc0, 0x100, 0x66, "3cac85081acaf8c03bee2687833086d4247c5542cad60df6e37806cca41c99b5f7f066f0fb49d00656d66eae5f8a860add13ab2952d942dc3da538c6ab951ad9ebb782e1f0317fa1c9bf685f406612141f8f61db161711584f889f4fa2468b1443d073d0886f3ccbf26c121711c42714911055f0b051029407f5411ea106bff27cfc63c33ebe16d365dd47a1ab7c87b0333350c6a6b69d3f0276f2a9cf26a8711590c2e93b76646782d8"}, {0x78, 0x111, 0x3173, "45d387ba5bc69a287943c2caaeb884d83371b55d1d85c26447498823d7b58a7029ceb419f8e7dd4364e3639b9b8b343ea5762779c2326e1aa3665517baeed490c5cc26db3223e094b35416ca0f9df383d0925953da3d8fac0d8a731dba275e4f1a082f"}], 0x290}, 0x0) 22:30:13 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0x1}}, 0x1c) [ 733.338663] binder: 19725:19742 ioctl 40046207 0 returned -16 [ 733.377115] binder: 19725:19742 ERROR: BC_REGISTER_LOOPER called without request 22:30:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x5400000000000000}, 0x1c) 22:30:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000], 0x1}}, 0x1c) [ 733.438691] binder_alloc: 19725: binder_alloc_buf, no vma [ 733.444439] binder: 19725:19732 transaction failed 29189/-3, size 0-0 line 2967 [ 733.519141] binder: 19725:19742 ioctl c0306205 2000efd0 returned -22 [ 733.551697] binder: release 19725:19732 transaction 253 out, still active [ 733.558837] binder: undelivered TRANSACTION_COMPLETE [ 733.583724] binder: undelivered TRANSACTION_ERROR: 29189 [ 733.605637] binder: send failed reply for transaction 253, target dead 22:30:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xb80b0000, 0x1}}, 0x1c) 22:30:13 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:13 executing program 2: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x6, 0x800) 22:30:13 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000], 0x1}}, 0x1c) 22:30:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x3000}, 0x1c) 22:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) 22:30:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x400000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 734.184537] binder: 19795:19797 ERROR: BC_REGISTER_LOOPER called without request 22:30:13 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000], 0x1}}, 0x1c) [ 734.228118] binder: BINDER_SET_CONTEXT_MGR already set 22:30:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ustat(0x5, &(0x7f0000000000)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_stats={0x1d}}) close(r2) close(r1) 22:30:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x100020000}, 0x1c) [ 734.256214] binder: 19795:19808 ioctl 40046207 0 returned -16 22:30:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62], 0x1}}, 0x1c) 22:30:13 executing program 6: madvise(&(0x7f0000000000/0x4000)=nil, 0x1300000000000000, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x401}, 0x8) [ 734.311837] binder: 19795:19808 ERROR: BC_REGISTER_LOOPER called without request 22:30:14 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0x1}}, 0x1c) [ 734.358485] binder_alloc: 19795: binder_alloc_buf, no vma [ 734.364289] binder: 19795:19797 transaction failed 29189/-3, size 0-0 line 2967 22:30:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xc0ffffff00000000}, 0x1c) 22:30:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x2800000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 734.399556] binder: release 19795:19797 transaction 256 out, still active [ 734.406735] binder: undelivered TRANSACTION_COMPLETE [ 734.432891] binder: undelivered TRANSACTION_ERROR: 29189 [ 734.469914] binder: send failed reply for transaction 256, target dead 22:30:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x2, 0x1}}, 0x1c) 22:30:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000], 0x1}}, 0x1c) 22:30:14 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000040)={&(0x7f0000000200)=""/4096, 0x1000}) 22:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:14 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x1}}, 0x1c) 22:30:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x4000000}, 0x1c) 22:30:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x1f00058000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:14 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x204000000000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x8040, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x8}}}, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) [ 735.209667] binder: 19858:19863 ERROR: BC_REGISTER_LOOPER called without request [ 735.247836] binder: BINDER_SET_CONTEXT_MGR already set 22:30:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x3}}, 0x1c) 22:30:14 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000], 0x1}}, 0x1c) 22:30:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) 22:30:14 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200), 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000240)={0x7fff, 0x2}) r4 = socket(0x1e, 0x6, 0x28b8) sendmsg(r4, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d145f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) socket$l2tp(0x18, 0x1, 0x1) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x5) [ 735.274279] binder: 19858:19876 ioctl 40046207 0 returned -16 [ 735.297330] binder: 19858:19876 ERROR: BC_REGISTER_LOOPER called without request 22:30:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 735.364659] binder_alloc: 19858: binder_alloc_buf, no vma [ 735.370404] binder: 19858:19863 transaction failed 29189/-3, size 0-0 line 2967 22:30:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe}, 0x1c) 22:30:15 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x1}}, 0x1c) [ 735.442843] binder: release 19858:19863 transaction 259 out, still active [ 735.449946] binder: undelivered TRANSACTION_COMPLETE [ 735.482498] binder: undelivered TRANSACTION_ERROR: 29189 [ 735.526384] binder: send failed reply for transaction 259, target dead 22:30:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x63a5b35700000000, 0x1}}, 0x1c) 22:30:15 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r3 = getpgid(0xffffffffffffffff) move_pages(r3, 0x4, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000080)=[0x2, 0x3, 0x5], &(0x7f00000000c0)=[0x0], 0x6) 22:30:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x501}}, 0x1c) 22:30:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{0xa, 0x3, 0x0, 0x1, 'syz0\x00', 0x6}, 0x1, [0x6d8000, 0x800080000, 0x7fffffff, 0x6, 0x200, 0x4, 0x9c1, 0xffffffff00000000, 0x2, 0x1, 0x0, 0xc9, 0x1, 0x6, 0x4, 0xb7e2, 0x2, 0x1f, 0x101, 0x7f, 0x9, 0x9, 0x0, 0x3, 0xffffffff, 0x3, 0x3, 0x7, 0x7710, 0x2, 0x6e82, 0x7, 0x1, 0x8, 0x9, 0x0, 0x31bc, 0x1, 0x7, 0x100, 0xe2, 0x100000000, 0x6, 0x200, 0x2002, 0x95a, 0x401, 0x3, 0x7, 0x400, 0x401, 0xfffffffffffffe00, 0x2, 0xbec, 0x1f, 0xf8e, 0x8000, 0x8, 0x0, 0xfffffffffffffffc, 0x784, 0x1000, 0x4, 0xfffffffffffffffc, 0x3, 0x5, 0xf5, 0x87f2, 0x9, 0x401, 0x5, 0x5, 0x9, 0x50f6, 0x0, 0x1ff, 0x7, 0x5, 0x3, 0x3ff, 0x0, 0x8, 0x2, 0x401, 0x4000, 0x6d3, 0x4, 0x3, 0x7, 0x0, 0xda6, 0x100000001, 0x5, 0x1000, 0xf55, 0x5, 0x1, 0x1, 0x4, 0xc83d, 0x6, 0x1, 0x4, 0x7ff, 0x4, 0x9, 0x7fff, 0x20, 0xffffffffffffe99a, 0xffffffff, 0x582, 0xfc15, 0x10001, 0x1, 0x7, 0x400, 0x3, 0xfffffffffffffffc, 0x5, 0x1, 0x2, 0x8, 0x0, 0x7fffffff, 0x8000, 0x9, 0xffffffffffffff00, 0x9]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000a40)=""/5) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/183, 0xb7) lseek(r3, 0x5c689bef, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000940)={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0xe}, 0x10001}, {0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x3ffc00000}, 0x1, [0x1, 0x800, 0x100000001, 0x1, 0x4151b0e8, 0x12b18e99, 0x2, 0x3]}, 0x5c) ioctl(r2, 0x80000008912, &(0x7f00000007c0)="025cc83d6d345f8f760070") r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r6, r5, 0x0) getdents64(r3, &(0x7f0000000200)=""/54, 0x36) statx(r4, &(0x7f0000000800)='./file0\x00', 0x1000, 0x100, &(0x7f0000000840)) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180)="150afb235340ab643824d3619b786186", 0x10) fanotify_mark(r5, 0x20, 0x10000, r4, &(0x7f00000001c0)='./file0\x00') ioctl(r0, 0x4, &(0x7f00000009c0)="1a62cf65b5a147450feedfd4d86f23a50b113e4a41741b929b13d030ca77b6cdca909e092d5c3f3e770be15e24e4828753351b9c80365e983baedb8295efedfa059df7deb283d890c0908770b6c60d46cd4b0d8103e2704997096b2cd195") 22:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x2000009c) 22:30:15 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0x1}}, 0x1c) [ 736.195578] binder: 19917:19919 ERROR: BC_REGISTER_LOOPER called without request [ 736.215329] Unknown ioctl -993503982 [ 736.217382] binder: BINDER_SET_CONTEXT_MGR already set [ 736.229740] Unknown ioctl -2143271643 22:30:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0xf}}, 0x1c) 22:30:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x13) 22:30:15 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0x1}}, 0x1c) [ 736.254760] binder: 19917:19932 ioctl 40046207 0 returned -16 [ 736.268425] Unknown ioctl -993503982 [ 736.281754] Unknown ioctl -2143271643 [ 736.291934] binder: 19917:19932 ERROR: BC_REGISTER_LOOPER called without request 22:30:16 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) setsockopt(r0, 0x5, 0x77, &(0x7f0000000040)="d0b35be319c508bd33e666da0cdfa7f57c7292513d268dc01d85deb1bf20c0a2", 0x20) 22:30:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x80, 0x40800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4, 0x8, 0x80000000, 0x7, 0x9, 0x40c13b1a}) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83de3345f8f762070") bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$inet6(0xa, 0x805, 0x40000000000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000140)=""/103, &(0x7f00000001c0)=0x67) 22:30:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 736.359762] binder_alloc: 19917: binder_alloc_buf, no vma [ 736.365492] binder: 19917:19919 transaction failed 29189/-3, size 0-0 line 2967 22:30:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1300}}, 0x1c) 22:30:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0xc) [ 736.431304] binder: release 19917:19919 transaction 262 out, still active [ 736.438475] binder: undelivered TRANSACTION_COMPLETE [ 736.486064] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.518176] binder: send failed reply for transaction 262, target dead 22:30:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="302eeb0000000080000000000000000000000000fbffffff000000003e84598f0daf", @ANYRES32=0x0], 0x30}, 0x0) 22:30:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf401, 0x1}}, 0x1c) 22:30:16 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0x1}}, 0x1c) 22:30:16 executing program 6: socket(0x22, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) connect(r0, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x8, 0x3, "f0f0e8eb7ddcb92ff6ae833ca8ef6cefedb7490d646a56e9e108e38835fc1816686ca21c34f1722b6237c119f2e343970b8eb03910f2364d4681e6e4146a7f", 0xc}, 0x80) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6d7, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xb8, "2017ffc667d33185bc72214f41eb7749c1aa960de454be3185ae3df23b7ff25cbb527efac47efc6f616c60068f5dd00bfe3fab8de49675b8e5803085eb02ff28f6374d1e66440d384b168db95d5c5dcc1eabb94a6e16fb4ba9f7f1a72ba0ee524c1e2ff5bbd6e336a6177345836b9f62276958431945a119ea5a8fc263fe14d6bd1230598065a5a001edd31cdd3e6a10e2d6493307ff1b21aac2ce824735d34cdf22987847b631e29f2f1d892906c0958b1456d0378b5c97"}, &(0x7f0000000200)=0xc0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @rand_addr=0x8}}}, 0x84) 22:30:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x2}}, 0x1c) 22:30:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x65}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 737.200592] binder: 19986:19987 ERROR: BC_REGISTER_LOOPER called without request [ 737.234561] binder: 19986:19987 ioctl c0306202 2000efd0 returned -22 22:30:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f00000000c0)="01000000000000001804000007ff01000000a60000d849832f") setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x3, "030148"}, 0x4) 22:30:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x30}, 0x1c) 22:30:16 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0x1}}, 0x1c) [ 737.265094] binder: BINDER_SET_CONTEXT_MGR already set [ 737.276251] binder: 19986:20007 ioctl 40046207 0 returned -16 22:30:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 737.320450] binder: 19986:20007 ERROR: BC_REGISTER_LOOPER called without request 22:30:17 executing program 6: r0 = socket(0x1e, 0x1000000000000002, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0xfe) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) ioctl$void(r1, 0x5451) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xa51, 0x200000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 22:30:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3ff, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x16, &(0x7f0000000000)={0x0, @broadcast}, &(0x7f0000000080)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x3f, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, {0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffff8001}, 0x4f3c5f2e, [0x0, 0xffffffffffffff6b, 0x3, 0x4, 0x7, 0xffff, 0x21, 0x9]}, 0x5c) [ 737.368486] binder_alloc: 19986: binder_alloc_buf, no vma [ 737.374218] binder: 19986:19987 transaction failed 29189/-3, size 0-0 line 2967 22:30:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x20001000000}, 0x1c) 22:30:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 737.442358] binder: 19986:20007 ioctl c0306202 2000efd0 returned -22 22:30:17 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1}}, 0x1c) [ 737.489764] binder: release 19986:19987 transaction 265 out, still active [ 737.496876] binder: undelivered TRANSACTION_COMPLETE [ 737.538116] binder: undelivered TRANSACTION_ERROR: 29189 [ 737.574914] binder: send failed reply for transaction 265, target dead 22:30:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x100000000000000, 0x1}}, 0x1c) 22:30:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f00000000c0)="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", 0xffffffffffffff72, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x2, 0x2ba) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 22:30:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xc0ffffff}, 0x1c) 22:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:17 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) r1 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e24, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x2}}}, 0xfffffffffffffe2e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="dc46ffea4133574b0326150898bdea12", 0x10) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:17 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x1}}, 0x1c) 22:30:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 738.236013] binder: 20067:20071 ERROR: BC_REGISTER_LOOPER called without request [ 738.250705] binder: 20067:20071 ioctl c0306263 2000efd0 returned -22 22:30:17 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0x1}}, 0x1c) 22:30:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xdd, 0x111401) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 22:30:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x54000000}, 0x1c) 22:30:17 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x85, "6e01a251fa7a1dc7b3b1bff476a239d311790406d346c32214d3da4c25686f54d129d47cd3cc928e234f92b61ba854d7ae9f065a69b6e22e1e0af4a3471ce9dcd33314d6d9c6dd2c76595e00f98c02499cb51b59513b9199e8edba5453f05097cdd3c7494ff25e5bf844ddc92aaa6d5c87f238e5355774d7b9ec6a467bf619a8faffaf5501"}, &(0x7f0000000140)=0x8d) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x5, 0x8202, 0x1, 0x74, 0x10e, 0x7, 0xffffffffffffffce, r1}, 0x20) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000240)=0xfffffffffffffff9, 0x4) write$P9_RLCREATE(r0, &(0x7f0000000280)={0x18, 0xf, 0x1, {{0x15, 0x3, 0x1}, 0x8001}}, 0x18) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:17 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x48, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_SRC={0x14, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, @FRA_SRC={0x14, 0x2, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}]}, 0x48}, 0x1}, 0x0) accept(r0, &(0x7f0000000080)=@sco, &(0x7f0000000000)=0x80) [ 738.277891] binder: BINDER_SET_CONTEXT_MGR already set [ 738.298473] binder: 20067:20078 ioctl 40046207 0 returned -16 [ 738.340145] binder: 20067:20078 ERROR: BC_REGISTER_LOOPER called without request 22:30:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x80) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) 22:30:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 738.428757] binder_alloc: 20067: binder_alloc_buf, no vma [ 738.434733] binder: 20067:20071 transaction failed 29189/-3, size 0-0 line 2967 22:30:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x3000}, 0x1c) [ 738.508596] binder: 20067:20078 ioctl c0306263 2000efd0 returned -22 [ 738.553174] binder: release 20067:20071 transaction 268 out, still active [ 738.560283] binder: undelivered TRANSACTION_COMPLETE [ 738.594731] binder: undelivered TRANSACTION_ERROR: 29189 [ 738.604956] binder: send failed reply for transaction 268, target dead 22:30:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x1}}, 0x1c) 22:30:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xffff}, &(0x7f0000000180)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}) 22:30:18 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8], 0x1}}, 0x1c) 22:30:18 executing program 6: r0 = socket(0x1e, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/66, &(0x7f00000000c0)=0x42) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x800, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"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"}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/217, &(0x7f0000000180)=0xd9) socketpair(0x7e2f6a26d1cba7ef, 0x80007, 0x80000001, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0xfffffffffffffffd, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffffc}, 0x1c) setsockopt(r1, 0x20, 0x800, &(0x7f0000000700)="20a0c67af465ac567df13219284fa1663f9bc85894f1a337e2b295844f6711bf718bb0a5e097b231f599af7f72dd986a528f82b5fc981b80416ecd20a2027a556ab0919876aeabc77e59977785a14976f5ceadd8594322239796b5c0fb8676812ca3eed0c6951a2c5111b5425b23dad65f0cc673b72be9c9c3f1bc799b82abb75a518176b1ccea41d31b6e5ff75c3da0479f4935ed97325c615cce07acce54743ade70855c8f59f8e5d7b274efc983c59b0b7396558bef3ba892c108cdcd3dfa855cbcabd8", 0xc5) 22:30:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) 22:30:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x6500}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000080)="025c0600000010011a22052339f40000704fcf59c63c15ee66e7be403b73281d65abda8e1b80d8574221545eb0d296c4a906de9a73d4f963a81443a973f7a951f76d76ae16dc281f6e9a6fc018a9a46c5450fd6f2c8e4d3ae6cb45595168855468b575d7d1b7f3e190494ce19823445323f574c950c922aadcb9e34dbc41fcead8e44c3b22f87582a93b01b875e263f6ae0021277b8f6f047d128bdc49d7167b88c2cb52ed74b0029bfb315d70a3359c94c1ebd72f700c4c2fde9da22cea00000000") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r2) dup3(r0, r0, 0x80080000) [ 739.181623] Unknown ioctl 1140895375 [ 739.190511] binder: 20125:20134 ERROR: BC_REGISTER_LOOPER called without request [ 739.206172] Unknown ioctl 1140895375 [ 739.225970] binder: BINDER_SET_CONTEXT_MGR already set 22:30:18 executing program 6: r0 = socket(0x1b, 0x5, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x5, 0xffffffff, &(0x7f0000000040)="6913207813518d1089f6f22e6caeacfac744c2265d0956507f31e4d545c9c6ac8333dcc07c4ae508319cab7128c794a287310ba20c554c788533c846108dc6", 0x3f) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x200000000100, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x400502) accept4$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14, 0x80800) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000240)=0x8) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000180)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:18 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0x1}}, 0x1c) [ 739.258631] binder: 20125:20141 ioctl 40046207 0 returned -16 [ 739.282732] binder: 20125:20141 ERROR: BC_REGISTER_LOOPER called without request 22:30:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffc0}, 0x1c) 22:30:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x700, 0x1}}, 0x1c) [ 739.304406] binder_alloc: 20125: binder_alloc_buf, no vma [ 739.310118] binder: 20125:20134 transaction failed 29189/-3, size 0-0 line 2967 [ 739.341994] binder: undelivered TRANSACTION_ERROR: 29189 [ 739.347688] binder: send failed reply for transaction 271 to 20125:20134 22:30:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 739.385585] binder: undelivered TRANSACTION_COMPLETE [ 739.390963] binder: undelivered TRANSACTION_ERROR: 29189 22:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key(&(0x7f0000000240)='.dead\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000400)="f998a34c992d0013436968959dcdade3e821e654a4cb358255611c81804c67782f134994177eb1c5d7ec38d711f44db127ed17383ad7da8f4a9d6d76ce4d8acfb6df67e5dd8e55edd4091493408782119bdc64f282e652a4192cc871c9929f41f56bf15d749f3d8193c6495b6264f6c6f5c533a6746c53b3ff3e3d106321fe8b55ce1ca99981e659fc5f25c9b33faf7aac9a4a1659dc3e0606645e79f52adee3bb84d3f51f66f1595d2e39ac3988f7b0abdf26c1ff4fe4953a148eda8b795d0e03a4473c17dd16b2c28d8309781613b9cc66eb3d", 0xd4, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="4e024a65a83f8e1ebb1e7325aa5cedcf5b3cc0c7e7bc7ce8fbb6e74a0b517d65c796a757ebf3250ecc68f2895ba0bd3fa50796e80f04", 0x36, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r4, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:30:19 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1}}, 0x1c) 22:30:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x100000000000000}, 0x1c) 22:30:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x20) mq_getsetattr(r1, &(0x7f0000000240)={0x5, 0xfffffffffffffff9, 0xde, 0x7, 0x7, 0xe000000000000000, 0xf2, 0x6}, &(0x7f0000000300)) getpeername$inet6(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)=""/160) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:19 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x44080) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0xfffffffffffffffb, 0xffff, 0xa1d, 0x200}) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0xffffffffffffffde}, 0x0) 22:30:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 739.601132] binder: 20177:20179 ERROR: BC_REGISTER_LOOPER called without request 22:30:19 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x1}}, 0x1c) 22:30:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x62000000}, 0x1c) [ 739.669263] binder: BINDER_SET_CONTEXT_MGR already set 22:30:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 739.695341] binder: 20177:20198 ioctl 40046207 0 returned -16 22:30:19 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xac, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x101, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x29f, @mcast1={0xff, 0x1, [], 0x1}, 0x1000}, @in6={0xa, 0x4e22, 0x45bd, @mcast1={0xff, 0x1, [], 0x1}}, @in6={0xa, 0x4e21, 0xb49a, @empty, 0x6}, @in6={0xa, 0x4e21, 0xffffffffffffff00, @mcast1={0xff, 0x1, [], 0x1}}, @in6={0xa, 0x4e23, 0x51ee2578, @local={0xfe, 0x80, [], 0xaa}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x8, 0x30}, &(0x7f00000002c0)=0xc) r2 = socket(0x8, 0x3, 0x8001) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040), 0x2) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 739.747774] binder: 20177:20198 ERROR: BC_REGISTER_LOOPER called without request 22:30:19 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0x1}}, 0x1c) 22:30:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f00000000c0), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0) 22:30:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x6200}, 0x1c) [ 739.802960] binder_alloc: 20177: binder_alloc_buf, no vma [ 739.808740] binder: 20177:20179 transaction failed 29189/-3, size 0-0 line 2967 [ 739.876964] binder: release 20177:20179 transaction 274 out, still active [ 739.884187] binder: undelivered TRANSACTION_COMPLETE [ 739.930665] binder: undelivered TRANSACTION_ERROR: 29189 [ 739.959633] binder: send failed reply for transaction 274, target dead 22:30:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xe00, 0x1}}, 0x1c) 22:30:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/187, 0xbb, 0x40000100, &(0x7f0000000340)={0x11, 0x1f, r1, 0x1, 0x10000, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:20 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0x1}}, 0x1c) 22:30:20 executing program 6: r0 = socket(0x1e, 0xffffffffffffffe, 0x100000001) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000040)=""/30, 0x1e, 0x2000, &(0x7f0000000100)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) sendmsg$xdp(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x1, r2, 0x9}, 0x10, &(0x7f0000000200)}, 0x10) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000280)=@generic={0x11, "fcf8b8eabb5363ea4b60728ba72297cbecbd5621755d6dbe8dfef6c9d900d5d110885dded5e596fa0236386ca0581475ec722b64604a1d30072e71af457fa67257b6c718f7f8adc07239daf57e2d1fa9e8bba4f65da43b081bf439058d75f16aab92a5c911f45bcc15f6955168e201553df09e93385fdc99b780337dd86d"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="960ae82e13541033ed7df1ef870fdf9f61b044ffb53e2af701566520457ead111a0e8c4094a8222a13667ef99c3d671c6349e5ecc7a14d033b0326e36a3fef3c3ff9b146d0583c186e3de10b52c523fadde9052e6626e8613fe1365ffa5c2aedd3d35ad28b414f1d12215e4cab57ad9197e8a3ca5cc9c384625a33088ecb1b05589940ebdbce78d613bceacb38e051c79f5f174d07876e28f9c95561b5cc0bda1bf33675", 0xa4}, {&(0x7f0000000200)}, {&(0x7f00000003c0)="b501366e1d9ac0a634a1bdf2d8ffb55a62a53d2b4728f65682f83ceff5dbc74817ea962282fbf8555022418cf3383eec168b307458e998d26d7e6524b21f1986d17caccad58f87991db9de6444b2cede248d97155e9c8fab5b872204e5332e4aea7bce1b19282c6794c66ef3675482481c165f98133c033e85318e5249112094721ac33a6086bd60021b5947d4e62d1d28da5f1bcd386a4fd07df9be6602418e36aa62dd", 0xa4}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x3d0, 0x8004}, 0x40000) fremovexattr(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="75730d37db53ddbacc20e96e5853daead6e0675c41eb249682dc31aec053064978751cd1c26f859cde384d961af269b592b5880e2849182364040195cbe1b2c5408e42f5f52ae446ad8092c7ed"]) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x54}, 0x1c) 22:30:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") unshare(0x20000000) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000100), 0x3f, 0x0) [ 740.398617] binder: 20250:20251 ERROR: BC_REGISTER_LOOPER called without request [ 740.436454] binder: BINDER_SET_CONTEXT_MGR already set 22:30:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) close(r0) getrandom(&(0x7f0000000000)=""/85, 0x545fbe6115646e04, 0x1) 22:30:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x30ae, 0x3, 0x1, 0x647, "537a784249c2f44a7f318ace9c56b15c8d0a715e6cd7b6eefd37ee230fe37e6d"}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1100000000000000}, 0x1c) 22:30:20 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x1}}, 0x1c) [ 740.460251] binder: 20250:20265 ioctl 40046207 0 returned -16 22:30:20 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000200)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 740.515687] binder: 20250:20267 ERROR: BC_REGISTER_LOOPER called without request [ 740.526198] binder_alloc: 20250: binder_alloc_buf, no vma [ 740.531946] binder: 20250:20251 transaction failed 29189/-3, size 0-0 line 2967 22:30:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x11000000}, 0x1c) 22:30:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0xbb, 0x2, 0x6, 0x3ff, 0x6}, &(0x7f0000000180)=0x98) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000240)={0x2, 0xff, 0xffff, 0x7ff, 0x4, 0x6f1d}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000200)=0x8) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 740.708323] binder: undelivered TRANSACTION_ERROR: 29189 [ 740.720336] binder: send failed reply for transaction 277 to 20250:20251 [ 740.752463] binder: undelivered TRANSACTION_COMPLETE [ 740.757771] binder: undelivered TRANSACTION_ERROR: 29189 22:30:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf, 0x1}}, 0x1c) 22:30:21 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x1}}, 0x1c) 22:30:21 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x280000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x4, 0x0, [{0x15, 0x0, 0x5}, {0x1f, 0x0, 0x1}, {0x2e, 0x0, 0x7f}, {0xfffffffffffff800, 0x0, 0x4}]}) close(0xffffffffffffffff) r2 = socket(0x22, 0x5, 0xfffffffffffffffc) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x200000000000000}, 0x1c) 22:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x4000, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) socketpair$inet(0x2, 0xe, 0x3f, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xfffffffffffffffb, 0x8000, 0x2, 0x9, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1822000000000000000000000000000061180000c700000000000000000000000095000000003c0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) 22:30:21 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0x1}}, 0x1c) 22:30:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000080), 0x4) setsockopt$inet_dccp_int(r0, 0x21, 0xf, &(0x7f0000000000)=0x6, 0x4) [ 741.407874] binder: 20325:20327 ERROR: BC_REGISTER_LOOPER called without request [ 741.419584] binder: BINDER_SET_CONTEXT_MGR already set [ 741.428270] binder: 20325:20327 ioctl 40046207 2000efd0 returned -16 [ 741.437441] binder: BINDER_SET_CONTEXT_MGR already set [ 741.443677] binder: 20325:20333 ioctl 40046207 0 returned -16 22:30:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x5400000000000000}, 0x1c) [ 741.490106] binder: 20325:20333 ERROR: BC_REGISTER_LOOPER called without request 22:30:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8001, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/218, 0xda) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdfffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x401) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) [ 741.532537] binder: BINDER_SET_CONTEXT_MGR already set [ 741.538628] binder_alloc: 20325: binder_alloc_buf, no vma [ 741.544421] binder: 20325:20327 transaction failed 29189/-3, size 0-0 line 2967 [ 741.556980] binder: 20325:20333 ioctl 40046207 2000efd0 returned -16 22:30:21 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) accept4(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80, 0x80000) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:21 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1}}, 0x1c) 22:30:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x2800}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 741.613828] binder: undelivered TRANSACTION_ERROR: 29189 [ 741.648511] binder: send failed reply for transaction 280 to 20325:20327 [ 741.705186] binder: undelivered TRANSACTION_COMPLETE [ 741.710665] binder: undelivered TRANSACTION_ERROR: 29189 22:30:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfffffff5, 0x1}}, 0x1c) 22:30:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1000000}, 0x1c) 22:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x6, 0xfffffffffffffd10) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x8921, &(0x7f0000000180)) 22:30:21 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0], 0x1}}, 0x1c) 22:30:21 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000080)=0xaf) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x5400}, 0x1c) [ 742.366626] binder: 20391:20393 ERROR: BC_REGISTER_LOOPER called without request 22:30:22 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0x1}}, 0x1c) 22:30:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400200, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 742.421760] binder: BINDER_SET_CONTEXT_MGR already set [ 742.440683] binder: 20391:20399 ioctl 40046207 0 returned -16 22:30:22 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f0000000040)}, 0x0) 22:30:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', &(0x7f00000005c0)=@ethtool_dump={0x49}}) pread64(r0, &(0x7f0000000000)=""/207, 0xcf, 0x0) [ 742.501301] binder: 20391:20399 ERROR: BC_REGISTER_LOOPER called without request 22:30:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x62}, 0x1c) 22:30:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:22 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000], 0x1}}, 0x1c) [ 742.550402] binder_alloc: 20391: binder_alloc_buf, no vma [ 742.556234] binder: 20391:20393 transaction failed 29189/-3, size 0-0 line 2967 [ 742.645577] binder: release 20391:20393 transaction 283 out, still active [ 742.652682] binder: undelivered TRANSACTION_COMPLETE [ 742.677514] binder: undelivered TRANSACTION_ERROR: 29189 [ 742.703286] binder: send failed reply for transaction 283, target dead 22:30:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3000000000000000, 0x1}}, 0x1c) 22:30:22 executing program 5: r0 = socket$packet(0x11, 0x8000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0xff, 0xff}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getpeername$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) getpeername$packet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14) 22:30:22 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x3, 0x6, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='/dev/autofs\x00') 22:30:22 executing program 6: r0 = socket(0x1e, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, r1) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f0000000040)}, 0x0) 22:30:22 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x1}}, 0x1c) 22:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306204, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x34000}, 0x1c) 22:30:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xc0ffffff00000000}, 0x1c) 22:30:23 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x8dd461665f0c85c4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x5, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 743.379629] binder: 20448:20451 ERROR: BC_REGISTER_LOOPER called without request [ 743.409057] binder: 20448:20451 ioctl c0306204 2000efd0 returned -22 22:30:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/141) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000), 0x4) close(r4) dup3(r2, r3, 0x0) 22:30:23 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0x1}}, 0x1c) 22:30:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x100, 0x9a20) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 743.454074] binder: BINDER_SET_CONTEXT_MGR already set 22:30:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xb000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 743.477805] binder: 20448:20466 ioctl 40046207 0 returned -16 [ 743.513231] binder: 20448:20466 ERROR: BC_REGISTER_LOOPER called without request [ 743.525463] binder_alloc: 20448: binder_alloc_buf, no vma [ 743.531188] binder: 20448:20451 transaction failed 29189/-3, size 0-0 line 2967 22:30:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe000000}, 0x1c) 22:30:23 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0x1}}, 0x1c) [ 743.612754] binder: 20448:20477 ioctl c0306204 2000efd0 returned -22 [ 743.662081] binder: release 20448:20451 transaction 286 out, still active [ 743.669197] binder: undelivered TRANSACTION_COMPLETE [ 743.694406] binder: undelivered TRANSACTION_ERROR: 29189 [ 743.723140] binder: send failed reply for transaction 286, target dead 22:30:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x400000000000000, 0x1}}, 0x1c) 22:30:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x18001) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x101ff, 0x0, &(0x7f0000ffa000/0x3000)=nil}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:23 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x150, 0x101600) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000080)) 22:30:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x65}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x1100}, 0x1c) 22:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306203, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:23 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}}, 0x1c) [ 744.331640] binder: 20507:20510 ERROR: BC_REGISTER_LOOPER called without request [ 744.349862] binder: 20507:20510 ioctl c0306203 2000efd0 returned -22 [ 744.362552] binder: BINDER_SET_CONTEXT_MGR already set [ 744.369814] binder: 20507:20521 ioctl 40046207 0 returned -16 22:30:24 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ee], 0x1}}, 0x1c) 22:30:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000009f00)={&(0x7f0000009c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x80, &(0x7f0000009e80)=[{&(0x7f0000009e00)="f6", 0x1}], 0x1, &(0x7f0000009ec0)}, 0x0) sendmsg$kcm(r0, &(0x7f000000c340)={&(0x7f0000009f80)=@can={0x1d}, 0x80, &(0x7f000000b000)=[{&(0x7f000000a000)="aa", 0x1}], 0x1, &(0x7f000000b040)}, 0x0) sendmsg(r1, &(0x7f000000fd00)={&(0x7f000000ea40)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x80, &(0x7f000000ebc0)=[{&(0x7f000000eac0)='n', 0x1}], 0x1, &(0x7f000000ec00)}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1}) [ 744.399078] binder: 20507:20521 ERROR: BC_REGISTER_LOOPER called without request 22:30:24 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0xf, 0x5, 0xfffffffffffffffe) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x101, 0x200) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x11}, 0x1c) 22:30:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='team0\x00', 0xffffffffffffff9c}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0xd5d, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x400000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000240)={0x3, "aa5afd"}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendto$inet6(r0, &(0x7f0000000180)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472d01222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x12) [ 744.450455] binder: 20507:20521 ioctl c0306203 2000efd0 returned -22 [ 744.450487] binder_alloc: 20507: binder_alloc_buf, no vma [ 744.462754] binder: 20507:20510 transaction failed 29189/-3, size 0-0 line 2967 22:30:24 executing program 2: r0 = gettid() ioprio_get$pid(0x2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) sendmsg$unix(r4, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}, 0x0) r5 = dup2(r2, r2) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000002d40), 0x0, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) 22:30:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:24 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000], 0x1}}, 0x1c) 22:30:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000000)="6dba9c2cafdb76c91cdd1b90c8e087229c5cd556cd1a77a038626f07347567a33e4fdb03b0f2e4524a3d2f9d2effef2ff1c48b0417a21b349dfcc49d1a7cb1db") sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 744.616375] binder: undelivered TRANSACTION_ERROR: 29189 [ 744.629657] binder: send failed reply for transaction 289 to 20507:20510 [ 744.674855] binder: undelivered TRANSACTION_COMPLETE [ 744.680189] binder: undelivered TRANSACTION_ERROR: 29189 22:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xe00000000000000, 0x1}}, 0x1c) 22:30:24 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x1}}, 0x1c) 22:30:24 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x5, 0x4) r1 = socket(0x800000000001f, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x10000000000002e0, &(0x7f00002d4000)}, 0x0) 22:30:24 executing program 2: clock_getres(0x4, &(0x7f0000000080)) r0 = syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000002740)=0x987) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000002780)) recvmmsg(0xffffffffffffff9c, &(0x7f0000002540)=[{{&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000001180)=""/109, 0x6d}], 0x3, &(0x7f0000001240)=""/241, 0xf1, 0x6}, 0x100}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001340)=""/48, 0x30}, {&(0x7f0000001380)=""/216, 0xd8}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001540)=""/68, 0x44}, {&(0x7f00000015c0)=""/115, 0x73}, {&(0x7f0000001640)=""/30, 0x1e}, {&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/8, 0x8}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f00000018c0)=""/85, 0x55}], 0xa, 0x0, 0x0, 0x6}, 0x38c8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a00)=""/127, 0x7f}], 0x1, &(0x7f0000001ac0)=""/230, 0xe6, 0x5}, 0x1a1e}, {{&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/131, 0x83}, {&(0x7f0000001d00)=""/21, 0x15}, {&(0x7f0000001d40)=""/106, 0x6a}], 0x3, &(0x7f0000001e00)=""/191, 0xbf, 0x13}, 0x5c56}, {{&(0x7f0000001ec0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)=""/105, 0x69}, {&(0x7f0000001fc0)=""/90, 0x5a}, {&(0x7f0000002040)=""/87, 0x57}], 0x3, 0x0, 0x0, 0x9}, 0x5}, {{&(0x7f0000002100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0xffffffffffffffc4, &(0x7f0000002240)=[{&(0x7f0000002180)=""/162, 0xa2}], 0x1, &(0x7f0000002280)=""/170, 0xaa, 0x8}, 0x1}, {{&(0x7f0000002340)=@generic, 0x80, &(0x7f0000002400)=[{&(0x7f00000023c0)=""/11, 0xb}], 0x1, &(0x7f0000002440)=""/212, 0xd4, 0xfffffffffffffffb}, 0xff8e}], 0x7, 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:30:24 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x430400, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="891844dfdb782e81d90d4a9d6902214c9d9adc76affe8edd974e1c756256f4f612db01ef5130256475d09509a2de63956f5bc1446d6cc31d37dbf3f260e8655850e853d4c1f66bf03819aa08ac68616a21f9", 0x52, 0x4040000, &(0x7f0000000140)={0xa, 0x4e21, 0x800, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x6500}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe00000000000000}, 0x1c) 22:30:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) [ 745.307248] binder: 20577:20583 ERROR: BC_REGISTER_LOOPER called without request 22:30:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x8000000}, 0x1c) 22:30:25 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) 22:30:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x3, 0xfffffffffffffff7, 0x1, [0x401]}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x20, 0x70bd28, 0x25dfdbfb, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 745.364139] binder: BINDER_SET_CONTEXT_MGR already set 22:30:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:25 executing program 6: r0 = socket(0x1e, 0x0, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x4, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r1, 0x0, 0xffffffffffffffff, 0x0) close(r0) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0xb, &(0x7f0000000140)=0x5, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0xff, 0x54c, 0x5}) [ 745.392969] binder: 20577:20591 ioctl 40046207 0 returned -16 [ 745.432819] binder: 20577:20591 ERROR: BC_REGISTER_LOOPER called without request 22:30:25 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0x1}}, 0x1c) [ 745.527986] binder_alloc: 20577: binder_alloc_buf, no vma [ 745.533819] binder: 20577:20583 transaction failed 29189/-3, size 0-0 line 2967 [ 745.579771] binder: send failed reply for transaction 292 to 20577:20583 [ 745.594187] binder: undelivered TRANSACTION_COMPLETE [ 745.599450] binder: undelivered TRANSACTION_ERROR: 29189 [ 745.623640] binder: undelivered TRANSACTION_ERROR: 29189 22:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306231, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 745.729299] binder: 20627:20629 ERROR: BC_REGISTER_LOOPER called without request [ 745.747906] binder: 20627:20629 ioctl c0306231 2000efd0 returned -22 [ 745.755812] binder: BINDER_SET_CONTEXT_MGR already set [ 745.762168] binder: 20627:20631 ioctl 40046207 0 returned -16 [ 745.771357] binder: 20627:20631 ERROR: BC_REGISTER_LOOPER called without request [ 745.780423] binder: 20627:20631 ioctl c0306231 2000efd0 returned -22 [ 745.780649] binder_alloc: 20627: binder_alloc_buf, no vma [ 745.792749] binder: 20627:20629 transaction failed 29189/-3, size 0-0 line 2967 [ 745.800895] binder: release 20627:20629 transaction 295 out, still active [ 745.807949] binder: undelivered TRANSACTION_COMPLETE [ 745.818362] binder: undelivered TRANSACTION_ERROR: 29189 [ 745.824087] binder: send failed reply for transaction 295, target dead 22:30:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x200000000000000, 0x1}}, 0x1c) 22:30:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8880, 0x0) r2 = getpgid(0x0) r3 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="880bb443e5d7e5e4936a76b887c5225ebefea2c9de7570e66ecb1f93def58ce69119031d2a5305bae339c1a831f352f3f34594105736c0da6a8c1da0f266581595e1cc2fdc2e151a43f9da7e0b9839c1aab327a38f95cd224f76e29a39b8261a90396722f338f8c88113fe4439c316126f758a113b2cc49db5e85f44fd447703d24314c12770ee8bfd33c44a98ac94e41fd69a03acebbecfe0395a2dcd716c2c1017e945a64fe45888910ab740b47c85d0edc0a9a357a47d2044f784a04ba24ef067643c02086d8f84cdf27e1a456b418867", 0xd2}, {&(0x7f0000000240)="feb4280cae95ce33f6376661feb0f8d7e05e2eb0842f8e7560cd9d2b1f10f50ebc0e2dae974cf7d8fbcd9f50", 0x2c}, {&(0x7f0000000300)="9fdad7bed34b7d6a2d065537aea015671487d7b835a1c51e9f85d92285cdb8bbbadcd3fa534cae73912d8b01e23c2f3253b37b809145289ed6ed580c6a1c10d16024d837bee277c761736d0cdef84df750d4645296b85892d4dd2efd7c8b0ce8e3c5d28e85fd141402e6b2dcd45ab78cfd043c70ead4390020a6631f2ffb70", 0x7f}, {&(0x7f0000000380)="7cfb39b453175e04bd9a64b47894faefdfda13c277a441139fc3c62d6df169730406ce385b6abdaf092b5b4e047a2d8d4c9c9b45f6338a805ce86619f25665f7628706ed13d9", 0x46}], 0x4, &(0x7f00000004c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x78, 0x4000000}, 0x800) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40) mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 22:30:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x3000000000000000}, 0x1c) 22:30:25 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000200)="a0f7ebd97b5e19ce23dffe08d6a9d17eb718e8d7d70b5d4907ffa3b5d5e6b05accf83431fd2d124fb71a75a114f8d5407c4f3c5b4102bc01ac8638b2cdc2bf8eb6cdc698b4801831581f8793b6f83e53f086ebb44f08e27a3d2f471c71fd90b3632486c3b7796b1283fed92152d42fe56f216b5eb7ef4219533579a3c3bcfd2520925dd5dea72463fe35cd0bdfe607cbc4e8bd2cfa5525d688296d46cdd9be3f99453019d5ea7667c86c87c6b279a05b498d67a572b3570e9c29b7df91313542b9bd6a53da3d2033d95688eb5ba715b464108a3a33e78bd2d0aa7915ddd5a236c686") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) prctl$intptr(0x8, 0x0) 22:30:25 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee05], 0x1}}, 0x1c) 22:30:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x2800000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc030624c, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 746.284017] binder: 20635:20638 ERROR: BC_REGISTER_LOOPER called without request 22:30:26 executing program 2: r0 = socket$xdp(0x2c, 0xa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/4096) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001040)=0x5) [ 746.333022] binder: 20635:20638 ioctl c030624c 2000efd0 returned -22 [ 746.350688] binder: BINDER_SET_CONTEXT_MGR already set 22:30:26 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0x1}}, 0x1c) 22:30:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f) 22:30:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x400300}, 0x1c) [ 746.413684] binder: 20635:20656 ioctl 40046207 0 returned -16 22:30:26 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) fallocate(r0, 0x8, 0x100000001, 0x40) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x3, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="134f33d4821cf4bdd97090ace836c174f21d721ab5a4b11f19c45dcdcb85018e5dcfe607e523a185e0d0abc9d882b9dce497939cdf64317b5bfb190d7866edcf21b1377a7198f6ee9acfbc3961dbd403039d9456c0ace7002373aaba915105da4031f4459e7bf74464f900639f47032b7fdbbadc09f14f7faa67a9d66a9ce5de63b3f67f62bfc1d63761e436256230ab1cdabbb7a68986ea3529d1f76406f7a53d6e8a4a809a8b2744e8edde239f0f583a981e5287616aa03b2f03e15ec33792fa5d97a9f147b374e06e440f8c799c00c11d86af78", 0xd5}, {&(0x7f0000000300)="ba6877565ae353e2124d42c31077e7ee874d562ed3a1d631489b8fbd1031388ac0731aaa018816c6cdf60dd7fbe04f9d96c0f7358a6e2be79125ca6aa9769714cafe55c0cc0829397e759ea4abcd836771adcf91246580051ac0b5ef6d9a9b1be0d8d056967e288a9b5722c7dbb85161c12ebf1f9fd02fdf59e2a5af119bc36d25d40af1289718ca171d57d30efa8369e4254306089070f92a3d3f67c2517d61fe0f29e2bd90999c290207042822d7ca0dbf44acdaef3f875b452b1f7d451538623281ee4bdb981688b9b904739737bbbb2deee73b4a3e4417", 0xd9}, {&(0x7f0000000140)="c41236db41a0dba8f9771856869b2a0b42986864360dd6", 0x17}, {&(0x7f0000000400)="28335022025c9ca3a8e06d258dc97f34d8738042f6beaa58005180d776757a95c3efb684670ba3bdac4aad32b5c194bd1be0653c4174f8b6bccff4f7b53d89ceb8e83adbbe8de2a099efb3dcd8f54fd8e2f9d230c20360db01ab17c49adecb3aabeb660ebaf7dd35602978ed1da79597ecf7944d71f7d2df514e89907f71f1819551eed69173af4d41929eb78cfe84fc4e594f05f3a8167a322e9080469664b6d95f598dbd348f7188b2aba282a98310d18d91fe56fa", 0xb6}, {&(0x7f00000004c0)="4ce6f30241cfbaf3ba3f497681c196a3e48c54522609d9512440dd0fa90d7da590163b03d332efba5026af9b19264e0fc51f7e38de2fd8a8788d50188549cd5c628d2e20a59a", 0x46}], 0x5, 0x0, 0x0, 0x80}, 0x94) r1 = socket(0x1e, 0x5, 0x6) sendmsg(r1, &(0x7f0000316000)={&(0x7f00000000c0)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x193}, 0x0) 22:30:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x1, '\x00'}], 0x18}}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x3b5400, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x202f}) getgid() write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x80}}, 0x18) [ 746.456698] binder: 20635:20656 ERROR: BC_REGISTER_LOOPER called without request [ 746.478561] binder_alloc: 20635: binder_alloc_buf, no vma [ 746.484325] binder: 20635:20638 transaction failed 29189/-3, size 0-0 line 2967 22:30:26 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1}}, 0x1c) 22:30:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x1f000580}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 746.545399] binder: 20635:20656 ioctl c030624c 2000efd0 returned -22 [ 746.593409] binder: release 20635:20638 transaction 298 out, still active [ 746.600501] binder: undelivered TRANSACTION_COMPLETE [ 746.640819] binder: undelivered TRANSACTION_ERROR: 29189 [ 746.680440] binder: send failed reply for transaction 298, target dead 22:30:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xf000000, 0x1}}, 0x1c) 22:30:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) flistxattr(r0, &(0x7f00000000c0)=""/187, 0xbb) write$binfmt_aout(r0, &(0x7f0000000300)={{0x10b, 0x69b, 0x7, 0x15a, 0xd6, 0x0, 0x231, 0x1}, "8b1a2aac25aa95e5e72642368bdf6604013b36ab49372a23cf4b5ca2515c3a89aeb1c23a4275f3c934a7e0dc3ec36574bba9", [[], [], [], [], [], [], []]}, 0x752) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) 22:30:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) 22:30:26 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000100)={@mcast2={0xff, 0x2, [], 0x1}, r1}, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ip6tnl0\x00', 0x5}) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:26 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) 22:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:26 executing program 2: timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast=0xffffffff}, {0x1}, 0x2, {0x2, 0x4e20}, 'vcan0\x00'}) 22:30:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 747.321425] binder: 20700:20702 ERROR: BC_REGISTER_LOOPER called without request [ 747.360465] binder: 20700:20702 ioctl 10 2000efd0 returned -22 22:30:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x2, &(0x7f0000008540), 0x8) [ 747.385729] binder: BINDER_SET_CONTEXT_MGR already set 22:30:27 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:30:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x400000000000000}, 0x1c) 22:30:27 executing program 5: socketpair(0x2, 0xf, 0x100, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000001c0)={0x1, 0x3, 0x1f, 0x0, 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14, 0x80000) bind$packet(r1, &(0x7f0000000140)={0x11, 0x2, r2, 0x1, 0x6, 0x6, @random="f13b223a5f09"}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000300)=""/131, &(0x7f0000000200)=0x83) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 747.406981] binder: 20700:20723 ioctl 40046207 0 returned -16 [ 747.426671] binder: 20700:20728 ERROR: BC_REGISTER_LOOPER called without request [ 747.475442] binder_alloc: 20700: binder_alloc_buf, no vma [ 747.481184] binder: 20700:20702 transaction failed 29189/-3, size 0-0 line 2967 22:30:27 executing program 6: r0 = socket(0x1e, 0x2, 0x0) socketpair$inet6(0xa, 0x3, 0x4, &(0x7f00000000c0)) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x10003001, 0x8001, 0x1, 0x4000003}) read$FUSE(r1, &(0x7f0000000200), 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r2 = socket(0x10000000000001e, 0x5, 0x2) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 22:30:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000}, 0x1c) 22:30:27 executing program 2: mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioprio_get$pid(0x3, r1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r2 = memfd_create(&(0x7f00000000c0)='-vboxnet0\x00', 0x2) r3 = dup3(r0, r2, 0x80004) getpeername$netlink(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup3(r3, r3, 0x80000) [ 747.560985] binder: 20700:20723 ioctl 10 2000efd0 returned -22 [ 747.593271] binder: release 20700:20702 transaction 301 out, still active [ 747.600590] binder: undelivered TRANSACTION_COMPLETE [ 747.661752] binder: undelivered TRANSACTION_ERROR: 29189 [ 747.682699] binder: send failed reply for transaction 301, target dead 22:30:27 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558], 0x1}}, 0x1c) 22:30:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xa, 0x1}}, 0x1c) 22:30:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8932, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x4b}}) close(r2) close(r1) 22:30:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa4b7) 22:30:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, 0x1c) 22:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:27 executing program 6: socketpair(0x3, 0x800, 0x10ec, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000006c0)={0x1, &(0x7f0000000780)=[{}]}) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0xfffffffffffffefe) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1d, 0x5, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000480)=""/172) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@ll={0x11, 0xd, r4, 0x1, 0x5, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x400, 0x800a, 0x84, 0x1fbc, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={r5, 0x52, "e2b771b305818e878c68d4db4587d649af3fe499e26d082ac85c16083da904e58b99146b088edd384ad6021d251153cfdf913964b7f938c4e6e9279e0b9e04a491eb3be06a788145cc94bba260b95c587cf1"}, &(0x7f00000003c0)=0x5a) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/ppp1]\x00'}, 0x10) ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000540)=""/7) write$FUSE_LSEEK(r7, &(0x7f0000000580)={0x18, 0x0, 0x5, {0x9963}}, 0x18) getrandom(&(0x7f0000000400)=""/119, 0x77, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x37) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000740)=@sack_info={r6, 0x966, 0xd4}, &(0x7f0000000100)=0xffffffffffffff20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, [], 0x21}, 0x5}}, 0x1, 0x40}, 0x90) [ 748.318385] binder: 20769:20772 ERROR: BC_REGISTER_LOOPER called without request 22:30:28 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0x1}}, 0x1c) 22:30:28 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 22:30:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x6200000000000000}, 0x1c) [ 748.376349] can: request_module (can-proto-0) failed. [ 748.392258] binder: BINDER_SET_CONTEXT_MGR already set [ 748.412148] binder: 20769:20791 ioctl 40046207 0 returned -16 [ 748.435707] binder: 20769:20791 ERROR: BC_REGISTER_LOOPER called without request 22:30:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x28000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:28 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0x1}}, 0x1c) 22:30:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x125800, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x3, 0x8001}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x800000000000000}, 0x1c) [ 748.481297] binder_alloc: 20769: binder_alloc_buf, no vma [ 748.485601] can: request_module (can-proto-0) failed. [ 748.486998] binder: 20769:20772 transaction failed 29189/-3, size 0-0 line 2967 [ 748.497253] binder: release 20769:20772 transaction 304 out, still active [ 748.507593] binder: undelivered TRANSACTION_COMPLETE [ 748.543224] binder: undelivered TRANSACTION_ERROR: 29189 [ 748.551290] binder: send failed reply for transaction 304, target dead 22:30:28 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0x1}}, 0x1c) 22:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306248, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 748.716425] binder: 20829:20830 ERROR: BC_REGISTER_LOOPER called without request [ 748.733593] binder: 20829:20830 ioctl c0306248 2000efd0 returned -22 [ 748.748649] binder: BINDER_SET_CONTEXT_MGR already set [ 748.762222] binder: 20829:20832 ioctl 40046207 0 returned -16 [ 748.773829] binder: 20829:20832 ERROR: BC_REGISTER_LOOPER called without request [ 748.782766] binder: 20829:20832 ioctl c0306248 2000efd0 returned -22 [ 748.782799] binder_alloc: 20829: binder_alloc_buf, no vma [ 748.795110] binder: 20829:20830 transaction failed 29189/-3, size 0-0 line 2967 [ 748.804463] binder: release 20829:20830 transaction 307 out, still active [ 748.811546] binder: undelivered TRANSACTION_COMPLETE [ 748.824328] binder: undelivered TRANSACTION_ERROR: 29189 [ 748.831422] binder: send failed reply for transaction 307, target dead 22:30:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x300, 0x1}}, 0x1c) 22:30:28 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x99, 0x4, "29d33c5d4788a8580077a6e95e0bebe57975bd44213c331aa4cb7681928c0d958875f562f7f6999bbbdb62453e8097ba6afef6515a7dec97100847db4b8f33", 0x2e}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e24, @rand_addr=0x2}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) clone(0x40020000, &(0x7f0000000380)="5ee0fb350d1d8095f78a97a005dbe6018d765bc0edf93ceb10ae99bd3269bf2a1e908508d7e1b53413f00bfedbbf873b52f4cc92ea1bf08a4892dca4795566c00bfc55b66c786fcc724bbde56e4bbaabd85b6baef3596b93fe33ab36d8ab268ea3508d7457934e0f39c6505cb3afbb4f31383e2d8775fed5a58921006c5da96d701815951eda85a8718017ee0a6d3a4a6d005b9f024349ab112469d000650ca521db3a76a33158cbad7c2be36463f64d3054f8082bbc1e9e204e96a501a5b677fe4104ae0eccd599800783730d85def8e368efc97ce0e0d756cecc55e4a1fe3f78ef124272c619210711", &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="43b50e4a8afb21e916643dce1c3d7697717b72e8eb713becaf4d112f7f6480ef00f71bb363a83a5c5eda2b70c2fdfb165f2313e289659775cdf0") sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001880)=0x0) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001b40)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000001c0)="2eeb8e15caffffce28471a945deeae81c0d13df908a9abc4162ed560e50f30bec3feb60bc9a67ab1997e9a218df06148e8ad20b3fb88e8bdc55e2cf7", 0x3c}, {&(0x7f0000000200)="d07dd8687a1175c800cb98", 0xb}, {&(0x7f0000000480)="c8df82ec13ef7d4daf34300ff25be884c87535233350e1fbb6d7af3e2987c2404fb0327e55c2229b5619c3", 0x2b}, {&(0x7f00000004c0)="939efb6a2c7cbffbc72eff9dcf9133253e85fed61400b5550aa808956189ffc325d73507528ed0c2", 0x28}, {&(0x7f0000000500)="178faa0920265d8de556cdf783a7b02b78f69b7598cdc57d94e9593b0d27566faa5a7f72d977ba0e65dc15232383cd0b4bc3976dfb1d9e2be9e591ecf8d019499640714e3fc76b1d269c53ac82b1e2e23555", 0x52}, {&(0x7f0000000580)="e2c2bece6a0a4de34ad5b334a22415ff6e2e819cee0b0b7e88f0dce9ed8f0c8be9", 0x21}, {&(0x7f00000005c0)="237c28b2dd83a60c587142d5eeaa383b72eec35922fa416d5dbce97588d099421f86720243247439f3acfc7382c43ab191f0171287961810b50cf467dc890cc8eefa98414f4e5f5ead62bcfbeedbe74dc6977721e1c92266fc17d461fd3de27a143797e3fe42b71b127e4f06d4126a61d2cc82e02b516485e82e6bfb78fea43e531b1cb09aa926d5229712039cd46cc48077384b9c3ae1e62b2317f4b6af41019704888725c23024dc0fdc5a92c2c8", 0xaf}, {&(0x7f0000000680)="85c0a577da2d75ed14abff36ead7b8bebd73a9eabda48a517e58487566de868ef465c671c44e9ee69f7ae1708db8b77d6099636ccd8ac37e1c780b286b6cbee0b7816e8bb167132acc14a088e75a9fbd889d581cad08545cd8ed86273e4d06ea80db02dd4e46a4076ed166e8d0349dd2e7bbb4ec33d7d9ee43d205a19a71961187decb698dbc4f34317991520a78150e3efb34bec3c5049ecbd7f467abb153e3825786efd00e309ca66a65a6b3f11522267c8752a08c201d08e07bdbaf", 0xbd}, {&(0x7f0000000740)="1536c58744472a643cc679d8ee91d7c88dc9638eb0a92acdfffaa434fb4497e7691cfb9e9dad98a423d1cb43128e2f554848ed6d6ecf8bc2e2e1fac733e0370441e7b4bb057a8552c033289f92bb56671d27b13c6473a25c748ae43c335b295d", 0x60}, {&(0x7f00000007c0)="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", 0x1000}], 0xa, &(0x7f0000001a40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x38, 0x1, 0x1, [r2, r2, r1, r0, r1, r1, r0, r2, r2, r0]}, @rights={0x38, 0x1, 0x1, [r1, r1, r0, r2, r0, r2, r0, r0, r2]}, @rights={0x30, 0x1, 0x1, [r2, r2, r2, r2, r0, r2, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}], 0xf8, 0x24000001}, 0x804) 22:30:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x40030000000000}, 0x1c) 22:30:28 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0x1}}, 0x1c) 22:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x600, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:28 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl(r2, 0x0, &(0x7f0000000100)="5568c10b970d7942402210d3a17f4fe1fe23acc75d6db0a32b2437dbfb552ad2988dddff2ac7e3a9a8049ff57cf954a331033991edca7c3d10b34066740c09a1902398b6952f02423481ff5fde3d033fe81d3b1d9acf2d0cefc2240b81806e34885f95b80a3a03091f2dacd52ca41e7518566ab7bd8dfe30ac2e82ae9ffdd85966b37fe5b9a89595") bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x2000000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x4, {0x6, 0x0, 0x4, 0x54, 0xfffffffffffffffb, 0x7f2a1e4b, {0x3, 0x4, 0x840b, 0xfffffffffffffffb, 0x7, 0x2, 0x2, 0x40, 0x3, 0x6dc800db, 0x7f, r4, r5, 0x3ff, 0x50000000000}}}, 0x90) dup2(r3, r3) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000000) [ 749.317468] binder: 20841:20846 ERROR: BC_REGISTER_LOOPER called without request 22:30:29 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865], 0x1}}, 0x1c) [ 749.358417] binder: 20841:20846 unknown command 0 [ 749.376143] binder: 20841:20846 ioctl c0306201 2000efd0 returned -22 [ 749.385939] IPVS: ftp: loaded support on port[0] = 21 [ 749.391237] binder: BINDER_SET_CONTEXT_MGR already set [ 749.391257] binder: 20841:20863 ioctl 40046207 0 returned -16 22:30:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x30000000}, 0x1c) 22:30:29 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x20, 0x5, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x48000, 0x0) syz_open_pts(r2, 0x1) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000, 0x0) [ 749.394231] binder: 20841:20863 ERROR: BC_REGISTER_LOOPER called without request [ 749.427703] binder_alloc: 20841: binder_alloc_buf, no vma [ 749.433710] binder: 20841:20846 transaction failed 29189/-3, size 0-0 line 2967 [ 749.442637] binder: 20841:20863 unknown command 0 22:30:29 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) [ 749.466898] binder: 20841:20863 ioctl c0306201 2000efd0 returned -22 [ 749.496831] binder: release 20841:20846 transaction 310 out, still active [ 749.503967] binder: undelivered TRANSACTION_COMPLETE 22:30:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:29 executing program 2: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000440)="080105f630d5782bb729c8cbb8136b4dbba20f1d39") getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000600)=""/30, &(0x7f0000000640)=0x1e) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") setsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000480)="a89e7694e490d1422e256d90a17c54e6c4c7d0a984f7a466263398a52f61caec1e78d11a3272da65633679384153319a293a4ba0ac8f38cc61885592eb189d595bc8d8f7849cb2f3ba9fe2a86ebc10bd1b8f91c6412c0d2cfbcb9252bd4fc0566209e407e7e971857ed7b6870fb3339874b692c493f808cc7be32c22751c4db91d89957a5946a5ed77bc18bbceee836a102007fd13d2036fb822d74603d2bf9065f533e9ce3532d34db3300a972ade98f9861b96134d9127f8df06", 0xbb) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000540)={0x2, 0x200, 0x9, 0x6, 0x0}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000005c0)=r5, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)={0x870, 0x3b, 0x400, 0x70bd29, 0x25dfdbff, {0x1f}, [@nested={0x804, 0x4b, [@generic="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"]}, @generic="b078f8ebb42b544ae6a4229132", @generic="e9c3c24fe27c308fd69875aed2accc71c27993ec53e85e6aa173c13e641e6504a90f0cc1f759cee0ba610a170ce1767f86ad4a6d05ed23ee54f155025a7eb4dffa790b5fd4bb1b4e18"]}, 0x870}, 0x1}, 0xfffffffffffffffd) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000380)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, {&(0x7f0000000280)=""/215, 0xd7}, &(0x7f0000000040), 0x34}, 0xa0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) 22:30:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6c00, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 749.547976] binder: undelivered TRANSACTION_ERROR: 29189 [ 749.571092] binder: send failed reply for transaction 310, target dead 22:30:29 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x1}}, 0x1c) [ 749.649727] binder: 20889:20891 ERROR: BC_REGISTER_LOOPER called without request [ 749.708473] binder: 20889:20891 unknown command 0 [ 749.746273] binder: 20889:20891 ioctl c0306201 2000efd0 returned -22 [ 749.781766] binder: BINDER_SET_CONTEXT_MGR already set [ 749.797134] binder: 20889:20907 ioctl 40046207 0 returned -16 [ 749.797348] IPVS: ftp: loaded support on port[0] = 21 [ 749.813919] binder: 20889:20907 ERROR: BC_REGISTER_LOOPER called without request [ 749.843504] binder_alloc: 20889: binder_alloc_buf, no vma [ 749.844463] binder: 20889:20911 unknown command 0 [ 749.850446] binder: 20889:20891 transaction failed 29189/-3, size 0-0 line 2967 [ 749.864007] binder: 20889:20911 ioctl c0306201 2000efd0 returned -22 [ 749.875816] binder: release 20889:20891 transaction 313 out, still active [ 749.882997] binder: undelivered TRANSACTION_COMPLETE [ 749.888422] binder: undelivered TRANSACTION_ERROR: 29189 [ 749.894145] binder: send failed reply for transaction 313, target dead 22:30:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 22:30:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) 22:30:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x10000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x100f, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x5, 0x6, 0x0, 0x3, 0x0, 0x4, 0x1026, 0xa, 0x7, 0x1, 0x7ff, 0x2, 0x2, 0x3, 0x35, 0xfffffffffffffc00, 0x7f, 0x3, 0xffffffffffffa036, 0xffffffffffffffff, 0x1ff, 0x3ff, 0x3, 0xffffffffffffff7f, 0x4, 0x1, 0xa5, 0x0, 0x10001, 0x10001, 0x1, 0x40, 0x8, 0x1f, 0x3, 0x7, 0x0, 0x5, 0x6, @perf_config_ext={0x9, 0xfffffffffffff8be}, 0x2658, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x800, 0x3f}, r2, 0x7, 0xffffffffffffff9c, 0x1) 22:30:30 executing program 6: r0 = socket(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x8000, 0x4) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r2 = gettid() getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x78) getsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f0000000200)=""/223, &(0x7f0000000300)=0xdf) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4, &(0x7f0000000100)=""/59) 22:30:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bcsf0\x00', {0x2, 0x4e20, @rand_addr=0x2}}) unshare(0x400) tee(r1, r0, 0x8, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000000)="f17a55bee78693cf012aa16f3a1430b4adfed454f84f303f3c01df6a2f53c652058e6f0a93912784ea2f686494e3a8bbf0f32f7382a0fe1f9248e062f6b745c98fd32a8acde8baaff7baded38274eed5863004cf1b4a5ae866bfbc451cdff30134467b4cfdc075b6d24f015ec809b080eedbb6fd72ae2d9ef6dc45e698fa94c7e216d1c9913e21b8125f766393f4bcb3c675", 0x92) 22:30:30 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0x1}}, 0x1c) 22:30:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x2000000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x650000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe}, 0x1c) 22:30:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xe, 0x1}}, 0x1c) [ 751.333668] binder: 20925:20927 ERROR: BC_REGISTER_LOOPER called without request 22:30:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x100020000}, 0x1c) [ 751.381216] binder: 20925:20927 unknown command 0 [ 751.417201] binder: 20925:20927 ioctl c0306201 2000efd0 returned -22 22:30:31 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0x1}}, 0x1c) 22:30:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:31 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040)=0x510d, 0x4) r1 = socket(0x1e, 0x6, 0x1000) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 751.443614] binder: BINDER_SET_CONTEXT_MGR already set [ 751.455116] binder: 20925:20947 ioctl 40046207 0 returned -16 [ 751.501961] binder: 20925:20956 ERROR: BC_REGISTER_LOOPER called without request 22:30:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x4000000}, 0x1c) 22:30:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x8005001f}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 751.543150] binder_alloc: 20925: binder_alloc_buf, no vma [ 751.548993] binder: 20925:20927 transaction failed 29189/-3, size 0-0 line 2967 22:30:31 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0x1}}, 0x1c) 22:30:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x6, 0x5, 0x80000001, 0x800, 0x8, 0x1ff}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:31 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xe856}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, [0x1, 0x6, 0x8001, 0x80, 0x0, 0x8000, 0x7fff, 0x9, 0x0, 0xd5, 0x4, 0x20, 0x6, 0x67]}, &(0x7f0000000140)=0x100) r2 = socket(0x1e, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) [ 751.609558] binder: 20925:20947 unknown command 0 [ 751.620107] binder: 20925:20947 ioctl c0306201 2000efd0 returned -22 22:30:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0xe00}, 0x1c) [ 751.663208] binder: release 20925:20927 transaction 316 out, still active [ 751.670323] binder: undelivered TRANSACTION_COMPLETE [ 751.709681] binder: undelivered TRANSACTION_ERROR: 29189 [ 751.730229] binder: send failed reply for transaction 316, target dead 22:30:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200800, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="cc90b0c6c9890b46fc1a2fa865edd6c2d39fc39e2f6856c4c1fe9c9cfd83a145265e49e7d3f5a519bb8d685473c13623a68b9e48652fc93fa536c022a0b6ca88cf54f6b0b5bbfd9930dd201f1af2e6a4953d938058bb7766206bbc262d51455cc757fb") read(r2, &(0x7f00000002c0)=""/193, 0xc1) 22:30:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet(0x2, 0x80004, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xf8d}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x700, 0x5, 0x8, 0x6, 0xa78, 0x1, 0x1f70, 0x1, r2}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x6c7}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x80, 0x9, 0x0, 0xfff, r2}, &(0x7f0000000180)=0x10) 22:30:32 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x1}}, 0x1c) 22:30:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0xffffff7f00000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0xc) 22:30:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:32 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000040)={0xfff0000000000000, 0xffffffffffff7fff, 0x0, 0x4, 0x614, 0x10001, 0x1}) 22:30:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x57b3a563, 0x1}}, 0x1c) [ 752.423847] binder: 21000:21002 ERROR: BC_REGISTER_LOOPER called without request [ 752.447923] binder: 21000:21002 unknown command 0 22:30:32 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0], 0x1}}, 0x1c) 22:30:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x2000009c) [ 752.468766] binder: 21000:21002 ioctl c0306201 2000efd0 returned -22 22:30:32 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x3) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/151, &(0x7f0000000100)=0x97) 22:30:32 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/182, 0xb6, 0x2000, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x1000, 0x7, 0x2000}, 0x4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)) socketpair$inet(0x2, 0xa, 0xaf8e, &(0x7f0000000200)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 752.496710] binder: BINDER_SET_CONTEXT_MGR already set [ 752.507133] binder: 21000:21024 ioctl 40046207 0 returned -16 22:30:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 752.583334] binder: 21000:21040 ERROR: BC_REGISTER_LOOPER called without request [ 752.590730] binder_alloc: 21000: binder_alloc_buf, no vma [ 752.596674] binder: 21000:21002 transaction failed 29189/-3, size 0-0 line 2967 [ 752.619682] binder: 21000:21024 unknown command 0 [ 752.627147] binder: 21000:21024 ioctl c0306201 2000efd0 returned -22 22:30:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x13) 22:30:32 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0x1}}, 0x1c) 22:30:32 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@llc={0x1a, 0x307, 0x1f, 0x6, 0x1c, 0x1, @link_local={0x1, 0x80, 0xc2}}, 0x1bb) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x676d) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x121040) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 752.636569] binder: release 21000:21002 transaction 319 out, still active [ 752.643641] binder: undelivered TRANSACTION_COMPLETE [ 752.670644] rpcbind: RPC call returned error 22 22:30:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x48000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0xe26}}, 0x6, 0x100000000}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x7fffffff, 0xfffffffffffffffd, 0x8001, 0x10000, 0x100, 0xe5, 0x7, 0x77f7, r2}, &(0x7f0000000200)=0x20) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) [ 752.708430] binder: undelivered TRANSACTION_ERROR: 29189 [ 752.736907] binder: send failed reply for transaction 319, target dead 22:30:32 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x81, &(0x7f0000000000)="8ae0c21211d0b02de60689b9049c2998a6a2946bdfd5f4e64350") setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000140)=0x100, 0x17f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22:30:32 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0x1}}, 0x1c) [ 752.821894] binder: 21064:21068 ERROR: BC_REGISTER_LOOPER called without request 22:30:32 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x401, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:32 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) getcwd(&(0x7f0000000200)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x1c, r2, 0x1, 0x3ff0cfc7, 0x6}, 0x14) [ 752.863875] binder: 21064:21068 unknown command 0 [ 752.880068] binder: 21064:21068 ioctl c0306201 2000efd0 returned -22 [ 752.932130] binder: BINDER_SET_CONTEXT_MGR already set [ 752.943065] binder: 21064:21086 ioctl 40046207 0 returned -16 [ 752.970407] binder: 21064:21086 ERROR: BC_REGISTER_LOOPER called without request [ 753.001586] binder_alloc: 21064: binder_alloc_buf, no vma [ 753.007303] binder: 21064:21068 transaction failed 29189/-3, size 0-0 line 2967 [ 753.016518] binder: 21064:21086 unknown command 0 [ 753.022010] binder: 21064:21086 ioctl c0306201 2000efd0 returned -22 [ 753.029630] binder: undelivered TRANSACTION_ERROR: 29189 [ 753.035240] binder: send failed reply for transaction 322 to 21064:21068 [ 753.047561] binder: undelivered TRANSACTION_COMPLETE [ 753.052742] binder: undelivered TRANSACTION_ERROR: 29189 22:30:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xb80b000000000000, 0x1}}, 0x1c) 22:30:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) 22:30:33 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0x1}}, 0x1c) 22:30:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20180, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="e6d3b0ed7f267b8626933b3390f7ef70bf5f17bce9370590793804c5a1ff76723bc78ab02e8dfc09ee1b9d662c23c069fe62d850611a528a4385a2cf199793f9c0414529004070fcfa84938b981a53373109dbaa2b7a68e9389fc387f8844889e16e57edd14562612f309fe6bdb13d1eae8f03b8d37b0d222ac7020c15ae5e36058801097502b9231d63721151c53caacc95249d57e066b878") ioctl$int_in(r0, 0x5473, &(0x7f0000000180)=0xe15a) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0xfffffffffffffffe, 0x3, {{0xd8, 0x5, 0x1, 0x5, 0x8, 0x8001, 0xfffffffffffffff9, 0x8bb}}}, 0x60) 22:30:33 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x5000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:33 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0x1}}, 0x1c) 22:30:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x40000, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x1fc650ca0faebbcf, &(0x7f00000000c0)=""/139, &(0x7f0000000000)=0x8b) 22:30:33 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2080, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0x800}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 753.402539] binder: 21105:21107 ERROR: BC_REGISTER_LOOPER called without request [ 753.425708] binder: 21105:21107 unknown command 0 [ 753.445890] binder: 21105:21107 ioctl c0306201 2000efd0 returned -22 22:30:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x1013b) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 753.517168] binder: BINDER_SET_CONTEXT_MGR already set [ 753.528309] binder: 21105:21122 ERROR: BC_REGISTER_LOOPER called without request [ 753.546147] binder: 21105:21117 ioctl 40046207 0 returned -16 [ 753.563263] binder_alloc: 21105: binder_alloc_buf, no vma [ 753.569021] binder: 21105:21107 transaction failed 29189/-3, size 0-0 line 2967 [ 753.588821] binder: 21105:21122 unknown command 0 [ 753.593967] binder: 21105:21122 ioctl c0306201 2000efd0 returned -22 [ 753.612864] binder: release 21105:21107 transaction 325 out, still active [ 753.620126] binder: undelivered TRANSACTION_COMPLETE [ 753.642502] binder: undelivered TRANSACTION_ERROR: 29189 [ 753.658687] binder: send failed reply for transaction 325, target dead 22:30:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'veth1\x00', 'syz_tun\x00', 'erspan0\x00', "69705f76746930000000000000f1ff00", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x110, 0x198, 0x1e8, [@rateest={'rateest\x00', 0x48, {{'team_slave_0\x00', 'eql\x00', 0x22, 0x1}}}, @m802_3={'802_3\x00', 0x8}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "60d6564e294f9250bc940fe9f87d066d6038c54a76660fd00da80c284383"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x2f0) 22:30:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:33 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0x1}}, 0x1c) 22:30:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0xb000000}}]}, 0x13c}, 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'syzkaller1\x00'}}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xe8e5, 0xa00) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) bind$xdp(r2, &(0x7f0000000400)={0x2c, 0x7, r3, 0x2a, r2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0x0, 0x4, {{0x3f, 0x5, 0x0, r4}}}, 0x28) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000001c0)={{0x0, 0x101}, 'port1\x00', 0x1, 0x100000, 0x4, 0x7, 0x0, 0x3, 0x5c3aa7bb, 0x0, 0x1, 0x7}) 22:30:33 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x800000000000000, 0x1}}, 0x1c) 22:30:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x3, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:33 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0x1}}, 0x1c) 22:30:33 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000200)=""/108, &(0x7f0000000280)=0x6c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$pptp(r2, &(0x7f00000002c0)={0x18, 0x2, {0x2}}, 0x1e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r3, r4) 22:30:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='nodevbdev/*eth0\x00'}, 0x10) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100)) close(r0) 22:30:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3f, 0x6, 0x2000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 754.358081] binder: 21170:21171 ERROR: BC_REGISTER_LOOPER called without request [ 754.384397] binder: 21170:21171 unknown command 0 [ 754.393243] binder: 21170:21171 ioctl c0306201 2000efd0 returned -22 22:30:34 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) name_to_handle_at(r0, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x8}, &(0x7f00000000c0), 0x1000) 22:30:34 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x1}}, 0x1c) 22:30:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb65, 0x40000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x4, 0xfc, &(0x7f00000000c0)="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"}) 22:30:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) splice(r0, &(0x7f0000000000), r0, &(0x7f00000001c0), 0x101, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 754.408692] binder: BINDER_SET_CONTEXT_MGR already set [ 754.414704] binder: 21170:21192 ioctl 40046207 0 returned -16 [ 754.451600] binder: 21170:21192 ERROR: BC_REGISTER_LOOPER called without request 22:30:34 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x110}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:34 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x1}}, 0x1c) 22:30:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="25338581f575808fc63f825c37ba784ad99b8b3412e9a9c953adaaca0c11f4405433bf83ec7a0603e05347728192a4279b68e454e42a06a8deb05d10501a86c88701a8e795e0fbec8035a517d0d4d8870d3aeaa3610ec720d91e4fd9fe023414878052aefb16881047ec6ccf05dc1cf7bfc67da54d8039fc4630fd9f058c5417dc0cbc422fffd232e9c96b360a36e6397ca2a5f29842a9245fd4d259d9daa2d3bedd8d816c68d3944b0d2c3871d119d75ca4956a6358") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x400200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x408000, 0x0) signalfd(r1, &(0x7f0000000540)={0x100}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="72d9428a9efb1067150098fc28ae5f503264a203278932ceda674fe79917c7f3cb070000000022180eea858bac50054938b968ef6f03966702cf067bd4", @ANYRES16=r2, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) r3 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x0, 0x3}, @free_buffer={0x40086303}, @dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000100)}) [ 754.518833] binder_alloc: 21170: binder_alloc_buf, no vma [ 754.524563] binder: 21170:21171 transaction failed 29189/-3, size 0-0 line 2967 [ 754.537905] binder: 21170:21192 unknown command 0 [ 754.543152] binder: 21170:21192 ioctl c0306201 2000efd0 returned -22 [ 754.597059] binder: release 21170:21171 transaction 328 out, still active [ 754.604130] binder: undelivered TRANSACTION_COMPLETE [ 754.647396] binder: 21218:21219 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 754.652411] binder: undelivered TRANSACTION_ERROR: 29189 [ 754.682134] binder: send failed reply for transaction 328, target dead [ 754.697773] binder: 21218:21219 BC_FREE_BUFFER u0000000000000000 no match [ 754.705131] binder: 21218:21219 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 754.741386] binder: 21218:21224 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 754.757386] binder: 21218:21224 BC_FREE_BUFFER u0000000000000000 no match [ 754.764431] binder: 21218:21224 BC_DEAD_BINDER_DONE 0000000000000000 not found 22:30:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6800000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x80fe, 0x1}}, 0x1c) 22:30:34 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000], 0x1}}, 0x1c) 22:30:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) socket$inet6(0xa, 0x2, 0xffff) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socket$packet(0x11, 0x3, 0x300) 22:30:34 executing program 6: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x2) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x11b) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x7f) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x3, 0x2, 0xfffffffffffffeff}) 22:30:34 executing program 2: socket$inet6(0xa, 0xfffffffffffffffc, 0x3ff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x400, 0x200000) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x6, 0x80000000, 'syz0\x00', 0x2}, 0x0, 0x40, 0x9, r2, 0x6, 0x3f, 'syz0\x00', &(0x7f00000000c0)=['queue1\x00', 'queue1\x00', '\x00', '/dev/snd/timer\x00', '(vboxnet0!:selinuxprockeyring\x00', '/dev/snd/seq\x00'], 0x49, [], [0x325, 0xb4a, 0x2, 0x401]}) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) r4 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) read(r3, &(0x7f0000000140)=""/91, 0x5b) dup2(r4, r3) 22:30:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0x100000000008, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x27, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 755.316006] binder: 21232:21234 ERROR: BC_REGISTER_LOOPER called without request [ 755.337302] ALSA: seq fatal error: cannot create timer (-22) [ 755.354152] binder: 21232:21234 unknown command 0 [ 755.362601] binder: 21232:21234 ioctl c0306201 2000efd0 returned -22 22:30:35 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0x1}}, 0x1c) 22:30:35 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10, 0x800) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 755.389424] binder: BINDER_SET_CONTEXT_MGR already set [ 755.404419] binder: 21232:21253 ioctl 40046207 0 returned -16 22:30:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = memfd_create(&(0x7f0000000000)='bdeveth1eth0\x00', 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/73) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x206002) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 22:30:35 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x4) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 755.443447] binder: 21232:21253 ERROR: BC_REGISTER_LOOPER called without request [ 755.483093] binder_alloc: 21232: binder_alloc_buf, no vma 22:30:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:35 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0x1}}, 0x1c) [ 755.488845] binder: 21232:21234 transaction failed 29189/-3, size 0-0 line 2967 22:30:35 executing program 4: r0 = socket$packet(0x11, 0x40000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) r1 = dup(r0) accept4$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x1000, 0x8) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf250700000008000600010100002c000100080002002f000000080009006800000008000b0073697000080001000a000000080004004e2400004800020008000500fcffffff0800070007000000080007000600000014000100fe8000000000000000000000000000aa08000400080000000800030000000000080002004e220028a1f3fe5f4df949ebf1016a8f0014000200080009000000000008000700ffffffff3c0002000800070000000000080009000200000008000b000a0000000800090040000000080007007f000000080008000600000008000900f3010000336417f3b14cd24fc3b61cf5f94434"], 0xe0}, 0x1, 0x0, 0x0, 0x4010}, 0x80) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000300)={[], 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x2, 0x1001, 0xf003, [], 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000880)={@mcast2={0xff, 0x2, [], 0x1}, @empty, @mcast2={0xff, 0x2, [], 0x1}, 0x9, 0x7, 0xa03, 0x100, 0x3, 0x10280}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ifb0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, 0x6a, r4}) 22:30:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) [ 755.572107] binder: 21232:21253 unknown command 0 [ 755.580379] binder: 21232:21253 ioctl c0306201 2000efd0 returned -22 [ 755.613684] binder: release 21232:21234 transaction 331 out, still active [ 755.620799] binder: undelivered TRANSACTION_COMPLETE 22:30:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 755.674688] binder: undelivered TRANSACTION_ERROR: 29189 [ 755.688238] binder: send failed reply for transaction 331, target dead [ 755.732614] binder: 21290:21291 ERROR: BC_REGISTER_LOOPER called without request [ 755.744661] binder: 21290:21291 unknown command 0 [ 755.750682] binder: 21290:21291 ioctl c0306201 2000efd0 returned -22 [ 755.758259] binder: BINDER_SET_CONTEXT_MGR already set [ 755.763930] binder: 21290:21293 ioctl 40046207 0 returned -16 [ 755.773507] binder: 21290:21293 ERROR: BC_REGISTER_LOOPER called without request [ 755.782332] binder: 21290:21293 unknown command 0 [ 755.782346] binder_alloc: 21290: binder_alloc_buf, no vma [ 755.787348] binder: 21290:21293 ioctl c0306201 2000efd0 returned -22 [ 755.792869] binder: 21290:21291 transaction failed 29189/-3, size 0-0 line 2967 [ 755.808193] binder: release 21290:21291 transaction 334 out, still active [ 755.815247] binder: undelivered TRANSACTION_COMPLETE [ 755.820999] binder: undelivered TRANSACTION_ERROR: 29189 [ 755.826687] binder: send failed reply for transaction 334, target dead [ 756.243995] ALSA: seq fatal error: cannot create timer (-22) 22:30:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x30, 0x1}}, 0x1c) 22:30:35 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xacf1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0xf7ae, 0x6a6}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xbe) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000340)={r3, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1f}}, 0x10) 22:30:35 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0x1}}, 0x1c) 22:30:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000000c0)={0x9, 0x6, 0x2966}, 0xc) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) 22:30:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = getpgrp(0x0) wait4(r1, &(0x7f0000000140), 0x0, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20, 0x0, 0x1, {0x0, 0x3}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fffffff, 0x400000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000080)) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000480)) 22:30:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7400000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:36 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0x1}}, 0x1c) 22:30:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x92040, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) setitimer(0x0, &(0x7f00000000c0)={{0x0, 0x7530}}, &(0x7f0000000100)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000140)="7ac5c3c87bc3c0a14275512c014004a51f89dd6bccf19e1effb398a011c6d1ccc2d2c8ab3b61070299ae42feaf5c43e9f5665580549b069bacdbe56f9914db5640e7d3b4f240082af988f14830019ceff2b3d708afa3ad6598a38c57084d3cafdf8a8dd05404814a8a30e0df808fb1059e5ed2d6c6cb57d3b9a2d31873e7ac5903cfae59f85ef8d86daaceb56da9b3065b204b225e8070cd0c66aed2f0755ac14553368591f22677d6ceba6dde07c35a07fed111543f3eb40d687a08c16d32631e", 0xc1, 0x80, &(0x7f0000000240)={0xa, 0x4e21, 0x10001, @empty, 0x450000000}, 0x1c) accept(r0, 0x0, &(0x7f00000003c0)) accept(r0, &(0x7f0000000300)=@alg, &(0x7f0000000380)=0x80) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x10000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:36 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) socketpair(0xf, 0x8080f, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001940)={@multicast2, @multicast2, 0x0}, &(0x7f0000001980)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000019c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000001a00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000001c80)=0xe8) accept4$packet(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001dc0)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003580)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000003680)=0xe8) accept4$packet(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003700)=0x14, 0x800) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000003740)={@dev, 0x0}, &(0x7f0000003780)=0x14) r15 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r15, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r16, &(0x7f0000000500)=ANY=[@ANYBLOB="d3d3f670d1f20737e3abe51bd18f38a15a4fb91087a5c37f4cd9fe9347a9e31422be6d6bc567186a241f7f61b96b06ad0691039a2c6ed9546fbe6621403cfe9777e40fb3504ca26555622e75eddee80bdb1622a46e0015d101eecab88bc8df57d9252b9da4e13deabaadc27378cd8217ca347695df0036ead97ee70a1ca629403c1c08bcb3b0817daef07ba915806fbc405fe9b3e1dbecb8116324e0f5b7f7dbb6bbbcd1f69dbc0b6cb56610bf"], 0x1) ppoll(&(0x7f0000000280)=[{r16}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000380), 0x8) ioctl$int_in(r16, 0x80000040045010, &(0x7f00000004c0)) getpeername$packet(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003800)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003840)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000003940)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003980)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000003a80)=0xe8) accept4$packet(r0, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003bc0)=0x14, 0x800) getsockname(r0, &(0x7f0000003cc0)=@hci={0x0, 0x0}, &(0x7f0000003d40)=0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004500)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000044c0)={&(0x7f0000003d80)={0x728, r2, 0x100, 0x70bd2c, 0x25dfdbff, {0x2}, [{{0x8, 0x1, r3}, {0xf0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r6}, {0x214, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xc8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x101, 0x252f8e5e, 0x20, 0x2}, {0x0, 0x0, 0x67f4}, {0xb0f, 0x3f, 0x6, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xc31000000}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x188, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xa19}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x14f}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1e0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r17}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4c, 0x4, [{0x0, 0x4, 0x3, 0x4940}, {0x200, 0x8, 0x1ff, 0x8}, {0xfffffffffffffffd, 0x3, 0x8000, 0x9}, {0xfff, 0x0, 0x8fe, 0x1ff}, {0x8, 0x6, 0x0, 0x2}, {0x3, 0x10000, 0x1, 0x3}, {0x5, 0x2, 0x4, 0x8001}, {0xa1b5, 0x8, 0xfffffffffffffffe, 0x7}, {0x9, 0x67, 0x16f5, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r19}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8f}}}]}}, {{0x8, 0x1, r20}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x728}, 0x1, 0x0, 0x0, 0x20008050}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 756.426926] binder: 21313:21314 ERROR: BC_REGISTER_LOOPER called without request 22:30:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xfffffed9, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf251100000008000400010000000800040009000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000040003}, 0x20004804) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000140)=""/101, &(0x7f0000000000)=0x65) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='loginuid\x00') sendto$inet6(r3, &(0x7f0000000300)="04030000070000000000000006f65b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e384472da7222a2bb42f2dbd94c3050035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a92d853a74670afcb2beba378213d02c678c80792d371d895e944561e73778918abe342e32282492b54b51bcdded336bfb84d9b12833d8a978b0fbcaf90367f4baee7779eb3d5c75f45c0615ecedc22e3a62050f307ddc97ad7a3dd", 0xfffffffffffffc3b, 0x0, &(0x7f00000001c0)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}, 0x100}, 0x1c) 22:30:36 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0x1}}, 0x1c) [ 756.515298] binder: 21313:21314 unknown command 0 [ 756.535193] binder: 21313:21314 ioctl c0306201 2000efd0 returned -22 22:30:36 executing program 4: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 756.560675] binder: BINDER_SET_CONTEXT_MGR already set [ 756.577639] binder: 21313:21336 ioctl 40046207 0 returned -16 22:30:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xf46, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x7b63, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xbb6}}, [0x6ef, 0x6, 0x4, 0x1, 0x2, 0x1c91d216, 0x6, 0x4, 0xffff, 0x10001, 0x9, 0x40, 0x40, 0x2, 0x1ff]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0xffff, 0x10, 0x7, 0xfffffffffffffffc}, &(0x7f0000000240)=0x18) [ 756.619308] binder: 21313:21336 ERROR: BC_REGISTER_LOOPER called without request [ 756.655704] binder_alloc: 21313: binder_alloc_buf, no vma [ 756.661405] binder: 21313:21314 transaction failed 29189/-3, size 0-0 line 2967 [ 756.712553] binder: 21313:21336 unknown command 0 [ 756.721474] binder: 21313:21336 ioctl c0306201 2000efd0 returned -22 [ 756.729720] binder: release 21313:21314 transaction 337 out, still active [ 756.736866] binder: undelivered TRANSACTION_COMPLETE [ 756.754122] binder: undelivered TRANSACTION_ERROR: 29189 [ 756.767203] binder: send failed reply for transaction 337, target dead 22:30:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x8dffffff00000000, 0x1}}, 0x1c) 22:30:36 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) 22:30:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:36 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000480)=""/47, 0x2f}], 0x6, &(0x7f0000000540), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x8) 22:30:36 executing program 6: r0 = socket(0x1e, 0x0, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:37 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x1}}, 0x1c) 22:30:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6082, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$packet(0x11, 0xffffffffffffffff, 0x300) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7f, 0x7f, &(0x7f0000000100)="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", 0x3, 0x80000000, 0x227, 0x6, 0x88, 0x4, 0x4, "576d9ff9adda98cf1f79f7f2f8907f572a5dfad7dcd03c1b1742a3377864c757e1b23a4932e5853df9be68276459832bbe3327c9910415424c2cc175ff3e295fc62559b4fd05a0ab36ab50ce4c79d691281cb297be"}) 22:30:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6800, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x1f00058000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3f, 0x0) r1 = semget$private(0x0, 0x3, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, r2}}) 22:30:37 executing program 4: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x501000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @rand_addr}, &(0x7f0000000400)=0xc) recvfrom$packet(r1, &(0x7f0000000240)=""/16, 0x10, 0x10000, &(0x7f0000000440)={0x11, 0x17, r2, 0x1, 0xffffffffffff8001, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r0, 0x80, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={r3, r4+30000000}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r5, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:37 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) io_getevents(r2, 0x0, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) [ 757.430753] binder: 21381:21383 ERROR: BC_REGISTER_LOOPER called without request 22:30:37 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0x1}}, 0x1c) [ 757.484412] binder: 21381:21383 unknown command 0 22:30:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) [ 757.517711] binder: 21381:21383 ioctl c0306201 2000efd0 returned -22 22:30:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800c0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x201, 0x7, 0x7}, 0x10) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="69b890bd5969a7cbecdd7a3f413e6623d88c658a5fca5518dc04f1e302748a1890277da825a1c1a290480b2ec5f55e00bfb08a0fbffab80055addde37441693a9ccf57b64d3646372b5fac2148e1013a17e716ff97ab97cd5460866322cc4192a1d49dbb19673e3603ab1a2db4c0d20390fd8777015864fb6ff4b3aced740ee5d91a64820dea444bb2e573e063b306d7c850b6a2fc2ee4e6124aebfd126e62f19299b7b45cc1272fe4b535", 0xab, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, &(0x7f00000002c0)=""/17, 0x11) [ 757.570872] binder: BINDER_SET_CONTEXT_MGR already set [ 757.611812] binder: 21381:21407 ioctl 40046207 0 returned -16 [ 757.653167] binder: 21381:21407 ERROR: BC_REGISTER_LOOPER called without request [ 757.732140] binder_alloc: 21381: binder_alloc_buf, no vma [ 757.737844] binder: 21381:21383 transaction failed 29189/-3, size 0-0 line 2967 [ 757.746570] binder: 21381:21407 unknown command 0 [ 757.775992] binder: 21381:21407 ioctl c0306201 2000efd0 returned -22 [ 757.789376] binder: release 21381:21383 transaction 340 out, still active [ 757.796415] binder: undelivered TRANSACTION_COMPLETE [ 757.811259] binder: undelivered TRANSACTION_ERROR: 29189 [ 757.822423] binder: send failed reply for transaction 340, target dead 22:30:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x9, 0x1}}, 0x1c) 22:30:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x8, 0x2, 0xa000}, 0x4) 22:30:37 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r1, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket(0x1e, 0x5, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2a2000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8d, 0x7}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r2, 0xa4, "d7d33e0ba41893d97cd3e9bf0a6b5cc2fdc7e71baa48da01203096e95c8d68b0d8b60c31b580cee54442b650eec794f865bbf168a880c0d9a6bfcaee56eb67ddb73528647e53e9ec2747432c98b1da8287b159bb02cecb917cc7da27eb2befa1c9fe398ffda360c24f756fd560c0ff95fe0c6efc0368c9b1890b4101e28935a0ed0c6723050fc5048a818128bde9a7886d32f5255afd55734877cb00f7e4eb08ba72896d"}, &(0x7f0000000200)=0xac) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:37 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4], 0x1}}, 0x1c) 22:30:37 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0x200, 0x92c, 0x1, 'queue1\x00', 0x80000000}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x10001) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) 22:30:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x2, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 758.333385] IPVS: ftp: loaded support on port[0] = 21 [ 758.350126] binder: 21435:21437 ERROR: BC_REGISTER_LOOPER called without request 22:30:38 executing program 4: r0 = socket$packet(0x11, 0x7, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 758.416581] binder: 21435:21437 unknown command 0 22:30:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) socketpair(0x7, 0x3, 0xef5c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100)=0x1000000000000, 0x4) 22:30:38 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x1}}, 0x1c) 22:30:38 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x329, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2, 0x3, 0x8, [0x200, 0x3ff, 0x3, 0x4f, 0xffffffffffffffc6, 0x9, 0x1, 0x4]}, &(0x7f0000000140)=0x18) [ 758.437242] binder: 21435:21437 ioctl c0306201 2000efd0 returned -22 [ 758.461139] binder: BINDER_SET_CONTEXT_MGR already set 22:30:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xe00, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xcda) [ 758.503782] binder: 21435:21453 ioctl 40046207 0 returned -16 22:30:38 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0x1}}, 0x1c) [ 758.558476] binder: 21435:21453 ERROR: BC_REGISTER_LOOPER called without request [ 758.634182] bridge0: renamed from tunl0 [ 758.637008] binder_alloc: 21435: binder_alloc_buf, no vma [ 758.638736] binder: 21435:21453 unknown command 0 [ 758.644252] binder: 21435:21437 transaction failed 29189/-3, size 0-0 line 2967 [ 758.653214] binder: 21435:21453 ioctl c0306201 2000efd0 returned -22 22:30:38 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fstatfs(r2, &(0x7f0000000200)=""/253) ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) 22:30:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') sendto$inet6(r1, &(0x7f00000000c0)="de44591fcce4925715eec40c45c2daee2a8c707d62c29ef7d0e32f68f994be3e198666e44eca3d4c874f1b6b77e48b6b1b4f52b11568ca28d5ac01c377c83d2f46dd4402", 0x44, 0x44080, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0xb6) sendto$inet6(r0, &(0x7f0000000000)="18dd06862db87b3c1d343dfa223930317b279a84232a", 0x16, 0x1, 0x0, 0x0) [ 758.683675] IPVS: ftp: loaded support on port[0] = 21 [ 758.782760] binder: release 21435:21437 transaction 343 out, still active [ 758.789950] binder: undelivered TRANSACTION_COMPLETE [ 758.831605] binder: undelivered TRANSACTION_ERROR: 29189 [ 758.862245] binder: send failed reply for transaction 343, target dead 22:30:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x11, 0x1}}, 0x1c) 22:30:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x8, 0xffff, 0x66}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000140)=""/162) 22:30:38 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0x1}}, 0x1c) 22:30:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x65000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:38 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0x200, 0x92c, 0x1, 'queue1\x00', 0x80000000}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x10001) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) 22:30:38 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 759.363338] binder: 21502:21503 ERROR: BC_REGISTER_LOOPER called without request [ 759.412313] IPVS: ftp: loaded support on port[0] = 21 22:30:39 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0x1}}, 0x1c) [ 759.441206] binder: 21502:21503 unknown command 0 22:30:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x100, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={r0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)=0xa) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000340)=r2, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bond_slave_0\x00'}, 0x18) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0xe3b, 0x12) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x1, r3}) poll(&(0x7f0000000140)=[{r4, 0x4422}, {r3, 0x2}, {r0, 0x98}], 0x3, 0x3) 22:30:39 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x2ee) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="dd56421fe9e6ea898c1ca5aee190bb22efb5d5a0c9dc8d6040b53f85ff373e1749d8687d9ee71b1094382b47c3a1baae1be750d59cc70bde12b490a92be119b572f44c90cb5edb1af88eaf2c6341cac1a326e70625c2dd1ff14d72d3d45dec6b083d1d76c1ebbd60eebbcc69a72ab4f1acfcd46923a6a874353853d8597c48846d85066862cabe26ad4bd79bb1cbaaed02e1ed2d220341ac2473d7e4d89d27674ae4194383") close(r0) r1 = socket(0x1e, 0x5, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x800) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) memfd_create(&(0x7f0000000100)=']\\bdev\x00', 0x2) [ 759.468962] binder: 21502:21503 ioctl c0306201 2000efd0 returned -22 22:30:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 759.546185] binder: BINDER_SET_CONTEXT_MGR already set 22:30:39 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000], 0x1}}, 0x1c) 22:30:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0x0, 0x0, [0x1000, 0x86, 0x8001, 0x9, 0x8001, 0x100000000003, 0xd4d, 0x9]}) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0x304) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 759.596172] binder: 21502:21530 ioctl 40046207 0 returned -16 [ 759.634192] binder: 21502:21530 ERROR: BC_REGISTER_LOOPER called without request 22:30:39 executing program 6: r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000009c0)='/dev/amidi#\x00', 0x1, 0x212080) write$P9_RSYMLINK(r1, &(0x7f0000000a00)={0x14, 0x11, 0x1, {0x14, 0x4, 0x5}}, 0x14) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="a7ffdbd82a648574910b2e5558586f025cde35377b9c320b919811fd2268a81db4e847418f9562d07c1bff5cabdb4f26dce2af02d5f493876dcadd1fbab2fa706453f024784212489dd813d4e1f79e6ef906147b7981545dd6a05dcce0a39a8933a6f28f130a400512b11f3b14ec18355ef872809fa97e12c78d938470ac67ebfa5d9df61efb60a6c44e1403aa", 0x8d, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000340)=0x4, 0x4) keyctl$unlink(0x9, r2, r3) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000005c0)={"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"}) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'yam0\x00', {0x2, 0x4e24, @rand_addr=0xb9ca}}) syz_emit_ethernet(0xd9, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x1, 0x4, [0x8bb, 0xc4d, 0xefc, 0x619]}) r5 = socket(0x1e, 0x5, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x400040, 0x0) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000500)={0x79, 0x0, [0x5, 0xdb39, 0x6]}) sendmsg(r5, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000400)=0x34366c9f, &(0x7f0000000440)=0x4) 22:30:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) syz_emit_ethernet(0x25, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x2, 0x3, 0x2}], {0x8100, 0x1, 0x8000000000000, 0x4}}], {@llc={0x4, {@snap={0xab, 0xaa, "dd8e", 'YR8', 0x800, "ab5c22964ca1"}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0xff, 0x54d, 0x999, 0xb98]}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 759.701915] binder_alloc: 21502: binder_alloc_buf, no vma [ 759.707618] binder: 21502:21503 transaction failed 29189/-3, size 0-0 line 2967 22:30:39 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x1}}, 0x1c) [ 759.780795] QAT: Invalid ioctl [ 759.802554] QAT: Invalid ioctl [ 759.807248] binder: 21502:21530 unknown command 0 [ 759.835492] binder: 21502:21530 ioctl c0306201 2000efd0 returned -22 [ 759.846173] QAT: Invalid ioctl [ 759.863668] QAT: Invalid ioctl [ 759.884427] bridge0: renamed from tunl0 [ 759.896671] binder: release 21502:21503 transaction 346 out, still active [ 759.903801] binder: undelivered TRANSACTION_COMPLETE [ 759.942144] binder: undelivered TRANSACTION_ERROR: 29189 [ 759.975118] binder: send failed reply for transaction 346, target dead 22:30:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xe803000000000000, 0x1}}, 0x1c) 22:30:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:40 executing program 4: r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x121000, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000200)=""/33, &(0x7f0000000240)=0x21) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") alarm(0x100000001) alarm(0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x20000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 22:30:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x6, 0x40000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x9, 0xffffffff00000000, r3}) fcntl$notify(r0, 0x402, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8001, 0x0) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000300)=0x7f, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:40 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x800) getpeername(r0, &(0x7f00000001c0)=@ll={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x6, &(0x7f0000000280)="e41a8d381a5bffc627c6f589b99b94fac46aa5ca05f459e2b083bdb6064956a9e1e2d771a6") setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000340)={0x7, 0x177, 0x8, 0x9, 0x4, 0x3}) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) ioctl$sock_ifreq(r2, 0x897f, &(0x7f0000000380)={'bpq0\x00', @ifru_addrs=@xdp={0x2c, 0x3, r1, 0x15}}) socket(0x0, 0x80000, 0x9d98) 22:30:40 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x1}}, 0x1c) 22:30:40 executing program 6: r0 = socket(0x1e, 0x80016, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) accept(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) 22:30:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:40 executing program 6: r0 = socket(0x1e, 0x2, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f0000000200)=""/174) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000080), 0x4) r3 = socket(0x8000000000001e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:40 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0x1}}, 0x1c) 22:30:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000000)={@loopback, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) connect$packet(r0, &(0x7f0000000100)={0x11, 0x10, r1, 0x1, 0x4, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80400, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) poll(&(0x7f0000000140)=[{r0, 0x24}, {r0, 0x80}, {r0, 0x1000}], 0x3, 0x81) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000400)={@hci={0x1f, r1, 0x3}, {&(0x7f0000000300)=""/225, 0xe1}, &(0x7f0000000240), 0x4}, 0xa0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000004c0)=0x0) mq_notify(r2, &(0x7f0000000500)={0x0, 0xd, 0x4, @tid=r3}) 22:30:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:40 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0x1}}, 0x1c) 22:30:40 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0xfffffe90, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x7fff, 0x100) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x5, 0xa326, 0xfff, 0x401, 0x7, 0x7ff}, 0x47db, 0x3ce, 0xff, 0x81, 0x6, "55c430096e72cc22b72d1472406cdec4b5fe96e21c7513791462492a63827395498b5c58d53916f2c56b563b59ccceb24b3bf117b7a3a80a69b4622ac04ca06bca80237e309c18f4b7a0916e25d495f4f71c802b28d83621c51ad4d9870ae13ce2e0d94736c9f7b95c1c2322000693609fe9b847874a67d2fb098d57abe33980"}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) [ 761.026605] binder: 21575:21583 ERROR: BC_REGISTER_LOOPER called without request [ 761.047894] binder: 21575:21583 unknown command 0 [ 761.072353] binder: 21575:21583 ioctl c0306201 2000efd0 returned -22 [ 761.085760] binder: BINDER_SET_CONTEXT_MGR already set [ 761.101530] binder: 21575:21630 ioctl 40046207 0 returned -16 [ 761.116600] binder: 21575:21633 ERROR: BC_REGISTER_LOOPER called without request [ 761.140909] binder: 21575:21630 unknown command 0 [ 761.146154] binder_alloc: 21575: binder_alloc_buf, no vma [ 761.151835] binder: 21575:21583 transaction failed 29189/-3, size 0-0 line 2967 [ 761.155819] binder: 21575:21630 ioctl c0306201 2000efd0 returned -22 [ 761.282328] binder: undelivered TRANSACTION_ERROR: 29189 [ 761.288158] binder: send failed reply for transaction 349 to 21575:21583 [ 761.301978] binder: undelivered TRANSACTION_COMPLETE [ 761.307224] binder: undelivered TRANSACTION_ERROR: 29189 22:30:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x400300, 0x1}}, 0x1c) 22:30:41 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0x1}}, 0x1c) 22:30:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x2800}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:41 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) move_pages(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f00000000c0)=[0x0, 0x4, 0x20, 0xfffffffffffffffe], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:41 executing program 5: r0 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) poll(&(0x7f00000000c0)=[{r0, 0x40}, {r0}, {r0, 0x2}], 0x3, 0x6) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 22:30:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) write$P9_RREAD(r1, &(0x7f00000000c0)={0xb6, 0x75, 0x2, {0xab, "0a79d5af4a5a7fef921d325112323d63eec486099c0709eb7e84d45b1d67988b500e8a10819ce92866905c5a7d81fc86f13a68a91597978513804e534f7a4dc160c99a7730b58539f60ab08480a47de2d2f1501ea7d04146d08d366af17ec8596ba3651e63cc08d29412ede733408e0a51e3db0f1c497718bee9970e6da4c0d333ccbc4d93196157530fb1b241227623b02db2a6c6a8b33aeeff30e04ab18fb4f8c770333f34cc0498ab55"}}, 0xb6) getgid() 22:30:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x40000000004) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x26, "3a0d8fb1a1736c88acaa5d68b1bae28f66264e04dfe569e7ae5ad929113a5cb4908dd3da30e4"}, &(0x7f00000000c0)=0x2e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr=0x2}, 0x7}}, 0x5, 0x592, 0x7, 0x18, 0x4}, &(0x7f00000001c0)=0x98) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_void(r0, 0x29, 0x3f, 0x0, 0x0) 22:30:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x1000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:41 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x1}}, 0x1c) [ 761.487641] binder: 21657:21659 ERROR: BC_REGISTER_LOOPER called without request 22:30:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x100) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x1000000, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x4000000, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:41 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000300)={0x20, 0x3}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r4 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2, r3, r4}, 0xc) [ 761.565799] binder: 21657:21659 unknown command 0 22:30:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffa}}) [ 761.619617] binder: 21657:21659 ioctl c0306201 2000efd0 returned -22 22:30:41 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000], 0x1}}, 0x1c) [ 761.677499] binder: BINDER_SET_CONTEXT_MGR already set [ 761.710376] binder: 21657:21684 ERROR: BC_REGISTER_LOOPER called without request [ 761.726115] binder: 21657:21679 ioctl 40046207 0 returned -16 22:30:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) socket$unix(0x1, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) truncate(&(0x7f0000000100)='./file0\x00', 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) [ 761.777394] binder_alloc: 21657: binder_alloc_buf, no vma [ 761.783279] binder: 21657:21684 transaction failed 29189/-3, size 0-0 line 2967 [ 761.786486] binder: 21657:21694 unknown command 0 [ 761.833517] binder: 21657:21694 ioctl c0306201 2000efd0 returned -22 [ 761.868632] binder: release 21657:21659 transaction 352 out, still active [ 761.875742] binder: undelivered TRANSACTION_COMPLETE [ 761.905884] binder: undelivered TRANSACTION_ERROR: 29189 [ 761.953169] binder: send failed reply for transaction 352, target dead 22:30:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x20000000, 0x1}}, 0x1c) 22:30:42 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) listen(r0, 0x2) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000040), 0xffea) r2 = accept(r1, &(0x7f00000000c0)=@in6={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x80) getsockname$packet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x400000) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000200)={0x0, 0x9, 0x20}) 22:30:42 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000000080)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)="2683eee891583c507bfd86e5fa5215d44babd97050a334a48f49f08fc3a0b733dc53f5df85455fc530c4525d7daed586136a", 0x32}, {&(0x7f0000000200)="85e8d88c2ef6a7e6b4ab927788e8f66e34acfdb6ae81648db6009d1a1fc35154b1763cef0d14ffa2055b7be81a9a6d1fa114d263269a14f82abe97de8602977f44565401dd729459256f4228873cb960a830cc33a9a3d2a4f3d0e29fdcbf3a1f4bd5c691730ff47f90b6ceb98c8e8acad94b2c2fb59452b9f335ba85ca8a9380737b486cc9664c5588473800e40acc7674f8825f78e4375afd29dcdd1d2812a916351f9a8e775bd05871b42029c11b9c66fdcfa22800a208d7fa993d28cbbab123cc604d7001bd3eb0250d09b2e20092c358", 0xd2}, {&(0x7f0000000300)="d113ff6fb0139a8485a1bdf23ad307eb9fec8a2b2a75f3e700ed5a074d73318bdc2c4b14ac0b38ecf50288ccee9808bdbc23480dbe1a1fa2ed6e98ded1f047b636d58295b9c5635ce599877af0c0cf04d0dd896e94fbc5f379fe662b8e1e01ec6d38e78f184ce87ee3d469379dddd5ba0f9d048fa4e1ec294a41d9375f8596", 0x7f}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="057e61fa823d7967009402145e203812c5c2a3c227afb7507c0e2c7effdd1fffd865c5be369ffba3b56c87c25a36e135ed77b897cc904c0c26333cecb2fefc05a2ae1024c8949a539bfc462906e495c003c2e6199e77471c0c7cd50cda7ed94e7830b970bfd2dd764c9b3a8cb8d103e4521d21ebd1228abf6fe9f805ec73476342608053be9183c2856787d8f92ac8f63922be3287215704cdf4e4995a6b22fc37113c", 0xa3}, {&(0x7f0000000540)="c2cece6b27594ca2229303f29d88090b678c49f82b59e9ef26f4f88f8a6fa5c5a6e5021f32bdb8f0d3a9783144a8c6e716a3aad99c314054f15ac6079543cb7b58b1417e2b9dc5bcedd917b1378b82edf8b491d1fef85abd2a004e9fbd817275b668bc75c85aa5a28785bb5f29c76fb99c5c1b546e2ce1e54f68ee489a44387cec1313361596a66ec0ad23cfb5ee34523265ee1cb3", 0x95}, {&(0x7f0000000900)="517838cea2265f48af1979cbf0fb9d748a8fd3b7143fb39fc8aa81c49ddcd57e898c7a60bcdf35eb3e786a6d511d47062e23a8bdb0a9b058ce486885abba43fa32feb1669d47e356bdf52e238e3dfae32f8ef05a5f6eff555633a67d7030291419b8501748f99bc6367ba6971f7a2733a6753ab0e303dd3fae6c32aaced8945489f500a1305fdef4c5124ae7b7333e820423b4c1252956cc6e0261c2f776b76c387a4266eb0d4382e5eb008dc1fd81a5e0f1af", 0xffffffffffffff85}, {&(0x7f00000006c0)="602cdcbc6ca7b08722b78a392552ff43e9eb815a16c71ed01e87217f13928a1b3cab2dbf3aadcfc07c9560efcc49c8a5e760b70459c3164d02ffc5892c86e933a365895039e59df30997af799ad1f925257871f5fc02768c6e238a82143bc90401ee0a7880993e9dc8af8cf18733d936763935dd42128158a0f0349ec19e3f225fa15c9af6c8e67c7e9b46e44e2280237668e6f8c9eb1df2337d9d3014339edd56dfb0e60a025556ca29ace12c9392097093c7eaf186417ab75a30f9ae7853d92e123a3d7e98b314f48702", 0xcb}, {&(0x7f00000007c0)="c4b3e09d739c118be27e4508654c268dd952be514aaf1750d1bad1b0392af64b86f621a67c155ef2c4e72a7e4eb19700707c88a93fcaa43df0ce81a696dc1003ede7990814c29f8a3b12d8e06f59accd29449ccbf3f6e9e660c04a29087748740b21158ae171d4a43dcc017e35863398457a0c4dad48cea7039db27f4253b6", 0x7f}], 0x1000000000000062, &(0x7f00002d4000)}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x14) sendmsg$kcm(r1, &(0x7f0000001dc0)={&(0x7f0000000640)=@hci={0x1f, r2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="b66811864e09304a0d81d8041db2160a73a491e4d96972dc82bfbfb6ec", 0x1d}, {&(0x7f0000001a00)="1d7ea57dc7de68328837509817186b69907783f7d2d2c8e2d3ce795db55c5aeb9ad57353a890bdd3d7c20f1c833f1e545fab8a0655d4fec4292d44537abf319941153705b14946c29b746f826707d64d5233868408036a2d50a561cb074b927d9a0cc1f6e2b3c74a0da4740841076f6e76b737af2159982091317596dd8fb1b7171178d6f6b7403c8977705514272424e4411b2a9ab44f4a2a9e79bcfbf8812e98254d1f04bdd8c8e0f8b1e7db5fb7383bf4ae8f52e82ea860ab672785aef79a9725aaf449b2cc74dc33aa621cd8", 0xce}], 0x3, &(0x7f0000001b40)=[{0x110, 0x115, 0x10001, "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"}, {0x80, 0x104, 0x9, "1c1c85f901be888c458cc4a156a2adc0d0c1157dad91fdda884adfa239eaecf1677581b90fdcde9818bcba6ab237343d25a4dc33d0b9925ea3f92eed8f696cb7bc034ac8de375e9c5099b85a419fbb6eb6f0d17dadfb6d08d1d344e3903fe40760862b171dd104da9ae4bb28e0"}, {0xd8, 0x18f, 0xfffffffffffffff8, "168aa7ccc6a07163ab138d261947a14985edccfd1c3ee609521d8d6e2a67a29f66782fab45ed81f5974128caf21128b06d6023c9d2f66e4481bca8a60240e1b80b7ce1c43cbb04f9bae93e5aecfc0fbe37fc949fdc90248d9bbcb9f749776c1516713cbb1407a915e5902724cbfa0ca95a1b963deddd90b6debdf8ef4125dfe6c9ae9dd0c2bb3853082526a82e758c828ae15784198947b739494ce926050188bd22843ad20defc6d3567572f58c70263e597226e09ff7c769e7b73c89ff3f4169624dcf"}], 0x268}, 0x40000) 22:30:42 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x1}}, 0x1c) 22:30:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700340000000000fff55b4202937929301ee616d5c01843e06590082953c0e3854702a7110f118d0000f55d0200000000000000faffffff000000e8adb46245004bae135664030000000000000000000000000000000000", 0x5c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xdac, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x5, 0x7fff}, &(0x7f0000000180)=0x8) 22:30:42 executing program 2: pause() mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mknod(&(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rename(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x81, 0x7fff, 0x9, 0x5, 0x4}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x1a28b4d6, @loopback={0x0, 0x1}, 0x8000}}, 0x5, 0xf6d, 0x10001, 0x8001, 0x2}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={r1, 0xfffffffffffffff8, 0x0, 0x4, 0x8, 0x1ff, 0xfff, 0x80000000, {r2, @in6={{0xa, 0x4e20, 0xce, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, 0x80000001, 0x4, 0x0, 0x1, 0x8}}, &(0x7f0000000580)=0xb0) 22:30:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x2000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:42 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300], 0x1}}, 0x1c) [ 762.460558] binder: 21712:21717 ERROR: BC_REGISTER_LOOPER called without request [ 762.500328] binder: 21712:21717 unknown command 0 22:30:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x141002) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000000c0)=""/134) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 762.513888] binder: 21712:21717 ioctl c0306201 2000efd0 returned -22 22:30:42 executing program 6: r0 = socket(0x1e, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000000c0)="2dc1c9e9ac17818ea62db79ca0d07d00d4a78cdb2b075ca9b3aefdfd92f93c6510e2332ec82720ebb69597510f41d6a91b57c3480e76c51f0902f9f17880d7106bb792bac3dcb8d788af5458cb35641e689121a5a0508e12107a373618a73b33818a5928e2b6e9610f2d6ad7c02830f8294e78c34101a4dd894e9a5b92f47e7f712a2e4cd520cf092cdacfc89db33585a6b2c9", 0x93, 0x20000000, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x90, 0x4}, 0x10000}}, 0x18) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 762.584839] binder: BINDER_SET_CONTEXT_MGR already set 22:30:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:42 executing program 4: r0 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xa64, 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:42 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee050000], 0x1}}, 0x1c) [ 762.624005] binder: 21712:21741 ioctl 40046207 0 returned -16 [ 762.658968] binder: 21712:21747 ERROR: BC_REGISTER_LOOPER called without request [ 762.674618] binder: 21712:21743 unknown command 0 [ 762.731541] binder: 21712:21743 ioctl c0306201 2000efd0 returned -22 [ 762.791680] binder_alloc: 21712: binder_alloc_buf, no vma [ 762.797387] binder: 21712:21717 transaction failed 29189/-3, size 0-0 line 2967 [ 762.858183] binder: release 21712:21717 transaction 355 out, still active [ 762.865223] binder: undelivered TRANSACTION_COMPLETE [ 762.871352] binder: undelivered TRANSACTION_ERROR: 29189 [ 762.876943] binder: send failed reply for transaction 355, target dead 22:30:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0, 0x1}}, 0x1c) 22:30:43 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) pipe2$9p(&(0x7f00000000c0), 0x4000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x4000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x0, 0x3}, 0x14) close(0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000200)={0xfc, 0x7, 0x6, 0x0, 0x0, [], [], [], 0x5, 0x9}) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004880) 22:30:43 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848], 0x1}}, 0x1c) 22:30:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x10000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x7fff, @loopback={0x0, 0x1}, 0x5}}, 0x1f}, &(0x7f0000000240)=0x90) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:46 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x482080, 0x0) flistxattr(r0, &(0x7f0000000240)=""/229, 0xe5) r1 = userfaultfd(0x807fd) close(r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='$$.procem1%[6\x00'}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="2658f3f9dc11bd16c7416dc5e3a8c8657a4e5b37dd256d704b7a940c40813f782d2b97cff51926ac8cd20ce5a4805b540ab462e395193bd6c022e2a10b0c156e766b72ad1b343286c2e1ab2151461f081dea42adfdd77eeae07a2c4adccf5ba80ddfb084af6452c2d5291ed826c2b14c7074826a8a841d2d2c79fda013c9e09db57837d64af18d1888aa4b0669aa8246febc75815ecd15fdb8dbfdacc7e21ad4aa82a22b9f32d4db8141e0894d75cd18eff3494dc6edabcc1c0e73268584ca5f8f4029ab52c600013ca3d7e77a87c4f4a0c9ab9afafe67dcfe6f45b5bf02be00e142f05101ac50bb20", 0xe9) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000340)="ab5cebb0e22101f894c14456e7702ed6c614f6de20c516c7eee917b88f65acf98a24e4e4ea322ee5f61f0e0325817e3aaac26ef09c0ad96c7cf516b55dd234d2ccaabab4", &(0x7f0000002000)="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"}}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f00000004c0)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000500)) clone(0x0, &(0x7f0000000280), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) r4 = add_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000005c0)="e0cfa46a4a87a93ade8906c2b78ef5fb67c4c66d5f25139f799c5c191b9d92eed18b4f8b00164941bacd0f68b67e0bcaea3c643916dd2ef2cb2117635911cdd7bd88fbb607a3dbd8c7e774529d09c2adbfe377bfcfee038ac8ff51158f17663fc1858b6fb94592606cb78ccd2dfbd8b0a10a0eff57d529647fa1065fe78a22a6259aafe7dad834cbd7161b3f68de2446ad26ef363e3f819bc32768563886b8aef82e766a8ed360e0ddc69d6e41404f8a35fa51d0b9a611f45e2bf6e66c33ea79cfd9e9a65854a0cf4a83c9003aeda6b62ad952d7fb", 0xd5, 0xfffffffffffffffc) preadv(r1, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/59, 0x3b}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/240, 0xf0}, {&(0x7f0000000b40)=""/42, 0x2a}], 0x7, 0x0) keyctl$setperm(0x5, r4, 0x2) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00003e3000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) 22:30:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:46 executing program 4: r0 = socket$packet(0x11, 0x80000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000002c0)=0xffd, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200802800, 0xac10, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, 0x1c) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x0, 0xc7e0, 0x2, 0x5c, 0x0, 0x0, 0x2}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x400000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xffff, 0x8, 0x2, 0xfdb3, 0xf42, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) fgetxattr(r1, &(0x7f0000000440)=@random={'security.', '}\'%self+\x00'}, &(0x7f00000003c0)=""/81, 0x51) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 22:30:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4c00, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:46 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0x1}}, 0x1c) 22:30:46 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x1f) r2 = socket(0x1000001e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)="ed", 0x1}, {&(0x7f0000000080)="987eeafb67edc21b50335663d385d86f0ceefa3c2017b82fe92c9699be4d7b305bf96b9bcb0faaf4737312cf88a616ceb36955eadbba654337ec2d306e5250f600213db718c7d582423987897d2a3a34c2e17ee57c0568ee7eeea2bd8e751b6397c4a5430fddd3e80289d327a46a57a76e92a2b33958a897af9b8c14f712210b0b4302953560387da6101012dbd303e6c40e2389af4444ddae5e7766f04a2abc55fcd836d9f84ae75283993ed2961b2448c90f4af682073837e3437df5972c03da97b8388d657904ecc4f2d54c69094223fe57", 0xd3}, {&(0x7f0000000200)="59b6f7a59f2bef90d8ef6519142889f68991963c704267b1feb12371aa81541117dacd5be672403c611784d5b2c8f94587757e0911edd0341adbe7d3dd13b0046e03c919eaa67209aa4b584a7130765199ad1e16cc6ac1d45bd4f8910617d44a2b480b671d75ed68bc92c55f6099cd4417cc4b8646c876ac0e1a154d9de4314b45889f6bee5109172357f1d162b1fce551acf4c9a9f6ff66412319602abee1a91fc00616cab1f3125b00eef87ed4785d55af6bdfbe12513301141bfc83c3d9", 0xbf}, {&(0x7f00000002c0)="18ca3869edc9e96482573e904387a818d566824fae057900c462f36ea3136a5a82a40f353982a0e2c385fc09f13f4220d07ffc79e5e75a7fe6c65f6d8b36b8fe8fa750c1e5c1df7844d90ac0b18c6b650b80ce2f00518cb17232460776b4bec76ad874673a2f6cf0b6530df0a6f7b1f03327d3ebfe7ab6617eb64dcd194e8b80c49da01ca11e866d18b3958b27e0e470324b70eff137aa357b1498ae63b87f2a", 0xa0}, {&(0x7f0000000380)="25ab6f79ac24760908ef8bbe88d82dbc58c7bade3c83aa8c50cfa6e0005abe9068fd91ca6404e2b29338984c1f0d60d8d2c152258ef09364e0cb9fd2139e8095205f43b44ce2727f12ccc58af053133379289a399a2929b3574e68af33c299e7580cee80a484f7153c3a3bdba07b225a04bff36af324994438bc75c08c10065455250c3d7b95645b2798b1b3f13d42842ee35cdeedf7893218", 0x99}], 0x5, &(0x7f00002d4000), 0x0, 0x4000000000}, 0x0) 22:30:46 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x4080) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0x4, 0x0, 0x1, 'queue0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0xb) sendto$inet6(r2, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x10}}, 0x1c) [ 767.343818] binder: 21805:21817 ERROR: BC_REGISTER_LOOPER called without request [ 767.352388] binder: 21805:21817 unknown command 0 [ 767.357755] binder: 21805:21817 ioctl c0306201 2000efd0 returned -22 [ 767.369629] binder: BINDER_SET_CONTEXT_MGR already set [ 767.375373] binder: 21805:21819 ioctl 40046207 0 returned -16 [ 767.393436] binder: 21805:21819 ERROR: BC_REGISTER_LOOPER called without request [ 767.408136] binder_alloc: 21805: binder_alloc_buf, no vma [ 767.413891] binder: 21805:21817 transaction failed 29189/-3, size 0-0 line 2967 [ 767.422882] binder: 21805:21819 unknown command 0 [ 767.438573] binder: 21805:21819 ioctl c0306201 2000efd0 returned -22 [ 767.457336] binder: release 21805:21817 transaction 358 out, still active [ 767.464461] binder: undelivered TRANSACTION_COMPLETE 22:30:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7a, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 767.490144] binder: undelivered TRANSACTION_ERROR: 29189 [ 767.515795] binder: send failed reply for transaction 358, target dead [ 767.595406] binder: 21825:21826 ERROR: BC_REGISTER_LOOPER called without request [ 767.605923] binder: 21825:21826 unknown command 0 [ 767.611595] binder: 21825:21826 ioctl c0306201 2000efd0 returned -22 [ 767.640953] binder: BINDER_SET_CONTEXT_MGR already set [ 767.662472] binder: 21825:21827 ioctl 40046207 0 returned -16 [ 767.698314] binder: 21825:21827 ERROR: BC_REGISTER_LOOPER called without request 22:30:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 767.726345] binder_alloc: 21825: binder_alloc_buf, no vma [ 767.732080] binder: 21825:21826 transaction failed 29189/-3, size 0-0 line 2967 [ 767.745359] binder: 21825:21827 unknown command 0 [ 767.750351] binder: 21825:21827 ioctl c0306201 2000efd0 returned -22 [ 767.763797] binder: release 21825:21826 transaction 361 out, still active [ 767.770982] binder: undelivered TRANSACTION_COMPLETE 22:30:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x200000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 767.786845] binder: undelivered TRANSACTION_ERROR: 29189 [ 767.800364] binder: send failed reply for transaction 361, target dead 22:30:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 767.859887] binder: 21834:21836 ERROR: BC_REGISTER_LOOPER called without request 22:30:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x0, 0x7, 0x9a, '\x00', 0x2}, 0x0, [0x200, 0x1c00, 0x8, 0x9, 0x53, 0x3, 0xfffffffffffff5e8, 0x84, 0x3, 0xfadb, 0x3, 0xffffffff, 0x5, 0x1, 0x5, 0x7fffffff, 0x4d, 0x2, 0x6, 0x1, 0x9, 0x9, 0x7, 0x3, 0xfffffffffffffc00, 0x100, 0x3ff, 0x1000, 0x8127, 0x3, 0x5, 0x2, 0xd342, 0x7ff, 0x2, 0x7fff, 0x0, 0x401, 0x5, 0x3, 0x7fffffff, 0x8, 0x0, 0x6, 0x2, 0x3, 0x0, 0x5, 0x8000, 0x4, 0x8, 0x3, 0x20, 0x8, 0x9, 0x20, 0x3ff, 0x9096, 0x3, 0x2, 0x4, 0x7, 0x1f, 0x0, 0x80000001, 0x7, 0x1, 0x4, 0x5, 0xe00f, 0x36, 0x81, 0x100, 0x401, 0x401, 0x3822, 0xa0, 0x2, 0x7fff, 0x2, 0x5, 0x5, 0x4, 0x5, 0x442, 0x6, 0x8, 0x200, 0x6c856a77, 0x1000, 0x0, 0x10001, 0x8, 0x3, 0x0, 0x31, 0x9, 0x7, 0x7, 0x25bb, 0x26, 0x3f, 0x1, 0x4, 0x5, 0x101, 0x0, 0x10001, 0xfff, 0x6, 0x7, 0xfffffffffffffff7, 0xffff, 0x5, 0x3, 0x7fffffff, 0x4, 0x35c, 0x9, 0xffff, 0x9, 0x7515, 0x7, 0x0, 0x3, 0x2, 0x8001, 0xe59]}) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:47 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0x1}}, 0x1c) 22:30:47 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x5, 0x5, 0x661) socketpair(0x1f, 0xb, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0x400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/29) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 767.909860] binder: 21834:21836 unknown command 0 [ 767.944268] binder: 21834:21836 ioctl c0306201 2000efd0 returned -22 [ 767.988967] binder: BINDER_SET_CONTEXT_MGR already set [ 768.015505] binder: 21834:21847 ioctl 40046207 0 returned -16 [ 768.041842] binder: 21834:21855 ERROR: BC_REGISTER_LOOPER called without request [ 768.120822] binder: 21834:21847 unknown command 0 [ 768.120844] binder_alloc: 21834: binder_alloc_buf, no vma [ 768.131385] binder: 21834:21836 transaction failed 29189/-3, size 0-0 line 2967 [ 768.135272] binder: 21834:21847 ioctl c0306201 2000efd0 returned -22 [ 768.192984] binder: release 21834:21836 transaction 364 out, still active [ 768.200049] binder: undelivered TRANSACTION_COMPLETE [ 768.213579] binder: undelivered TRANSACTION_ERROR: 29189 [ 768.223388] binder: send failed reply for transaction 364, target dead [ 768.240686] syz-executor1 (21808) used greatest stack depth: 11896 bytes left 22:30:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 22:30:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x90000, 0x0) 22:30:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x1}}, 0x1c) 22:30:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f00000000c0)='security{\\**bdev\x00', 0x11, 0x1) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x255, &(0x7f00002d4000)}, 0x0) getpeername$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xff, 0x301101) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000140)) 22:30:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x3000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x20e33fe1}}, 0x1c) [ 768.762438] binder: 21873:21874 ERROR: BC_REGISTER_LOOPER called without request 22:30:48 executing program 4: r0 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 22:30:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0x1}}, 0x1c) 22:30:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfd, 0xccc2e1f267ebfc6) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0xfff, 0x48, "dfa518481da62e9834f6b42739876a52c8052353976906122d2c80ec47264a4f128d9acb57490b7a4ec25e0b87265a3ef6e0b5af82525c68db972e40cde3fdb59f359feacef2b939"}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff9, 0x400400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 768.804159] binder: 21873:21874 unknown command 0 [ 768.821255] binder: 21873:21874 ioctl c0306201 2000efd0 returned -22 [ 768.836664] binder: BINDER_SET_CONTEXT_MGR already set [ 768.845098] binder: 21873:21895 ioctl 40046207 0 returned -16 22:30:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0xfffffc31, &(0x7f0000000040), 0x0, &(0x7f00002d4000)}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x5, 0x1, 0x1f, 0x1ff, 0x10, 0x6, 0x3, 0x80000000, 0x80, 0xffff, 0xfffffffffffffbff, 0x3}) 22:30:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 768.871619] binder: 21873:21895 ERROR: BC_REGISTER_LOOPER called without request [ 768.903819] binder_alloc: 21873: binder_alloc_buf, no vma [ 768.909516] binder: 21873:21874 transaction failed 29189/-3, size 0-0 line 2967 22:30:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x4000) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 768.984719] binder: 21873:21895 unknown command 0 22:30:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0x1}}, 0x1c) 22:30:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 769.008596] binder: 21873:21895 ioctl c0306201 2000efd0 returned -22 [ 769.034604] binder: release 21873:21874 transaction 367 out, still active [ 769.041747] binder: undelivered TRANSACTION_COMPLETE 22:30:48 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 22:30:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}], 0x73, 0x0, &(0x7f0000000140)="da9cbabf78a701330c074799dff19e7bf648f6e35a8a258b94e5ba0abf2eb50fc5f154764082744dd110ff7fdfded5eb55dfcd9838affc3b8afaff4f0c7ba745eb83e710cdc6c898ef2c9c5668153e89870d7e3a76c8040002693ba87954f7e152a9102648f226c92b19ac5743421ad7928416"}) r1 = socket$packet(0x11, 0x2000, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400) 22:30:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x60000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 769.076143] binder: undelivered TRANSACTION_ERROR: 29189 [ 769.083042] binder: send failed reply for transaction 367, target dead 22:30:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:48 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x1}}, 0x1c) 22:30:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=""/138, &(0x7f0000000180)=0x8a) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 769.216116] binder: 21945:21946 ERROR: BC_REGISTER_LOOPER called without request [ 769.235954] binder: 21945:21946 unknown command 0 [ 769.243896] binder: 21945:21946 ioctl c0306201 2000efd0 returned -22 [ 769.284963] binder: BINDER_SET_CONTEXT_MGR already set [ 769.314625] binder: 21945:21955 ioctl 40046207 0 returned -16 [ 769.366939] binder: 21945:21955 ERROR: BC_REGISTER_LOOPER called without request [ 769.390402] binder_alloc: 21945: binder_alloc_buf, no vma [ 769.396094] binder: 21945:21946 transaction failed 29189/-3, size 0-0 line 2967 [ 769.410790] binder: 21945:21955 unknown command 0 [ 769.419929] binder: 21945:21955 ioctl c0306201 2000efd0 returned -22 [ 769.440572] binder: release 21945:21946 transaction 370 out, still active [ 769.447657] binder: undelivered TRANSACTION_COMPLETE [ 769.452846] binder: undelivered TRANSACTION_ERROR: 29189 [ 769.458392] binder: send failed reply for transaction 370, target dead 22:30:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) 22:30:49 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1}}, 0x1c) 22:30:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:49 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000003c0)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0xffffffffffffffff, 0x2, 0x6, @buffer={0x0, 0x2e, &(0x7f00000000c0)=""/46}, &(0x7f0000000100)="f39b", &(0x7f0000000140), 0x9, 0x20, 0x2, &(0x7f0000000180)}) fcntl$addseals(r1, 0x409, 0xb) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x10001}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r3, 0xffffffffffff79eb}, 0x8) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)) 22:30:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:49 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000801, 0x4) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) [ 769.714230] Unknown ioctl 8837 22:30:49 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) 22:30:49 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:49 executing program 5: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e21}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x441) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x80}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [0xff, 0xff], @rand_addr=0x5}, 0x1}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @multicast2=0xe0000002}], 0x4c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xb000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 769.737905] binder: 21976:21979 ERROR: BC_REGISTER_LOOPER called without request [ 769.769569] Unknown ioctl 8837 [ 769.779160] binder: 21976:21979 unknown command 0 [ 769.804331] binder: 21976:21979 ioctl c0306201 2000efd0 returned -22 [ 769.850567] binder: BINDER_SET_CONTEXT_MGR already set [ 769.895161] binder: 21976:22002 ioctl 40046207 0 returned -16 22:30:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:49 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000], 0x1}}, 0x1c) [ 769.938703] binder: 21976:22002 ERROR: BC_REGISTER_LOOPER called without request [ 769.961093] binder_alloc: 21976: binder_alloc_buf, no vma [ 769.966764] binder: 21976:21979 transaction failed 29189/-3, size 0-0 line 2967 22:30:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2280) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x17}, 0xffa}}}, 0x88) [ 770.021131] binder: 21976:22002 unknown command 0 [ 770.030222] binder: 21976:22002 ioctl c0306201 2000efd0 returned -22 [ 770.071395] binder: release 21976:21979 transaction 373 out, still active [ 770.078496] binder: undelivered TRANSACTION_COMPLETE [ 770.123117] binder: undelivered TRANSACTION_ERROR: 29189 [ 770.150375] binder: send failed reply for transaction 373, target dead 22:30:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x301}}, 0x1c) 22:30:50 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8001) r2 = socket(0x1e, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x2, 0x13, 0x7970, 'queue1\x00'}) setsockopt$packet_buf(r2, 0x107, 0x1f, &(0x7f0000000200)="b0de924aeee18c39c9c11a1f5ae242d105cd3b862be3f311e829e8e3f6b6410bcd5286a0ba3f59bbd11c078590761dbfebe69f71702d7d4c6e8a938201ed509b7a57fc21b0f63646bdccf992cf252f41007155f11ec1914b706aade6e6bd81e918729963a23ed0189c4add1a30afa22cad7e45d524d5c1b0a9dc25840abf7493101de2bf5c73590eec420280f96ceb15cbc6a455ba42fae78524e5edb3dba14f737f3c78bb26b0c53af56874c953ad72cdf840fe", 0xb4) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 22:30:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8100, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x2, 0xffffffffffffff9c}) r1 = socket$packet(0x11, 0x1, 0x300) r2 = gettid() write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x5, {{0x10000, 0x8d, 0x1, r2}}}, 0x28) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6c00000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:50 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0x1}}, 0x1c) 22:30:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x1b, &(0x7f0000000000)=0x8001, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x65}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 770.765236] binder: 22066:22071 ERROR: BC_REGISTER_LOOPER called without request 22:30:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x40400) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x2, 0x7}) r1 = socket$packet(0x11, 0xffffe, 0x300) accept4$packet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:50 executing program 4: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 770.815389] binder: 22066:22071 unknown command 0 22:30:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:50 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1}}, 0x1c) 22:30:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd}, 0x18) [ 770.839056] binder: 22066:22071 ioctl c0306201 2000efd0 returned -22 [ 770.858711] binder: BINDER_SET_CONTEXT_MGR already set [ 770.875139] binder: 22066:22081 ioctl 40046207 0 returned -16 [ 770.896652] binder: 22066:22081 ERROR: BC_REGISTER_LOOPER called without request 22:30:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = getgid() r2 = getgid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgroups(0x4, &(0x7f00000001c0)=[r1, r2, r3, r4]) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 770.980272] binder_alloc: 22066: binder_alloc_buf, no vma [ 770.985981] binder: 22066:22071 transaction failed 29189/-3, size 0-0 line 2967 [ 771.053822] binder: 22066:22081 unknown command 0 [ 771.067855] binder: 22066:22081 ioctl c0306201 2000efd0 returned -22 [ 771.089747] binder: undelivered TRANSACTION_ERROR: 29189 [ 771.116570] binder: send failed reply for transaction 376 to 22066:22071 [ 771.140535] binder: undelivered TRANSACTION_COMPLETE [ 771.145885] binder: undelivered TRANSACTION_ERROR: 29189 22:30:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xc}}, 0x1c) 22:30:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = accept4(r0, &(0x7f00000000c0)=@can, &(0x7f0000000000)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x401, 0x8000, 0xf0, 0x6, 0xfffffffffffffbff, 0x100fffffffe, 0x8, 0x779, 0x8, 0x7fffffff}, 0xb) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:51 executing program 6: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000500), &(0x7f0000000540)=0x8) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) 22:30:51 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff], 0x1}}, 0x1c) 22:30:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x1f000580}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 22:30:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x400000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 771.711102] binder: 22125:22127 ERROR: BC_REGISTER_LOOPER called without request 22:30:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x100, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6ea, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x4c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x6, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x1b}, @in={0x2, 0x4e20}, @in={0x2, 0x4e24, @broadcast=0xffffffff}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}}, 0x84) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) [ 771.752251] binder: 22125:22127 unknown command 0 22:30:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002480)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000025c0)={'team0\x00', r1}) socketpair$inet6(0xa, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x3, 0x80000, &(0x7f0000000100)={0xa, 0x200800804, 0x0, @dev={0xfe, 0x80, [], 0x17}}, 0x1c) 22:30:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:51 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558], 0x1}}, 0x1c) [ 771.784245] binder: 22125:22127 ioctl c0306201 2000efd0 returned -22 22:30:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x402c5342, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 771.841643] binder: BINDER_SET_CONTEXT_MGR already set 22:30:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:51 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x40) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x222981, 0x0) [ 771.872435] binder: 22125:22151 ioctl 40046207 0 returned -16 [ 771.905664] binder: 22125:22151 ERROR: BC_REGISTER_LOOPER called without request [ 771.961731] binder: 22125:22160 unknown command 0 22:30:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101040, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x3, 0x1, 0x4}, 0x10001, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0x4, 0xd8, 0x5eb}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x634}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x65, "d91f071674d66ffbc4176119dc3232107076a4d1e92531eb85eb79b7df1bf36ee32f4616a54088b2cf101e1be01bc58c455c6e1ae3b362d6da28bd8e6be9603e898931a679094c5b3579fbf0834cda182409595d98c7d9f1cc779545041ff7ca2c311f4889"}, &(0x7f0000000240)=0x6d) [ 771.984598] binder_alloc: 22125: binder_alloc_buf, no vma [ 771.990342] binder: 22125:22127 transaction failed 29189/-3, size 0-0 line 2967 [ 772.000556] binder: 22125:22160 ioctl c0306201 2000efd0 returned -22 [ 772.058464] binder: release 22125:22127 transaction 379 out, still active [ 772.065629] binder: undelivered TRANSACTION_COMPLETE [ 772.101366] binder: undelivered TRANSACTION_ERROR: 29189 [ 772.120573] binder: send failed reply for transaction 379, target dead 22:30:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xffffffc0}}, 0x1c) 22:30:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1}}, 0x1c) 22:30:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x8) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x104, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) sched_setparam(r2, &(0x7f00000000c0)=0x6) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:52 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb7, 0x800) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) 22:30:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6c000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000000c0)={0x8, 0x7, 0x6, 0xed, 0x2, 0x10001}) sendto$inet6(r0, &(0x7f0000000180)="020300000700000000000000fff55b4202938207d9fd3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800802, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x366) [ 772.724374] binder: 22195:22196 ERROR: BC_REGISTER_LOOPER called without request 22:30:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x1}}, 0x1c) 22:30:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 772.791143] binder: 22195:22196 unknown command 0 22:30:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 772.811503] binder: 22195:22196 ioctl c0306201 2000efd0 returned -22 22:30:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0xfffffffffffffff0, 0x0, &(0x7f0000000080)={0xa, 0x2008007ff, 0x20000000005, @dev={0xfe, 0x80, [], 0xc}}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000300)={0x20, 0x4, 0x0, 'queue1\x00', 0x20120312}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200)=0x840, 0x2) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r0, r2}) [ 772.864419] binder: BINDER_SET_CONTEXT_MGR already set [ 772.897313] binder: 22195:22237 ERROR: BC_REGISTER_LOOPER called without request [ 772.902463] binder: 22195:22232 ioctl 40046207 0 returned -16 [ 772.965260] binder_alloc: 22195: binder_alloc_buf, no vma [ 772.971013] binder: 22195:22196 transaction failed 29189/-3, size 0-0 line 2967 [ 773.002241] binder: 22195:22232 unknown command 0 22:30:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x402c5342, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 22:30:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:52 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000], 0x1}}, 0x1c) 22:30:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 773.011822] binder: 22195:22232 ioctl c0306201 2000efd0 returned -22 [ 773.051080] binder: undelivered TRANSACTION_ERROR: 29189 [ 773.069078] binder: send failed reply for transaction 382 to 22195:22196 [ 773.103226] binder: undelivered TRANSACTION_COMPLETE [ 773.108442] binder: undelivered TRANSACTION_ERROR: 29189 22:30:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xfef4}}, 0x1c) 22:30:53 executing program 5: r0 = socket$packet(0x11, 0xc, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 22:30:53 executing program 4: syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x8000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f00000000c0)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x46, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x2f5) 22:30:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x48, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x4000002) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 22:30:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee05], 0x1}}, 0x1c) 22:30:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x1f00058000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:53 executing program 4: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x5, {{0x10, 0x3, 0x5}, 0x4}}, 0x18) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 773.708269] binder: 22265:22266 ERROR: BC_REGISTER_LOOPER called without request 22:30:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0x1}}, 0x1c) 22:30:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000002) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:53 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, @in={0x2, 0x4e24, @multicast1=0xe0000001}], 0x2c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 773.776189] binder: 22265:22266 unknown command 0 [ 773.797142] binder: 22265:22266 ioctl c0306201 2000efd0 returned -22 22:30:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 773.838425] binder: BINDER_SET_CONTEXT_MGR already set [ 773.857131] binder: 22265:22297 ioctl 40046207 0 returned -16 [ 773.895758] binder: 22265:22297 ERROR: BC_REGISTER_LOOPER called without request [ 773.946196] binder_alloc: 22265: binder_alloc_buf, no vma [ 773.951898] binder: 22265:22266 transaction failed 29189/-3, size 0-0 line 2967 22:30:53 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 22:30:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) bind(r0, &(0x7f00000001c0)=@can={0x1d, r1}, 0x80) 22:30:53 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x187, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0xfffffffffffffd0b) 22:30:53 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x1}}, 0x1c) [ 774.002199] binder: 22265:22297 unknown command 0 [ 774.020157] binder: 22265:22297 ioctl c0306201 2000efd0 returned -22 [ 774.047201] binder: release 22265:22266 transaction 385 out, still active [ 774.054286] binder: undelivered TRANSACTION_COMPLETE [ 774.090586] binder: undelivered TRANSACTION_ERROR: 29189 [ 774.122712] binder: send failed reply for transaction 385, target dead 22:30:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xffffffc2}}, 0x1c) 22:30:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x0, 0x50, &(0x7f00000001c0)="5d9d888e1b75d528adb4957687deb6ff4bd72117385936cdd1a4de022914303500b1f1f451e41046f99799b02db69a12e74e9093d17f88dfd778bfe334fb90f02812341dafddb9135653b706671e60d5"}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f00000000c0)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a31aa3c442d622fc6c86e13bc7668255d8375f363c9cff0712a45fbf59c25ddb2e8fdb4bee72b60e24b468eafe5e54e00e1a714c3d105fb1d9b4e5ef82e065e02e6bb958f22a3571d241da0ab07d1e4b77a513bb16e49d64c01674efecd72", 0xca, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:54 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0x1}}, 0x1c) 22:30:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'team_slave_0\x00', 0xfffffffffffffff9}) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000005140)=@can, 0x80, &(0x7f00000066c0), 0x0, &(0x7f0000006780)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000006980)={0x0, 0x989680}) [ 774.690567] binder: 22353:22354 ERROR: BC_REGISTER_LOOPER called without request 22:30:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 774.748872] binder: 22353:22354 unknown command 0 22:30:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200000) ioctl$int_out(r0, 0x5461, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x8, 0x5, 0x100, @empty, 'ifb0\x00'}) 22:30:54 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1}}, 0x1c) 22:30:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0x100, 0x122e) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x2000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/188, 0x16000, 0x800, 0x3}, 0x18) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000001c0)={0x5, 0x800, 0x3}) [ 774.777750] binder: 22353:22354 ioctl c0306201 2000efd0 returned -22 22:30:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:54 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865], 0x1}}, 0x1c) [ 774.842012] binder: BINDER_SET_CONTEXT_MGR already set [ 774.877132] binder: 22353:22382 ERROR: BC_REGISTER_LOOPER called without request [ 774.884484] binder: 22353:22379 ioctl 40046207 0 returned -16 22:30:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0xffffffffffffffe8) [ 774.899971] binder_alloc: 22353: binder_alloc_buf, no vma [ 774.905645] binder: 22353:22354 transaction failed 29189/-3, size 0-0 line 2967 [ 775.045746] binder: 22353:22382 unknown command 0 [ 775.075993] binder: 22353:22382 ioctl c0306201 2000efd0 returned -22 [ 775.094736] binder: release 22353:22354 transaction 388 out, still active [ 775.101819] binder: undelivered TRANSACTION_COMPLETE [ 775.111122] binder: undelivered TRANSACTION_ERROR: 29189 [ 775.123166] binder: send failed reply for transaction 388, target dead 22:30:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x39}}, 0x1c) 22:30:55 executing program 6: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df77c002c00fe800000000000000000000000000000fe8000000000000000000000000000aa2c0000000401a67906882e1730ff83450884fb3f82afd9365955196304c7fc1199f5ad376d9095ae4bf3935d36ab6cf294f1ec47055e05086dc11d836cfb1f02f5721881fecb5fdc467d61485798f106e1584e99992454daf0b7cdfd7262458f31fb1d3f0377e158661acda9c4b08ad2f5d73fa22845184d8b9e0acecafc5ac3c2f63cffc16ac06228"], &(0x7f0000000000)) 22:30:55 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8], 0x1}}, 0x1c) 22:30:55 executing program 4: r0 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="6367726f757073656c66216c6f24706f7369785f61636c5f6163636573739a2b6367726f75704047504c766d6e65743176626f786e65743100", 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r2, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x161) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x7) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f00000001c0)=0x3d46, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) read(r1, &(0x7f0000000340)=""/32, 0x20) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x3, 0x4) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=""/69) 22:30:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x650000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x300000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 775.708610] binder: 22411:22412 ERROR: BC_REGISTER_LOOPER called without request [ 775.744766] binder: 22411:22412 unknown command 0 22:30:55 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={r1, 0x1f, 0x13, "6c305bf23c15c9578df21703fa5bda13d96e68"}, 0x1b) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000180)=0x100, 0x4) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) accept4$inet6(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000140)=0x1c, 0x80800) sendto$inet6(r2, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 775.760544] binder: 22411:22412 ioctl c0306201 2000efd0 returned -22 22:30:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:55 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/72) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x230, &(0x7f0000000000), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x4000000000001f9, 0x2, &(0x7f0000000300)={0x0, r3+30000000}) 22:30:55 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0x1}}, 0x1c) [ 775.812256] binder: BINDER_SET_CONTEXT_MGR already set 22:30:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) [ 775.854745] binder: 22411:22439 ioctl 40046207 0 returned -16 22:30:55 executing program 4: truncate(&(0x7f0000000000)='./file0\x00', 0x9) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=""/169, &(0x7f00000001c0)=0xa9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 775.896629] binder: 22411:22439 ERROR: BC_REGISTER_LOOPER called without request [ 775.921606] binder_alloc: 22411: binder_alloc_buf, no vma [ 775.927354] binder: 22411:22412 transaction failed 29189/-3, size 0-0 line 2967 22:30:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2800}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 775.942943] binder: 22411:22439 unknown command 0 [ 775.950566] binder: 22411:22439 ioctl c0306201 2000efd0 returned -22 [ 776.020335] binder: release 22411:22412 transaction 391 out, still active [ 776.027424] binder: undelivered TRANSACTION_COMPLETE [ 776.057630] binder: undelivered TRANSACTION_ERROR: 29189 [ 776.077555] binder: send failed reply for transaction 391, target dead 22:30:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x31}}, 0x1c) 22:30:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 22:30:56 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000], 0x1}}, 0x1c) 22:30:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="272dcf7112f8fa", 0x7, 0x1, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @empty, 0x80000001}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0x80, 0x6d82}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:30:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 22:30:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='vmnet0proc/\x00', 0xffffffffffffff9c}, 0x10) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x6, 0xcb, "7d2f43c1bc3a5417de9191519b122dfd1894d49d0c95651804f085b77dd1748c18d7167d44281e3c25a6d9afe967fb66d6376862e843c746dde9cd7682463967314267595d971c31dc30752affb3c6be7958218de530125b3a6485f2670aa2c86f9638bdf72f06cf7f06a4cc1c866d3be706858a2bbca8b45b461e56f7f084996011adee11f111f370c664dde5eefc2e405c44e697164625ff83b77b49725054e88f79f26031b90f0b8d2d226f9e0bade1e43d1640decc633d5a707074286cdce03d678aa003d462ed9065"}) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7a00000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 776.711415] binder: 22475:22477 ERROR: BC_REGISTER_LOOPER called without request 22:30:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0xc100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x4) rt_sigqueueinfo(r1, 0x35, &(0x7f00000000c0)={0x32, 0x0, 0x8, 0x2}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0xa) 22:30:56 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee05000000000000], 0x1}}, 0x1c) [ 776.755167] binder: 22475:22477 unknown command 0 22:30:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 22:30:56 executing program 6: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="bf792ee016a2c4930bd2db0e634a55f27d2c826ee06c37aebe8c8d6d988149020ea78e21f95821a83a92e04d32cceb85d0268b2600d566", 0x37}, {&(0x7f0000000080)="ad6afcc56684f84a3145ff86077836298db62a30b05059109330f5a3eb325b26a40c6137ac97ec0e", 0x28}, {&(0x7f00000000c0)="edb62fecc66449eb3a5ed025c73c3ddf1bd7f62d36cb05401253153c9f9e69f829035d1269fe7b0751f7b810884a65531a4028744258d6294602ba78bead6d23fa6c13c7e0bc3dbf0b07808833ab07d9855f816074fc836ad61a0b5f052e00ef626d7d9e393feea4550789c8adcde73d057fce34839850ac8e5bd9d44140e6153835decd8fb643e7", 0x88}, {&(0x7f0000000180)="878da20850487fdf349811a65e06c551bc60a898c74d9e370ae68fea0685adcb44d0b46b4146107cb517bbb4b7bb1065a6e2d404abded7463bed2d3bc71606e239c70659cdb2e36f52bf751567a5593175413fb9ce1a0d67", 0x58}, {&(0x7f0000000200)="33f7151bb1667916638a951f278bbfd13a5149e7996d02b61e9596be13e9b4d45b440a9ac3a3437aea73af59c846720008cdeada62571ebc0c66adae0d992464b8ca4d072d63ef90939bbf19ef5f491bde62914a2c8039b881dd3b8414", 0x5d}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000000f0100000900000061ca85b011bed66e6fad342e077881006000000000000000ff00000004000000ae1b7de7ed5d62bb7b69e03cc0e811411c548f5222a17fff675459698604872faa4c537eb8a23be8fb19c3f82b0d3b89ca5485e2063afca4aace6cc0c8d86cfa98c54a5d5e9c9e7d7ecf000000000000"], 0x80, 0x4000}, 0xfff}], 0x1, 0x4000004) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8cf8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x2, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x7, 0x2, 0xf5f7}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r3, 0x800000000100937e, &(0x7f0000006f80)="010000000000000098") [ 776.795122] binder: 22475:22477 ioctl c0306201 2000efd0 returned -22 [ 776.832763] binder: BINDER_SET_CONTEXT_MGR already set 22:30:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@alg, &(0x7f0000000000)=0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f00000001c0)='*GPL\x00', 0x3) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0xc0}}}, 0x32) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90100, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0x924a8b0bf7aec3ec, 0x2000, 0xffffffff, 0x2, 0xd}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0xfff}, @in6={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xf}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0xe00000, @loopback={0x0, 0x1}, 0x3}, @in6={0xa, 0x4e22, 0x2, @loopback={0x0, 0x1}, 0x5}, @in={0x2, 0x4e23, @multicast2=0xe0000002}], 0xc0) 22:30:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2800000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 776.859728] binder: 22475:22507 ioctl 40046207 0 returned -16 [ 776.894837] binder: 22475:22507 ERROR: BC_REGISTER_LOOPER called without request [ 776.985213] binder: 22475:22507 unknown command 0 [ 776.985235] binder_alloc: 22475: binder_alloc_buf, no vma [ 776.985265] binder: 22475:22477 transaction failed 29189/-3, size 0-0 line 2967 [ 777.011737] binder: 22475:22507 ioctl c0306201 2000efd0 returned -22 [ 777.047735] binder: undelivered TRANSACTION_ERROR: 29189 [ 777.056131] binder: send failed reply for transaction 394 to 22475:22477 [ 777.079802] binder: undelivered TRANSACTION_COMPLETE [ 777.085048] binder: undelivered TRANSACTION_ERROR: 29189 22:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x17}}, 0x1c) 22:30:57 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0x1}}, 0x1c) 22:30:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 22:30:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='comm\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@loopback={0x0, 0x1}, 0x3f, r3}) 22:30:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) connect$l2tp(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x32) close(r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x4010, r2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x2, {0x2, 0x4e20, @rand_addr=0x2}, 'ip6gretap0\x00'}) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r4, 0x6}}, 0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="bf000000b5d032d4070fa9f689dffdc690b64b145baa10cc40d3fb6a44579c04a47446f641da93e13e874dbae7e01760c0cee5685c4311e0c951a49ef5a53de2a873a9ac3093cd0741a869fac1a1b20e4fafdcd500b83615bb11fe008dbc8c997d051fcbef2a9ff2775a9df34b4cc00a1c25b80f1ec1d00b0af317ed3f16130b0f47da3c8a66127cd828a33725f1640e8d16e8ea2bc3cd93342262d76fef95c640d7d4f839d5cb97d7c7b140046f3a3fca61a94124221ca6b864641c1823c9f2ebe20b"], &(0x7f00000001c0)=0xc7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={r5, 0x8, 0x30, 0xf33, 0xffffffff80000001}, &(0x7f0000000240)=0x18) 22:30:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x4, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x4080) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0xffffff7f, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:57 executing program 2 (fault-call:6 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:30:57 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x1}}, 0x1c) [ 777.696386] binder: 22546:22547 ERROR: BC_REGISTER_LOOPER called without request 22:30:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:57 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400040, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f00000000c0)=""/253, &(0x7f00000001c0)=0xfd) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000240)=0x6, 0xffffff97) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 777.749443] binder: 22546:22547 unknown command 0 [ 777.764528] binder: 22546:22547 ioctl c0306201 2000efd0 returned -22 22:30:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1ff, 0x4c000) dup2(r1, r1) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x101000, 0x49) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) kcmp(r3, r3, 0x7, r0, r0) setsockopt$packet_int(r0, 0x107, 0x22, &(0x7f0000000100)=0xf9, 0xfffffe28) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 777.817064] binder: BINDER_SET_CONTEXT_MGR already set [ 777.847476] binder: 22546:22572 ioctl 40046207 0 returned -16 [ 777.856180] binder: 22546:22574 ERROR: BC_REGISTER_LOOPER called without request 22:30:57 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1}}, 0x1c) 22:30:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 777.886597] binder_alloc: 22546: binder_alloc_buf, no vma [ 777.892407] binder: 22546:22547 transaction failed 29189/-3, size 0-0 line 2967 [ 777.906971] binder: 22546:22572 unknown command 0 [ 777.957377] binder: 22546:22572 ioctl c0306201 2000efd0 returned -22 [ 777.993987] binder: release 22546:22547 transaction 397 out, still active [ 778.001100] binder: undelivered TRANSACTION_COMPLETE [ 778.027113] binder: undelivered TRANSACTION_ERROR: 29189 [ 778.040374] binder: send failed reply for transaction 397, target dead 22:30:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x27}}, 0x1c) 22:30:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r1, 0x206, &(0x7f0000000200)={&(0x7f0000000140)="8f5d351b61fe4c9172eb53b6e6535711ea861144abd9e925548197d082fffa082986bd662c8235669e2ea27c9f2c6ad09eda5baa0f1b1bb4ce0aea74417a79286d6bf44c2c53c42b948f3fd4711869174921bb188cf2e6b878f326a5ecc9ee323a6a9b26a9746ca21dfbc679aeafb4232503bcd05bf21d8d86692c3683188c9e842377b0197ef27c2abee5c9963152fbfec4827ab0b64ba87bd4e7b3da1b4e4bd4f3dddcd31537c55a0266ec7af3478ff03b9ba1c34d466e61b2b94e", 0xbc}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) readahead(r0, 0xadf000000000, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x800}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r3, 0x0, 0x8, 0xb2, 0x401, 0x10000}, 0x14) sendfile(r0, r0, &(0x7f0000000240), 0x200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x101000, 0x0) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r4 = memfd_create(&(0x7f0000000000)='user/-vmnet1ppp1.\x00', 0x1) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x0, 0x0, 0x3c}}, 0x28) 22:30:58 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0x1}}, 0x1c) 22:30:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x5451, r1) 22:30:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7400, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x4e, &(0x7f0000000000)=0x100, 0xfffffea0) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 22:30:58 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000], 0x1}}, 0x1c) 22:30:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x301, r1) [ 778.723260] binder: 22609:22616 ERROR: BC_REGISTER_LOOPER called without request 22:30:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:30:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400900, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='system.sockprotoname\x00') r1 = socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r2, r0}}, 0x18) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000400)={0x5, 0x5, 0x100, 0x5, 0x8}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback={0x0, 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x3ff, 0x4e22, 0x9, 0xa, 0xa0, 0x80, 0x2, 0x0, r4}, {0x100, 0x6ec47270, 0x1ff, 0x21c, 0x2, 0xd4ac, 0x6, 0xff}, {0xffff, 0x0, 0x10000, 0x1}, 0x9, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d3, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0xffffffffffffe624, 0x1, 0x1, 0x810c, 0x62, 0x7fffffff, 0xffff}}, 0xe8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e21}, 0x10) 22:30:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x240040, 0x0) kexec_load(0x1, 0xfffffffffffffe31, &(0x7f0000000040), 0x2a0000) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) r2 = fcntl$getown(r0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='net/psched\x00', r0}, 0x10) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x3, 0x2, 0x2, r2}) [ 778.767784] binder: 22609:22616 unknown command 0 [ 778.783581] binder: 22609:22616 ioctl c0306201 2000efd0 returned -22 [ 778.810436] binder: BINDER_SET_CONTEXT_MGR already set 22:30:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:30:58 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x1}}, 0x1c) [ 778.840798] binder: 22609:22627 ioctl 40046207 0 returned -16 [ 778.880336] binder: 22609:22627 ERROR: BC_REGISTER_LOOPER called without request 22:30:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0xfff, 0x4) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="040300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x1, 0x9, "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", 0x4, 0x400, 0x360, 0x6, 0x1, 0x0, 0x92, 0x1}, r2}}, 0x120) [ 778.918651] binder_alloc: 22609: binder_alloc_buf, no vma [ 778.924406] binder: 22609:22616 transaction failed 29189/-3, size 0-0 line 2967 [ 778.950949] binder: 22609:22627 unknown command 0 [ 778.956918] binder: 22609:22627 ioctl c0306201 2000efd0 returned -22 [ 779.000916] binder: release 22609:22616 transaction 400 out, still active [ 779.008087] binder: undelivered TRANSACTION_COMPLETE [ 779.042129] binder: undelivered TRANSACTION_ERROR: 29189 [ 779.067770] binder: send failed reply for transaction 400, target dead 22:30:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x34000}}, 0x1c) 22:30:59 executing program 6: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)='+$cgroup$vmnet0&]vboxnet1\x00', 0x840, 0x0, &(0x7f00000000c0)={0x1ff, 0x6, 0x484, 0x2, 0x8001, 0x3ff, 0x1, 0x7}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x40044103, &(0x7f0000000040)) getpeername$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r1}) 22:30:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127a, r1) 22:30:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f00000000c0)=""/144, &(0x7f0000000000)=0x90) 22:30:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x1}}, 0x1c) 22:30:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000000c0), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x86, "bb5b872179d92dab7ef85a3c915e89a5b39b3b33624e975f28f7924686cd25f1c8e63ca290e51460b4d4a45212dfe5475cc976632f03b8ec6319e539329e3c26fcffee39039db65aab25fc75253cc38204477fd5a9b8ec0de4701e592522201cc461c864398720dda8d75326e957ad0ba50cfb298ff2356f99359216964e899b1788c3cd0464"}, &(0x7f0000000100)=0x8e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x3ff, @empty, 0xffffffffffffb09b}}, 0xfff, 0x7, 0xd9a, 0xffffffff, 0x82}, 0x98) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40000ae00008d4c94eaab1fdb940cc6047a468e890000000100000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 22:30:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4800, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:30:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 779.704684] binder: 22671:22672 ERROR: BC_REGISTER_LOOPER called without request 22:30:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c01, r1) 22:30:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)='^', 0x1}], 0x1, &(0x7f0000000300)}, 0x8000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000001c0)={r2, r3+10000000}) r4 = fcntl$dupfd(r1, 0x406, r0) write$P9_RSETATTR(r4, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) sendmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000300)}}, {{&(0x7f0000000a40)=@can={0x1d}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)}}], 0x2, 0x0) [ 779.750509] binder: 22671:22672 unknown command 0 22:30:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x103402) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000000c0)={@loopback, @multicast1, @local}, &(0x7f0000000100)=0xc) r2 = dup(r0) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) 22:30:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803], 0x1}}, 0x1c) [ 779.775076] binder: 22671:22672 ioctl c0306201 2000efd0 returned -22 [ 779.816388] binder: BINDER_SET_CONTEXT_MGR already set 22:30:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x28000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 779.852837] binder: 22671:22698 ioctl 40046207 0 returned -16 22:30:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x27, r2}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={'syz_tun\x00', {0x2, 0x0, @loopback=0x7f000001}}) pipe2(&(0x7f00000000c0), 0x4000) 22:30:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 22:30:59 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0x1}}, 0x1c) [ 779.909818] binder: 22671:22711 ERROR: BC_REGISTER_LOOPER called without request [ 779.940367] binder_alloc: 22671: binder_alloc_buf, no vma [ 779.946248] binder: 22671:22672 transaction failed 29189/-3, size 0-0 line 2967 [ 780.044150] binder: 22671:22698 unknown command 0 [ 780.056942] binder: 22671:22698 ioctl c0306201 2000efd0 returned -22 [ 780.089579] binder: undelivered TRANSACTION_ERROR: 29189 [ 780.106191] binder: send failed reply for transaction 403 to 22671:22672 [ 780.124957] binder: undelivered TRANSACTION_COMPLETE [ 780.130197] binder: undelivered TRANSACTION_ERROR: 29189 22:31:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 22:31:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x6000000, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:00 executing program 6: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0xfffffffffffffdb3, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000900080014cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 22:31:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0x1}}, 0x1c) 22:31:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1276, r1) 22:31:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x74, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="d1"]) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:31:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1260, r1) 22:31:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x80000, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 22:31:00 executing program 6: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) fallocate(r3, 0x0, 0x0, 0x8000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r0, r2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, {0xa, 0x4e21, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x10, [0x5, 0xfffffffffffeffff, 0xa2, 0x0, 0x2, 0x80, 0xaa0, 0x5]}, 0x5c) [ 780.703494] binder: 22750:22755 ERROR: BC_REGISTER_LOOPER called without request [ 780.731857] binder: 22750:22755 unknown command 0 [ 780.740802] binder: 22750:22755 ioctl c0306201 2000efd0 returned -22 22:31:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000], 0x1}}, 0x1c) [ 780.801645] binder: BINDER_SET_CONTEXT_MGR already set [ 780.835287] binder: 22750:22766 ioctl 40046207 0 returned -16 22:31:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127c, r1) 22:31:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0xc001) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x5, 0x101, r0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0xb2000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0), 0x1) 22:31:00 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0x1}}, 0x1c) [ 780.862967] binder: 22750:22766 ERROR: BC_REGISTER_LOOPER called without request [ 780.890290] binder_alloc: 22750: binder_alloc_buf, no vma [ 780.895953] binder: 22750:22755 transaction failed 29189/-3, size 0-0 line 2967 [ 780.900637] binder: 22750:22774 unknown command 0 [ 780.959020] binder: 22750:22774 ioctl c0306201 2000efd0 returned -22 [ 781.008243] binder: release 22750:22755 transaction 406 out, still active [ 781.015326] binder: undelivered TRANSACTION_COMPLETE [ 781.043183] binder: undelivered TRANSACTION_ERROR: 29189 [ 781.062673] binder: send failed reply for transaction 406, target dead 22:31:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x68, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x3a}}, 0x1c) 22:31:01 executing program 5: r0 = socket(0x15, 0x80005, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000000000), &(0x7f0000000ff8)=0x4) 22:31:01 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0x1}}, 0x1c) 22:31:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1265, r1) 22:31:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:01 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:01 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0x1}}, 0x1c) [ 781.663551] binder: 22802:22815 ERROR: BC_REGISTER_LOOPER called without request 22:31:01 executing program 5: set_mempolicy(0x8004, &(0x7f0000000540), 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24}}, 0x3b, 0x6, 0x4, 0x7, 0x3}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000100)={r0, 0x3}, &(0x7f0000000140)=0x8) 22:31:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xfeef, @local={0xfe, 0x80, [], 0xaa}, 0x7}, {0xa, 0x4e21, 0xfffffffffffffff9, @loopback={0x0, 0x1}, 0x9}, 0x5000000, [0x6, 0x28ce, 0x2, 0xffff, 0x1fda, 0xb1, 0x9cde, 0x1b9c]}, 0x5c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 781.714677] binder: 22802:22815 unknown command 0 22:31:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x4, 0x7, 0x4d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x85ffffff, 0x201a7fd7, 0xa, 0x0, 0xff00}], {0x95}}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xffe3, &(0x7f00001a7f05)=""/251}, 0x48) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) 22:31:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1267, r1) 22:31:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 781.742953] binder: 22802:22815 ioctl c0306201 2000efd0 returned -22 22:31:01 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x1}}, 0x1c) 22:31:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1264, r1) [ 781.819074] binder: BINDER_SET_CONTEXT_MGR already set 22:31:01 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffed8, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0xa4, 0x4f8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x5c, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000080)={0x0, 0x80000000, [0x0, 0x401]}) [ 781.875976] binder: 22802:22850 ERROR: BC_REGISTER_LOOPER called without request [ 781.897589] binder: 22802:22842 ioctl 40046207 0 returned -16 [ 781.922612] binder_alloc: 22802: binder_alloc_buf, no vma [ 781.928442] binder: 22802:22815 transaction failed 29189/-3, size 0-0 line 2967 [ 782.003820] binder: 22802:22842 unknown command 0 [ 782.016409] binder: 22802:22842 ioctl c0306201 2000efd0 returned -22 22:31:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x5, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 782.047442] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.063768] binder: send failed reply for transaction 409 to 22802:22815 [ 782.085236] binder: undelivered TRANSACTION_COMPLETE [ 782.090457] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.122602] binder: 22870:22871 ERROR: BC_REGISTER_LOOPER called without request [ 782.130576] binder: 22870:22871 unknown command 0 [ 782.135544] binder: 22870:22871 ioctl c0306201 2000efd0 returned -22 [ 782.142793] binder: BINDER_SET_CONTEXT_MGR already set [ 782.148162] binder: 22870:22872 ioctl 40046207 0 returned -16 [ 782.156641] binder: 22870:22872 ERROR: BC_REGISTER_LOOPER called without request [ 782.165466] binder: 22870:22872 unknown command 0 [ 782.165525] binder_alloc: 22870: binder_alloc_buf, no vma [ 782.170414] binder: 22870:22872 ioctl c0306201 2000efd0 returned -22 [ 782.175985] binder: 22870:22871 transaction failed 29189/-3, size 0-0 line 2967 [ 782.190486] binder: release 22870:22871 transaction 412 out, still active [ 782.197482] binder: undelivered TRANSACTION_COMPLETE [ 782.208213] binder: undelivered TRANSACTION_ERROR: 29189 [ 782.213779] binder: send failed reply for transaction 412, target dead 22:31:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xffffffe0}}, 0x1c) 22:31:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) openat$cgroup_int(r1, &(0x7f00000002c0)='memory.high\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1, 0x80) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000440)={{0x5, 0x4, 0x3, 0x27c, 'syz1\x00', 0x7}, 0x0, [0x1, 0x28000000000000, 0x7ff, 0x10000, 0x0, 0xfffffffffffff534, 0x2, 0x6, 0x4, 0x6, 0x2b0ed284, 0x0, 0x7, 0x0, 0x31, 0x6, 0x1f, 0xffff, 0x3, 0x8, 0x400, 0x2186, 0x7, 0x0, 0x5, 0x100, 0x20, 0x2, 0x7, 0x800, 0x100000001, 0x10001, 0x7fffffff, 0x9, 0x7, 0x6, 0x2, 0x1, 0x1, 0xa55c, 0x100000001, 0x1ff, 0x8000, 0x100000000, 0x20, 0x0, 0x0, 0x4, 0x3f, 0x0, 0x3f, 0x2, 0x6, 0xfffffffffffffffd, 0x19aa, 0x67, 0x101, 0x5, 0x1, 0x65c, 0x2, 0x3, 0x9, 0x81, 0x997, 0x0, 0x8, 0x1, 0x17e, 0x387, 0xfffffffffffffffe, 0x8, 0x1, 0x141, 0x7, 0x400, 0xffffffffffffffff, 0x1, 0x794, 0x4, 0x3f, 0x1f, 0x3, 0x263, 0x100000001, 0x3ff, 0x7ff, 0x4, 0x7fff, 0x6, 0x200, 0x2, 0x8, 0xffffffff, 0x401, 0x6, 0x100, 0xffff, 0x1, 0x8001, 0x1, 0x20, 0xd2, 0x7, 0x3f, 0x7, 0x3, 0x1, 0x0, 0xe5213a6, 0x0, 0x7fff, 0xf9d, 0x5, 0x5, 0x4b8, 0x7ff, 0x80, 0x3, 0x3f, 0x8, 0x80, 0x9d1c, 0x2, 0x3, 0x1, 0xffffffff, 0x8], {r3, r4+30000000}}) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000001c0)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$P9_RCLUNK(r2, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200002, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000380)=""/154) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18, 0x0, 0x7, {0x7fffffff}}, 0x18) 22:31:02 executing program 5: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2122, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x1000, &(0x7f0000000280)) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x2004, &(0x7f0000000280)) 22:31:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x8005001f}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x1}}, 0x1c) 22:31:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c06, r1) 22:31:02 executing program 6: r0 = socket$inet6(0xa, 0x8, 0xfffffffffffffffc) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@any=0xffffffff}) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0xffffffffffffff3c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 22:31:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x68000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 782.642889] binder: 22876:22878 ERROR: BC_REGISTER_LOOPER called without request 22:31:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001800)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xc78, 0x2040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xc6b, @ipv4={[], [0xff, 0xff]}, 0x3f}, @in6={0xa, 0x4e24, 0x100000000, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffddf0418c}}}, 0x118) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000107]}) [ 782.697704] binder: 22876:22878 unknown command 0 22:31:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x5, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 22:31:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x1}}, 0x1c) 22:31:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127e, r1) 22:31:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 782.721147] binder: 22876:22878 ioctl c0306201 2000efd0 returned -22 [ 782.744279] binder: BINDER_SET_CONTEXT_MGR already set [ 782.773235] binder: 22876:22898 ioctl 40046207 0 returned -16 22:31:02 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ee], 0x1}}, 0x1c) 22:31:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1278, r1) 22:31:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 782.830859] binder: 22876:22898 ERROR: BC_REGISTER_LOOPER called without request [ 782.862399] device lo left promiscuous mode [ 782.898944] binder_alloc: 22876: binder_alloc_buf, no vma [ 782.904657] binder: 22876:22878 transaction failed 29189/-3, size 0-0 line 2967 [ 782.954692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 782.962632] binder: 22876:22898 unknown command 0 [ 782.969461] binder: 22876:22898 ioctl c0306201 2000efd0 returned -22 [ 782.976622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 782.987193] binder: release 22876:22878 transaction 415 out, still active [ 782.994291] binder: undelivered TRANSACTION_COMPLETE [ 783.020181] binder: undelivered TRANSACTION_ERROR: 29189 [ 783.035205] binder: send failed reply for transaction 415, target dead [ 783.081410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:31:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2a}}, 0x1c) 22:31:03 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0x1}}, 0x1c) 22:31:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x5421, r1) 22:31:03 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) signalfd(r0, &(0x7f0000000080), 0x8) 22:31:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x74000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000000)={'teql0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}}}) 22:31:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x200440) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x15f, 0x3f, &(0x7f0000000140)={0xa, 0x200800800, 0x200000000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xc0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x240) recvmsg(r2, &(0x7f0000000540)={&(0x7f0000000180)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/232, 0xe8}], 0x3, &(0x7f00000004c0)=""/67, 0x43, 0x2}, 0x20) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x426000, 0x100) [ 783.680832] binder: 22944:22946 ERROR: BC_REGISTER_LOOPER called without request 22:31:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 783.726956] binder: 22944:22946 unknown command 0 [ 783.732458] binder: 22944:22946 ioctl c0306201 2000efd0 returned -22 [ 783.744578] binder: BINDER_SET_CONTEXT_MGR already set [ 783.774672] binder: 22944:22959 ioctl 40046207 0 returned -16 [ 783.801252] binder: 22944:22959 ERROR: BC_REGISTER_LOOPER called without request [ 783.826264] binder_alloc: 22944: binder_alloc_buf, no vma [ 783.831462] binder: 22944:22959 unknown command 0 [ 783.831964] binder: 22944:22946 transaction failed 29189/-3, size 0-0 line 2967 [ 783.838350] binder: 22944:22959 ioctl c0306201 2000efd0 returned -22 [ 783.847952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 783.869211] binder: release 22944:22946 transaction 418 out, still active [ 783.876307] binder: undelivered TRANSACTION_COMPLETE [ 783.898235] binder: undelivered TRANSACTION_ERROR: 29189 [ 783.904382] binder: send failed reply for transaction 418, target dead 22:31:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x6500}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401070c9, r1) 22:31:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x1}}, 0x1c) 22:31:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x700, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x5c080, 0x0) 22:31:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x5, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 22:31:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x4}}, 0x1c) 22:31:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c07, r1) 22:31:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0x1}}, 0x1c) [ 785.847307] binder: 22986:22992 ERROR: BC_REGISTER_LOOPER called without request [ 785.868795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 785.883213] binder: 22986:22992 unknown command 0 22:31:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 785.918905] binder: 22986:22992 ioctl c0306201 2000efd0 returned -22 [ 785.935308] binder: BINDER_SET_CONTEXT_MGR already set [ 785.941206] binder: 22986:23003 ioctl 40046207 0 returned -16 22:31:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127d, r1) 22:31:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0x1}}, 0x1c) 22:31:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 785.970603] binder: 22986:23003 ERROR: BC_REGISTER_LOOPER called without request [ 786.005409] binder_alloc: 22986: binder_alloc_buf, no vma [ 786.011156] binder: 22986:22992 transaction failed 29189/-3, size 0-0 line 2967 22:31:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80000000, 0x4) r1 = memfd_create(&(0x7f0000000040)='vmnet0\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x9, 0x7}, 'port1\x00', 0x1b, 0x40c4a, 0x2a1, 0x48ba940c, 0xad5, 0x800, 0x1, 0x0, 0x3, 0x4}) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x80081270, r1) [ 786.054194] binder: 22986:23003 unknown command 0 [ 786.059763] binder: 22986:23003 ioctl c0306201 2000efd0 returned -22 [ 786.089236] binder: release 22986:22992 transaction 421 out, still active [ 786.096479] binder: undelivered TRANSACTION_COMPLETE 22:31:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0x1}}, 0x1c) 22:31:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 786.130445] binder: undelivered TRANSACTION_ERROR: 29189 [ 786.177807] binder: send failed reply for transaction 421, target dead 22:31:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401070ca, r1) 22:31:05 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401], 0x1}}, 0x1c) 22:31:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockname$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x14) sendto$packet(r0, &(0x7f00000000c0)="dfbe18c5850b6a0ab08d87d3fdbe35f3e8eb9aa0ba4756e127557d2e2829281b35b81adbeffc7f171b2fe30d31a112a4d0a0a2d68c2bcc230e5c20398f254389f77463b7a64f9f2715534b61d24b2ffdd0c635e0e191db5212c5", 0x5a, 0x20000001, &(0x7f0000000240)={0x11, 0xfb, r1, 0x1, 0x3, 0x6}, 0x14) getsockname$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x4e, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x20) recvfrom(r0, &(0x7f0000000180)=""/36, 0x24, 0x20, &(0x7f0000000300)=@can={0x1d, r2}, 0x80) [ 786.479301] binder: 23035:23036 ERROR: BC_REGISTER_LOOPER called without request [ 786.487638] binder: 23035:23036 unknown command 0 [ 786.492680] binder: 23035:23036 ioctl c0306201 2000efd0 returned -22 [ 786.500274] binder: BINDER_SET_CONTEXT_MGR already set [ 786.505929] binder: 23035:23051 ioctl 40046207 0 returned -16 [ 786.514746] binder: 23035:23051 ERROR: BC_REGISTER_LOOPER called without request 22:31:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 786.524985] binder: 23035:23051 unknown command 0 [ 786.530409] binder_alloc: 23035: binder_alloc_buf, no vma [ 786.536145] binder: 23035:23036 transaction failed 29189/-3, size 0-0 line 2967 [ 786.536870] binder: 23035:23051 ioctl c0306201 2000efd0 returned -22 [ 786.561406] binder: release 23035:23036 transaction 424 out, still active [ 786.568454] binder: undelivered TRANSACTION_COMPLETE [ 786.580608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 786.588164] binder: undelivered TRANSACTION_ERROR: 29189 [ 786.608079] binder: send failed reply for transaction 424, target dead 22:31:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x5, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 22:31:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x25}}, 0x1c) 22:31:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x65000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c04, r1) 22:31:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0x1}}, 0x1c) 22:31:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) arch_prctl(0x1005, &(0x7f00000000c0)="6f5c02fb44bfc914650d761ad677f43998995a8e423e70097dc50d9db8aaf15f72cf6c5938131d3bb4012a07a9d6a82835c8c3421ee45edf848e7f3e4c895e54baacdc9b127a3b1e3a51f13499df84aaedba157899d9f38b064ee3ed313e4869012b") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd02000000000000008d0000f55dc62600009b000000faffffff00000000aeb46245004bae13d6642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4c, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127f, r1) 22:31:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1}}, 0x1c) 22:31:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) r2 = getgid() chown(&(0x7f0000000000)='./file0\x00', r1, r2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xb3a34be089995b66) pwrite64(r0, &(0x7f00000000c0)="54f038e982d6e3065448b2d855c92a3f8097af0bfeb46f836408679fc819909ae2a295aa9d5909c19d64b16d6c0989571abc1e7415645cf723aad39789c0bf25c7ec1fc5b0", 0x45, 0x0) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 786.886536] binder: 23068:23075 ERROR: BC_REGISTER_LOOPER called without request [ 786.917889] binder: 23068:23075 unknown command 0 22:31:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 786.939108] binder: 23068:23075 ioctl c0306201 2000efd0 returned -22 22:31:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1263, r1) [ 786.986699] binder: BINDER_SET_CONTEXT_MGR already set [ 787.002481] binder: 23068:23095 ioctl 40046207 0 returned -16 22:31:06 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0x1}}, 0x1c) 22:31:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/95, 0x5f}, {&(0x7f0000001540)=""/239, 0xef}], 0x8, &(0x7f00000016c0)=""/4096, 0x1000, 0x8001}, 0x12000) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000002700)=""/73, &(0x7f0000002780)=0x49) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x80, 0x42) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0xf636) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='GPL\x00', 0xffffffffffffff9c}, 0x10) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 787.049352] binder: 23068:23095 ERROR: BC_REGISTER_LOOPER called without request 22:31:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 787.093097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.119974] binder_alloc: 23068: binder_alloc_buf, no vma [ 787.126008] binder: 23068:23095 transaction failed 29189/-3, size 0-0 line 2967 [ 787.160647] binder: 23068:23110 unknown command 0 [ 787.182490] binder: 23068:23110 ioctl c0306201 2000efd0 returned -22 [ 787.222314] binder: undelivered TRANSACTION_ERROR: 29189 [ 787.228070] binder: send failed reply for transaction 427 to 23068:23075 [ 787.254380] binder: undelivered TRANSACTION_COMPLETE [ 787.259745] binder: undelivered TRANSACTION_ERROR: 29189 22:31:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x5, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 22:31:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1b}}, 0x1c) 22:31:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401870cc, r1) 22:31:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0x1}}, 0x1c) 22:31:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) r1 = memfd_create(&(0x7f0000000240)="62646576776c616e3047504c776c616e30ac6b657972696e6776626f786e657431706f7369785f61636c5f616363657373297573657270726f63285d232e5e2d00", 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x8000, 0xa09d8b186e75294, 0x6, 0x200000000}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r2, 0x9, 0x5, [0x8, 0x9, 0x7ff, 0x1000, 0x92]}, 0x12) 22:31:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4c00000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 787.817864] binder: 23132:23133 ERROR: BC_REGISTER_LOOPER called without request [ 787.837792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.851067] binder: 23132:23133 unknown command 0 22:31:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x125f, r1) 22:31:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000], 0x1}}, 0x1c) [ 787.865148] binder: 23132:23133 ioctl c0306201 2000efd0 returned -22 22:31:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 787.892882] binder: BINDER_SET_CONTEXT_MGR already set [ 787.908309] binder: 23132:23148 ioctl 40046207 0 returned -16 [ 787.939324] binder: 23132:23148 ERROR: BC_REGISTER_LOOPER called without request 22:31:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1}}, 0x1c) [ 787.981788] binder_alloc: 23132: binder_alloc_buf, no vma [ 787.982505] binder: 23132:23160 unknown command 0 [ 787.987551] binder: 23132:23148 transaction failed 29189/-3, size 0-0 line 2967 22:31:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x40049409, r1) 22:31:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xffffffffffffffd8) sendto$inet6(r0, &(0x7f00000000c0)="5c1e92af6b7abef0405d505a3e1c7922c91a36022b40e8a26f97812b32f38bbe25360c9790d37b8576d92128196bc7c65a56762bf7c32cecb44ff516b945ef62dcf4ff8c63fbf499770be2dd3b7309", 0x4f, 0x41, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x320f93a8d97972a4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x1) [ 788.074641] binder: 23132:23160 ioctl c0306201 2000efd0 returned -22 22:31:07 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ee], 0x1}}, 0x1c) [ 788.176228] binder: undelivered TRANSACTION_ERROR: 29189 [ 788.182358] binder: send failed reply for transaction 430 to 23132:23133 [ 788.213911] binder: undelivered TRANSACTION_COMPLETE [ 788.219192] binder: undelivered TRANSACTION_ERROR: 29189 22:31:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x5, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) 22:31:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2c}}, 0x1c) 22:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x5452, r1) 22:31:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/240, 0xf0}], 0x0, &(0x7f0000000300)=""/102, 0x23, 0x7fffffff}, 0x2143) recvfrom$unix(r1, &(0x7f0000000400)=""/180, 0xb4, 0x2001, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r2, 0x2, 0x70bd25, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x756}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000000000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c805) sendto$inet6(r1, &(0x7f0000000380)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x5a, 0x0, &(0x7f0000000080)={0xa, 0x2008007fd, 0x20000000005, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 22:31:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000], 0x1}}, 0x1c) 22:31:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x700000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0x1}}, 0x1c) 22:31:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffc01, 0x100) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0xff) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x141) [ 788.846602] binder: 23200:23203 ERROR: BC_REGISTER_LOOPER called without request [ 788.875951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 788.878938] binder: 23200:23203 unknown command 0 22:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401870c8, r1) [ 788.933292] binder: 23200:23203 ioctl c0306201 2000efd0 returned -22 22:31:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 788.979616] binder: BINDER_SET_CONTEXT_MGR already set [ 788.999182] binder: 23200:23221 ioctl 40046207 0 returned -16 22:31:08 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0x1}}, 0x1c) 22:31:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xffffffffffffffe5) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x80081272, r1) [ 789.027455] binder: 23200:23221 ERROR: BC_REGISTER_LOOPER called without request [ 789.068498] binder: 23200:23228 unknown command 0 [ 789.068527] binder_alloc: 23200: binder_alloc_buf, no vma [ 789.079103] binder: 23200:23221 transaction failed 29189/-3, size 0-0 line 2967 [ 789.105661] binder: 23200:23228 ioctl c0306201 2000efd0 returned -22 22:31:08 executing program 4: r0 = socket$packet(0x11, 0xd, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = syz_open_dev$mice(&(0x7f00000015c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r2, r3) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x2008007ff, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 789.329707] binder: undelivered TRANSACTION_ERROR: 29189 [ 789.335443] binder: send failed reply for transaction 433 to 23200:23203 [ 789.342520] binder: undelivered TRANSACTION_COMPLETE [ 789.347722] binder: undelivered TRANSACTION_ERROR: 29189 22:31:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() r1 = socket$inet(0x2, 0x5, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 22:31:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x3e}}, 0x1c) 22:31:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401070cd, r1) 22:31:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0x1}}, 0x1c) 22:31:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) splice(r0, &(0x7f0000000000), r0, &(0x7f00000000c0), 0x14000000, 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 22:31:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x4800000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 789.852624] binder: 23258:23259 ERROR: BC_REGISTER_LOOPER called without request [ 789.892484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:31:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x1269, r1) 22:31:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0x1}}, 0x1c) 22:31:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) [ 789.909381] binder: 23258:23259 unknown command 0 [ 789.921368] binder: 23258:23259 ioctl c0306201 2000efd0 returned -22 [ 789.944610] binder: BINDER_SET_CONTEXT_MGR already set 22:31:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 789.966231] binder: 23258:23275 ioctl 40046207 0 returned -16 22:31:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0x1}}, 0x1c) [ 790.011371] binder: 23258:23275 ERROR: BC_REGISTER_LOOPER called without request [ 790.048739] binder_alloc: 23258: binder_alloc_buf, no vma [ 790.049602] binder: 23258:23289 unknown command 0 [ 790.054472] binder: 23258:23275 transaction failed 29189/-3, size 0-0 line 2967 22:31:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x401870cb, r1) 22:31:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42080, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="29ee1c1b683744abe6ca6a0b78b869343207b52c14af4c2ca1798b83ae3c7194bd85ea1d298f7ee5159213d04a400293e96dbc3371b1ea7d2e53157ef6727b7ade3c832519da8abc86", 0x49, 0x20000080, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x1ff1}, 0x1c) 22:31:09 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0x1}}, 0x1c) [ 790.170293] binder: 23258:23289 ioctl c0306201 2000efd0 returned -22 [ 790.272300] binder: undelivered TRANSACTION_ERROR: 29189 [ 790.278174] binder: send failed reply for transaction 436 to 23258:23259 [ 790.291839] binder: undelivered TRANSACTION_COMPLETE [ 790.297075] binder: undelivered TRANSACTION_ERROR: 29189 22:31:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() r1 = socket$inet(0x2, 0x5, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 22:31:10 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x4, &(0x7f0000000080)={0xa, 0x2008007fc, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x19) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x204840, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r1, r2}}, 0x18) 22:31:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c) 22:31:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x1}}, 0x1c) 22:31:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x7a00, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x4c09, r1) 22:31:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x125d, r1) 22:31:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], 0x1}}, 0x1c) [ 790.856505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:31:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000980)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000b00)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=0x0) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000c00)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002240)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000002340)=0xe8) r11 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002600)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002700)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002b00)={{{@in6=@dev, @in=@broadcast}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002c00)=0xe8) lstat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000002c40)={'icmp\x00'}, &(0x7f0000002c80)=0x1e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)=0x0) getresuid(&(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) getresgid(&(0x7f0000002900), &(0x7f0000002940)=0x0, &(0x7f0000002980)) sendmsg$netlink(r1, &(0x7f0000002ac0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc, &(0x7f0000002580)=[{&(0x7f0000000380)={0x51c, 0x25, 0x208, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x6c, @fd=r0}, @generic="91fa1d895452600376cdd4dee096c4933c9688dcd3efe1457e2cdbed08a9030ac23ade4ced021006b3e33b37f2873aad265ac4b93b300128b96040d23a8f530909c2c6982a12a63925f4241cb91bb984a6767d6d48df595b2fb8ec4c264da389a8dbe9", @nested={0x208, 0x83, [@typed={0x8, 0x76, @fd=r0}, @generic="041464fc68f052b769fa17bd12f483a7eef7fd4494b70198c4af3ad59fa25c98bb7779255b8e8e759472ba0f310a10f92454338f3237728f6aa59fb82f6a1e12bdf51e65b65a50a520e80a2ef58b52d766c3b7593808d8694473", @generic="ec0e5a59d30d55c1a7ec1203bd475c51f477beebf96b10143b030390a2f5a094f285f168638bf36d3864cbcd19cd4348a3cb2b49212a7d29f0c91eb8233e25124b5983f66776b1014807751d5bb71a6d5284e159dabb78bf20636dc52ee92bf787447b54652631cc034eca12a6e3e02dfb20815e1708c351b557eadee8e25400c2548e2c69c7a0e624901e2fe6a27be70e8744683879c8c62e0c57175ae4f7cf7a9150ee27c5066aa7b777412a8684", @generic="c00cee92924f7e6e482ae474f6fa961a9c8279b384ac86039a26ae22eb453f513b08b71d82bbda57109cddd10db95be8f1b7365d277a0fe5f245e2b12b20157d8417faefa0855c18a75aabb73d90f34ededaac698ba58f4f8535cd0f19c40a30456a07013bf23b309c6525bd51534df91e7ef694674050402e51c863e552b8f0e408cc45abfaf5f54655b3f06efd230a07ac841997fc46fb4b33ccff15660676edf9d18856b0", @generic="ef360c0e16e2dcaa0dc3791c7b24c9527403ea73acf256e6fc5992acc743e91e678e25a925f0e662b986fea127e2af7473323a43577790296d0cff8b3422bb18fb03d584c0653b633170e17c"]}, @typed={0x8, 0x27, @uid=r2}, @nested={0x290, 0x70, [@typed={0xc, 0x20, @u64=0x2}, @generic="74f83e882f05c00c64b54060d7276181e0b991d0a90df10ea7110de4e0617f9e6f7082997bf65890d71382a27168c932139b3dd6d8f0fd42a727133470a2aebc21a2ecbce32c", @typed={0x14, 0x4c, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x4, @uid=r3}, @generic="d92632fb064b9b162f60e2e5fa50fb71ca64dd51a0d4af40beb84dae027461d0c0072649fd9cdb2b0a37925e028ea1c7a378d48d587e2859f46aa37f6531e3be4a884c00e42b0fb63734d26d4cf01c3083e3042892f0016797b2574c8eb1fa8691e3be01d43b98d874b31d42d64447943eece9a19d36f62f198c30547b43ffb233ae127c02025a1422145e8883cd2648fe9a0ad09af3431e1dc3a9f8de83aeb6a880dd7a9199712c66a9e9758ace", @generic="01f7cbef18bbcd9b44cff7dc1230a7b995af7899c61f53376a654e09442f7c702b0e46d6fe1f3e67176862604daf1db68a5c9c8445414dc2575be7ee0e5caaa4da66e83721914da2e12ced4a4454fe54d1da00d784a5258e861ca1a9cdf5e2a8c9c7b7571ff3f5c1e69e72d9482ed51d33ef83e1ef59", @typed={0x14, 0x80, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @generic="abfcad20bd38df14de98ad7921574ff5375516eb8b903347f5da71656a27a3cf9157f7c9b59d7b006e8d3c353396c8bd53049ef458193a6ec9fc88880f80c13425b2ee5458b70964c566886b3203ffdd46d12afc0cc55ad9c0ec21c1a348be8379692fe0cefd3c32b34967b6515706016f6fad1bc3a70c119d4cb26d303b2da9dbc532ead1587dca5359035fd2f738cd7b3adfb888689563089b4250d192f212f4f32bc1c3ef11aa9f173300935e339782ea8b685a4af765ef81c549bc51d2a25ce64ce4d9a99b724cec61f125ca42aecd04d625a762c3e8a7e9918905ef06bb10194f8e5d9f"]}]}, 0x51c}, {&(0x7f00000009c0)={0x24, 0x15, 0xf24, 0x70bd2a, 0x1, "", [@typed={0x8, 0x84, @uid=r4}, @typed={0x8, 0x13, @pid=r5}, @typed={0x4, 0x42}]}, 0x24}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="ec0000001100080428bd7000fddbdf2514003100000000000000000000000000000000013f05cfa359f676b60b74969ab3c3d225ce42b4b0fe69a8a494b26af53efe81a8e04d362526214d7d04ee225a70d6baf91a014a881dec034cb4117aed12679ae4976662b064652f1b75e01a3b295ccec0ab9de23551c33c57111b30a133e838c589fe61ad4df3a5c75d711547c2e5d1748a8b08bafc35f4c11fc1feab8fba57da5caec73dc9f46a3d0fff3f95c0b96be5f755aea908adcf8c101e35923c8f0aaab5776c57c6e5b1976a9b8f05c35015ec572d2b83962a8d7202279df06ef2ac43d7036ce3d1000000"], 0xec}, {&(0x7f0000000c40)={0x14d0, 0x20, 0x30c, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x7b}, @typed={0x8, 0xe, @fd=r0}, @nested={0x11c0, 0x80, [@typed={0x8, 0x7c, @u32=0xffffffffffffffc7}, @typed={0x8, 0x7d, @pid=r6}, @typed={0x8, 0x7d, @pid=r7}, @generic="1fbf8189b5bb21ece192863b76f9d8c274a484872454ad24b395df0ffb0927990073f5049986a9c93dc681c84b65dbf44962d5b0cedd67214fa322a3ff181b639bc8e48f688df46ec23c59a0b734f74fbae2f8f1180e5ce67d31032a0159b0ca16850e89af3c67e0670ffaaa9ded86876f9a373db61417b854f451e873df6dec8838438f1ca8616c3c4006fdc297d0b595ebc194f6e8c10e4353adbce9424cda30044ffa1beedd3635445c6c5410f4285041da0dbd5a8b454cc5591d632eaf414a321e5a8c46fd142bd17bdb91b97ac92a08e13d12d283bfc432bdbe1527d9", @generic="4c0b17fb5a8e3766d42b2e8ee23f5aa7b22b5ad765dafd98ad6db15accbb70fa17046a7ed685a84569316f43df6d4102ac40", @generic="a451f1bc16affa529d01797427e01aca632f272b79c3bedb4d682328a603022f4e5ef03076064ae784d59798fbd6f02be4253ec57d13d6d3147e9c136cac54904122d3b747b31fcedce72145a8567e3e785b5d4c3e545d277076b36744da7379bef2833f9cde86254c106dfbe569a9b9df15c60a99aa59b0e1761341fd8b529d228bfd3fb28d7defaa1144b2fe5eea53fe", @generic="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"]}, @generic="339ad85f75ede24ff02424af306f8e5e02ac20cd4d99f352d0f770f5c9de500e09aa41fb90ae169e516e9f0b5506fcef155be8c2c310dd44d300720921db1851c802e937aff84a3298b23749cbc44ff80cf407a5c1c4d4f5612cbbcd99773cac6552d909e18c40daf61f141bc3c764a61887c43406a171f3dc63fa2d180bcc479965ee5a7355fb9581d2e6126880d054db7aaad5ef1ae77c2c5787f67bcbc2709ec3cb5f72edaf2ecaeeeaea9a4b97748fc48c7c6aae0e539eb63446d4e38db5a430f3455e16a690813be2d91e4c7245e9947ec641214a0eb4ae2a2253d7ac3f675e1c2388", @nested={0x1b8, 0x33, [@typed={0x8, 0x35, @uid=r8}, @generic="107715e7fef3728014b355b86f61ca8177c5450dcb11fa84bc2a094efabf1f529a3fed081576ff02420ea0651834c32732696d88416806cc207b0d0fd2060d48100680e290424464dde5c07a7a717730921ddbfc4c26526ec373378ceaa62da804e8627941dcece04a1d6ae06f8400c093677e78356df9039590e34f2c1bdaab6848d65132419eb781f0b7e60a30b4880f3eebe9ab1860367971d2c2a74ea26852b444e8bdbd6812764d2bfb3c35166354a792ce3d7835", @generic="a8e92be09b6b9792ef07aea0323befce34b52a36e9718ead964b3290b51da5a58abe075fbc5b867820c08890a86e6b444eebc9c18053ae79690f8e2784970a3937ac2a2828ea2a1f7b7310c06ed426ac1e0637b44196b362da280220e841243f09b2fc4cf56c4340039870c325d3133a84cca4eb4c18d8e5fd77feb9b39cda23cb6856d323feed9b2cfa8e7ed0695af40ae261e11644086286f4d1b182346031c9e8bb35b45d642df53a723a09a15ee897e6bc59358baab00930c6dad03eb1428e60a94dd50eca3ea97909e3849855032feea53217cac0", @typed={0x8, 0x25, @pid=r9}, @typed={0x14, 0x58, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}, @typed={0x8, 0x5f, @str='\x00'}, @typed={0x8, 0x29, @fd=r0}, @generic="42841f57240d5012261753c862ce3502300af39bf0be888c4a9e778c9c27882f10370122f6afa378259bc3cc44679484f1f27145c9817bd6b261f924224676c09d7aeeacf8"]}, 0x14d0}, {&(0x7f0000002140)={0xfc, 0x28, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="bec9da920d3388c165a6207c978c80370120ff03ff94bd6d52c1591fc903a56b7962a91473c8eefea83eafd99926bb1d4984e7433297e7b6ea394a85b72b22aa3bc14c6dbec5cc673791a6dcaccfca98b91fa6c6dd124c51a7a6956d75077737c6eae20fb0a513621202f5b27b27d141a5c2db5aa7fdc84bfddd327f15db222c0e7449eb12250505b893c3bb14a283d7bffcc69562db7bdf82787c9474062a471fb50aa9cd4ea0aadf17e0889fad8a5a718966ac089416ce3ad39282be126ff5dc46081ebe05bc713a33eacaf082c57be9e0b317b5ee73", @typed={0xc, 0x47, @u64=0x95a}, @typed={0x8, 0x3d, @fd=r0}]}, 0xfc}, {&(0x7f0000002380)={0x1f4, 0x1e, 0xc08, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x1e4, 0x14, [@typed={0x8, 0x7b, @uid=r10}, @generic="df8a2318e999750c05e0f2f16f4d8995464ca5d08456d7f068e7853ff2fa6b2542", @typed={0x4, 0x96}, @generic="c70fb8d95a62b73618bafd7ab86b62a3a4315568b2780a991e4573e40bf6848a573576735e8e082f9233b813e6dd7a09176781af538c700e9deb75edf846bf538d0786d796d4141d093f2cc552a33e44d3c128998e412251cf98844af7525f71bbf387cc85909216799043b8db870f23981875ea6ab18c30658dc99f886565c980659262457529917cbe52bcec3fc07f1822f04dfbc713d575ce904348246576878e03acaa361212580961419ef596c43fc1ed11", @generic="e5abe946b2709edb45d56c48ead3a99c3c441b14c2ec91c2b74cb2c70c1d35fb02f21660f3aa1f84e2d019bc49f2d95c775671e0fb35e7aa31dfb5cd666d4948b6f9d3382f437a48d22aee1c3d92a5c99265f75457157f74bcb6e80fbbd8ee1f2588d9131d44bc11ce1c07db69dc7b6608425cf54c7e32b2a1d4dc1cbaa5f576bf19cb7e3eca12ff2444d8b3ee6d1859d8452e92519ac811570dadae4cb4a92066c5afd4993b591b750abda3384933558563d28e36c61f24a0167dcee1748259de1357c2c2ceb7aa3c320c6260fd90b791e9f95184", @typed={0x14, 0x7a, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @typed={0xc, 0xa, @u64=0x98c}, @typed={0x8, 0x7e, @u32=0x7ff}]}]}, 0x1f4}], 0x6, &(0x7f00000029c0)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0xc8, 0x20000011}, 0x40000) fcntl$setownex(r1, 0xf, &(0x7f0000002cc0)={0x2, r14}) [ 790.930512] binder: 23319:23321 ERROR: BC_REGISTER_LOOPER called without request [ 790.967402] binder: 23319:23321 unknown command 0 22:31:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0x1}}, 0x1c) 22:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0xc020660b, r1) [ 790.992542] binder: 23319:23321 ioctl c0306201 2000efd0 returned -22 [ 791.028287] binder: BINDER_SET_CONTEXT_MGR already set 22:31:10 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r1, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:10 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8], 0x1}}, 0x1c) [ 791.062114] binder: 23319:23351 ERROR: BC_REGISTER_LOOPER called without request [ 791.079642] binder: 23319:23349 ioctl 40046207 0 returned -16 [ 791.126825] binder_alloc: 23319: binder_alloc_buf, no vma [ 791.132576] binder: 23319:23351 transaction failed 29189/-3, size 0-0 line 2967 [ 791.200963] binder: 23319:23361 unknown command 0 [ 791.207585] binder: 23319:23361 ioctl c0306201 2000efd0 returned -22 22:31:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") gettid() r1 = socket$inet(0x2, 0x5, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001340)=""/219, 0xdb}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 22:31:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f00000000c0)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x1, &(0x7f0000000000)={0xa, 0x4e21, 0x20000000005, @remote={0xfe, 0x80, [], 0xbb}}, 0x557b01cb03443872) [ 791.302401] binder: undelivered TRANSACTION_ERROR: 29189 [ 791.308368] binder: send failed reply for transaction 439 to 23319:23321 [ 791.323190] binder: undelivered TRANSACTION_COMPLETE [ 791.328441] binder: undelivered TRANSACTION_ERROR: 29189 22:31:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x42}}, 0x1c) 22:31:11 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1}}, 0x1c) 22:31:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0xc0481273, r1) 22:31:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) 22:31:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x3ff, @local={0xfe, 0x80, [], 0xaa}, 0x80}, {0xa, 0x4e24, 0x101, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x6}, 0x3, [0x304e, 0xffffffffffff8000, 0x9, 0x6, 0x4, 0x40d, 0x8, 0xfffffffffffffffa]}, 0x5c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="e4830faf8011dcca8b23f35c0a6c1d4003aa1dd9f6e7a6e441fa6dffb1ee31c2fe09e46f9ec68fe37ee8825051fd9925681d3452b32f154b060a08786ec674ee5ba2256d31", 0x45, 0xfffffffffffffffa) keyctl$update(0x2, r5, &(0x7f00000003c0)="5c343a753c83e41095813739ad29edc2838e695817fb60e7708c8c9c4f390fefaa4fa35c01ab6c52085949e3d3b9e0f1532b7878c706fdb94c13fcde653c41af52e71012b1310ba10649abb18858caf144e3ce6f039bf3dcff3735ce37b3f7a9f294a78b59e25c0563be24c99e1c86e94e26041c6639031a5d236cfce798111102569f1c8a19df7af009d740b3e3", 0x8e) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="87b1c53a603094387998a813832df0caf8d17ea26178c104badc33c076815ef6cf91681234e16e4a166d19c782ca02d1165c0fcfc02434ccdfec7e58f2"], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01d966b9800000c00f326635000800000f300f01ca66b94a0200000f32b828000f00d8baf80c66b82024448d66efbafc0c66b80088000066ef0f140d670f3066b8000000000f23c00f21f86635030001000f23f8660f09", 0x58}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xf3, 0x8000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000001c0)=0xb0b, 0x4) sendto$inet6(r0, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 22:31:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x6000000000000000, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 22:31:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r2, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 791.874851] binder: 23389:23392 ERROR: BC_REGISTER_LOOPER called without request [ 791.896058] binder: 23389:23392 unknown command 0 [ 791.918100] binder: 23389:23392 ioctl c0306201 2000efd0 returned -22 [ 791.936128] WARNING: kernel stack frame pointer at 00000000dd2b4720 in syz-executor4:23395 has bad value 0000000035266bf0 [ 791.936140] unwind stack type:0 next_sp: (null) mask:0x2 graph_idx:0 [ 791.936153] 00000000d307878c: ffff8801b2e26b80 (0xffff8801b2e26b80) [ 791.936187] 00000000a5e29d4b: ffffffff812d369d (__save_stack_trace+0x7d/0xf0) [ 791.936192] 000000008f1ec963: 0000000000000000 ... [ 791.936202] 000000008a1bd6e7: ffff8801b2e20000 (0xffff8801b2e20000) [ 791.936212] 00000000f78e715f: ffff8801b2e28000 (0xffff8801b2e28000) 22:31:11 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0x1}}, 0x1c) 22:31:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000400008000c5, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(r0, 0x127b, r1) 22:31:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r2, &(0x7f0000000280)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 791.936217] 000000002616d809: 0000000000000000 ... [ 791.936225] 000000001b7077a7: 0000000000000002 (0x2) [ 791.936234] 0000000090fd08e4: ffff880198f2a680 (0xffff880198f2a680) [ 791.936243] 00000000dbfa684c: 0000010100000000 (0x10100000000) [ 791.936254] 00000000cb1132ef: ffff8801b2e27458 (0xffff8801b2e27458) [ 791.936262] 0000000038c2a725: ffff8801b2e26af0 (0xffff8801b2e26af0) [ 791.936280] 000000001c5817c2: ffffffff815f1750 (lock_release+0xa30/0xa30) [ 791.936285] 00000000beeee1a2: 0000000000000000 ... 22:31:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 791.936293] 00000000f34cc57e: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936310] 000000000db4bbe9: ffffffff8a603b58 (lock_classes+0x9b198/0x29fee0) [ 791.936324] 000000000e769f75: ffffffff8a241a68 (stack_trace+0x121148/0x400020) [ 791.936339] 000000001a5d9de1: ffffffff8a603b5c (lock_classes+0x9b19c/0x29fee0) [ 791.936346] 00000000c2d035dd: 0000000000000008 (0x8) [ 791.936354] 00000000caea43e1: ffff8801b2e26b90 (0xffff8801b2e26b90) [ 791.936368] 00000000003a0884: ffffffff812d372a (save_stack_trace+0x1a/0x20) [ 791.936377] 00000000c939fe29: ffff8801b2e26bd0 (0xffff8801b2e26bd0) [ 791.936391] 000000009341d9a0: ffffffff815e0c40 (save_trace+0xe0/0x290) [ 791.936399] 000000007ad3e489: ffff8801b2e26bb0 (0xffff8801b2e26bb0) [ 791.936408] 00000000b7e4e22a: 1ffff100365c4d81 (0x1ffff100365c4d81) [ 791.936417] 00000000de858161: ffff880198f2afa8 (0xffff880198f2afa8) [ 791.936426] 0000000007f566a6: ffff880198f2afc8 (0xffff880198f2afc8) [ 791.936434] 00000000a1ce690d: 0000000000000008 (0x8) [ 791.936442] 00000000fde86834: 0000000000000100 (0x100) [ 791.936452] 00000000e05bd15b: ffff8801b2e26d10 (0xffff8801b2e26d10) [ 791.936465] 000000006543447e: ffffffff815e8a9a (mark_lock+0x3aa/0x19f0) [ 791.936474] 00000000f1019a5a: ffff88019eaa65d0 (0xffff88019eaa65d0) [ 791.936487] 0000000029d7302f: ffffffff815e2225 (__lock_is_held+0xb5/0x140) [ 791.936495] 0000000091b9d58b: 0000000041b58ab3 (0x41b58ab3) [ 791.936504] 000000003115be7f: ffff880198f2a680 (0xffff880198f2a680) [ 791.936513] 00000000cd482fdc: ffff880100000008 (0xffff880100000008) [ 791.936521] 000000003698fffe: 0000000041b58ab3 (0x41b58ab3) 22:31:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 791.936535] 0000000014c51d07: ffffffff88bd7c30 (regoff.34024+0x36a210/0x37af60) [ 791.936548] 000000004e2df20a: ffffffff815e86f0 (print_usage_bug+0xc0/0xc0) [ 791.936563] 00000000b9144ede: ffffffff899f35f0 (offload_base+0x10/0x10) [ 791.936578] 0000000068b70fd3: ffffffff8a5689d0 (lock_classes+0x10/0x29fee0) [ 791.936588] 0000000013a2bdb8: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936598] 00000000c700383a: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.936607] 0000000001840907: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.936616] 00000000688cfa2e: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936623] 00000000806e4815: 1ffff100365c4d92 (0x1ffff100365c4d92) [ 791.936639] 00000000b7168aa1: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936652] 00000000570f0e0b: dffffc0000000000 (0xdffffc0000000000) [ 791.936677] 00000000a37e1002: ffffffff88f7b480 (root_cpuacct+0x1000/0x1000) [ 791.936687] 00000000cc719769: ffff8801afd00400 (0xffff8801afd00400) [ 791.936698] 00000000c41a2b95: ffff88019eaa6540 (0xffff88019eaa6540) [ 791.936709] 00000000120bcfc4: ffff88019eaa6610 (0xffff88019eaa6610) [ 791.936724] 00000000d4d0f11d: ffff8801b2e26eb0 (0xffff8801b2e26eb0) 22:31:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) [ 791.936745] 00000000ab11c684: ffffffff85f898f3 (dev_hard_start_xmit+0x173/0xc30) [ 791.936765] 00000000e6f967a7: ffffffff88bd7800 (regoff.34024+0x369de0/0x37af60) [ 791.936775] 00000000fcd5bcad: 1ffff100365c4d9d (0x1ffff100365c4d9d) [ 791.936790] 00000000229b017a: ffffffff8a603a70 (lock_classes+0x9b0b0/0x29fee0) [ 791.936797] 00000000fc2b80a1: 1ffff100365c4da1 (0x1ffff100365c4da1) [ 791.936806] 0000000079dc8117: ffffed00365c4da1 (0xffffed00365c4da1) [ 791.936815] 00000000c809e95c: ffff88019eaa6728 (0xffff88019eaa6728) [ 791.936824] 00000000642ece16: ffff8801b2e26c01 (0xffff8801b2e26c01) [ 791.936841] 0000000057bd14b1: ffffffff817c0c2a (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) [ 791.936849] 00000000ebaf14e5: ffff8801c9c2c700 (0xffff8801c9c2c700) [ 791.936858] 00000000aa8fcf82: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936865] 00000000846403c7: 0000000000000763 (0x763) [ 791.936875] 0000000084f33fe0: ffff880198f2afca (0xffff880198f2afca) [ 791.936882] 000000007499e1fc: 0000000000000007 (0x7) [ 791.936891] 00000000ea4ac45c: ffff880198f2a680 (0xffff880198f2a680) [ 791.936898] 000000003f39d3ea: 000000000000000c (0xc) [ 791.936907] 0000000052dbda05: ffff8801b2e270a8 (0xffff8801b2e270a8) [ 791.936922] 00000000a6dc2ae0: ffffffff815eb00c (__lock_acquire+0x7fc/0x5020) [ 791.936930] 0000000008b1fc78: ffff8801b2e26d98 (0xffff8801b2e26d98) [ 791.936947] 00000000960a9a88: ffffffff86926a0f (validate_xmit_xfrm+0x1ef/0xdc0) [ 791.936953] 000000006eb6a7f6: 0000000000000000 ... [ 791.936961] 0000000076f03b5e: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.936969] 000000009a2cecc6: ffff880198f2af00 (0xffff880198f2af00) [ 791.936977] 00000000be71225c: ffff88019e45c928 (0xffff88019e45c928) [ 791.936984] 00000000635bff21: ffff880198f2a680 (0xffff880198f2a680) [ 791.936987] 00000000e7aa1aff: 0000000000000000 ... [ 791.936995] 00000000949522a1: 0000000000000001 (0x1) [ 791.937000] 00000000dd834bdf: 0000000000000000 ... [ 791.937009] 000000001ff35eda: ffff8801b2e26e90 (0xffff8801b2e26e90) [ 791.937024] 000000000f87ee21: ffffffff815f1934 (lock_acquire+0x1e4/0x540) [ 791.937033] 00000000b6bf96de: ffff880198f2afc0 (0xffff880198f2afc0) [ 791.937042] 000000001869183d: ffffffff00000006 (0xffffffff00000006) [ 791.937051] 00000000e8bc2543: ffff880198f2afc8 (0xffff880198f2afc8) [ 791.937059] 000000000e917578: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.937068] 0000000002f68c56: ffff880198f2afa8 (0xffff880198f2afa8) [ 791.937077] 00000000c80f9403: ffff880198f2aeb8 (0xffff880198f2aeb8) [ 791.937085] 00000000747a1c35: 1ffff100365c4db8 (0x1ffff100365c4db8) [ 791.937090] 00000000a1fd0069: 0000000000000000 ... [ 791.937098] 0000000048c72f12: 0000000041b58ab3 (0x41b58ab3) [ 791.937114] 0000000018a1c9f0: ffffffff88bf1308 (K512_4+0x6788/0x12085c) [ 791.937130] 00000000e0720cfc: ffffffff815ea810 (trace_hardirqs_on+0x10/0x10) [ 791.937145] 00000000e94d1368: ffffffff815f1750 (lock_release+0xa30/0xa30) [ 791.937152] 000000000d7296d6: 0000000041b58ab3 (0x41b58ab3) [ 791.937174] 00000000df8b2f98: ffffffff88bd5e44 (regoff.34024+0x368424/0x37af60) [ 791.937192] 0000000022b8735f: ffffffff85f88080 (netif_skb_features+0xb70/0xb70) [ 791.937196] 000000005e960ed5: 0000000000000000 ... [ 791.937209] 0000000062b9b958: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.937218] 000000005402b303: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.937225] 00000000812cd5e1: 0000000000000001 (0x1) [ 791.937230] 00000000e520da0b: 0000000000000000 ... [ 791.937245] 000000009ccf580d: ffffffff89f5c5a8 (lock_chains+0x43ea8/0x200020) [ 791.937250] 0000000034c9aaff: 0000000000000000 ... [ 791.937259] 0000000006a8ce80: ffff88019ea0c340 (0xffff88019ea0c340) [ 791.937268] 0000000091f83256: ffff88019ea0c348 (0xffff88019ea0c348) [ 791.937278] 000000000486053d: ffff88019ea0c350 (0xffff88019ea0c350) [ 791.937287] 00000000c543e06a: ffff8801b2e26e58 (0xffff8801b2e26e58) [ 791.937303] 00000000672b8044: ffffffff81b9da54 (kasan_check_write+0x14/0x20) [ 791.937313] 00000000d4dd5cb4: ffff8801b2e26e90 (0xffff8801b2e26e90) [ 791.937327] 00000000b389ef95: ffffffff816017a1 (do_raw_spin_lock+0xc1/0x200) [ 791.937337] 000000003c9de80b: ffff88019ea0c340 (0xffff88019ea0c340) [ 791.937347] 000000009c5067bb: ffff88019ea0c340 (0xffff88019ea0c340) [ 791.937356] 000000005b8a2102: ffff88019ea0c2c0 (0xffff88019ea0c2c0) [ 791.937366] 0000000028241823: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.937375] 000000009a810b78: ffff8801b2e26fa8 (0xffff8801b2e26fa8) [ 791.937384] 00000000e58145fc: ffff88019ea0c2c0 (0xffff88019ea0c2c0) [ 791.937393] 000000005598f286: ffff8801afd00400 (0xffff8801afd00400) [ 791.937403] 00000000feb38ae8: ffff88019c376940 (0xffff88019c376940) [ 791.937412] 000000002215a699: ffff88019eaa6610 (0xffff88019eaa6610) [ 791.937421] 000000002ab5021c: ffff8801b2e26fd0 (0xffff8801b2e26fd0) [ 791.937436] 000000009a12cab6: ffffffff860c87c6 (sch_direct_xmit+0x486/0x1140) [ 791.937445] 00000000cf2cb5c7: ffff88019c376940 (0xffff88019c376940) [ 791.937454] 000000009629b205: 0000000041b58ab3 (0x41b58ab3) [ 791.937469] 000000002184fdd9: ffffffff88bdf618 (regoff.34024+0x371bf8/0x37af60) [ 791.937482] 00000000619b6b81: ffffffff860c35e0 (noqueue_init+0x40/0x40) [ 791.937487] 00000000a88bdc6f: 0000000000000000 ... [ 791.937496] 000000002beebc0a: ffff8801b2e26f68 (0xffff8801b2e26f68) [ 791.937506] 000000004ef072de: 1ffff100365c4de1 (0x1ffff100365c4de1) [ 791.937510] 00000000bdc57d96: 0000000000000000 ... [ 791.937519] 000000004904994a: ffff88019eaa6540 (0xffff88019eaa6540) [ 791.937528] 00000000ec816361: 0000000041b58ab3 (0x41b58ab3) [ 791.937541] 0000000042635bbf: ffffffff88ccdf8f (K512_4+0xe340f/0x12085c) [ 791.937554] 000000007093f90d: ffffffff860c8340 (dev_watchdog+0xb10/0xb10) [ 791.937563] 00000000ac6dce73: ffffed00331e55d6 (0xffffed00331e55d6) [ 791.937572] 000000000b52725e: ffff880198f2ae00 (0xffff880198f2ae00) [ 791.937580] 000000008dc2e847: 0000000000000002 (0x2) [ 791.937589] 000000009fef9361: ffff8801b2e26f88 (0xffff8801b2e26f88) [ 791.937603] 00000000c6ec1acd: ffffffff815e2225 (__lock_is_held+0xb5/0x140) [ 791.937612] 0000000072603c55: ffffffffb2e26fd0 (0xffffffffb2e26fd0) [ 791.937622] 0000000065c95123: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.937636] 000000004c37101f: ffffffff88f925a0 (rcu_callback_map+0x40/0x40) [ 791.937643] 00000000b07f0a3d: 0000000000000286 (0x286) [ 791.937653] 00000000194edb83: ffff880100000010 (0xffff880100000010) [ 791.937666] 00000000b48dfbfc: ffffffff88f925a0 (rcu_callback_map+0x40/0x40) [ 791.937673] 000000009aa8fc0b: ffff88019c376940 (0xffff88019c376940) [ 791.937681] 00000000d32c3de2: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.937691] 00000000a29bad7c: ffff8801b2e26fb8 (0xffff8801b2e26fb8) [ 791.937699] 0000000001538360: 0000000000000286 (0x286) [ 791.937704] 0000000051e29542: 0000000000000000 ... [ 791.937713] 00000000036084c7: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.937718] 00000000a5252733: 0000000000000000 ... [ 791.937725] 0000000002c179b8: ffff88019ea0c2c0 (0xffff88019ea0c2c0) [ 791.937733] 00000000509fe9e1: dffffc0000000000 (0xdffffc0000000000) [ 791.937743] 00000000a32efb8d: ffff88019c376940 (0xffff88019c376940) [ 791.937750] 000000002294494d: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.937758] 00000000ac0fca89: ffff8801b2e27198 (0xffff8801b2e27198) [ 791.937769] 00000000c227782e: ffffffff860c9a99 (__qdisc_run+0x619/0x19f0) [ 791.937777] 000000003fe0b810: ffff8801b2e27070 (0xffff8801b2e27070) [ 791.937784] 0000000056f759a3: 1ffff100365c4e0a (0x1ffff100365c4e0a) [ 791.937796] 0000000036308db9: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.937804] 00000000681c5eac: ffffed00365c4e0e (0xffffed00365c4e0e) [ 791.937812] 00000000143a3221: ffff88019c376948 (0xffff88019c376948) [ 791.937820] 000000001654714a: 1ffff100365c4e06 (0x1ffff100365c4e06) [ 791.937833] 00000000c520f84a: ffffffff899ed160 (__cpu_present_mask+0x8/0x8) [ 791.937840] 00000000741787ab: ffff88019c376980 (0xffff88019c376980) [ 791.937849] 00000000262937b9: ffff88019c3769c0 (0xffff88019c3769c0) [ 791.937857] 000000009743e54e: 3aee86f4ffffff01 (0x3aee86f4ffffff01) [ 791.937866] 0000000091bf65b8: ffff88019c376950 (0xffff88019c376950) [ 791.937874] 00000000888d8bbe: 00000040365c4e17 (0x40365c4e17) [ 791.937881] 000000006b28a8b4: 0000000000000001 (0x1) [ 791.937889] 00000000503bfb17: ffff88019ea0c2c0 (0xffff88019ea0c2c0) [ 791.937897] 0000000098a99289: 0000000041b58ab3 (0x41b58ab3) [ 791.937908] 00000000885ec6f3: ffffffff88bd7188 (regoff.34024+0x369768/0x37af60) [ 791.937921] 000000002e952352: ffffffff860c9480 (sch_direct_xmit+0x1140/0x1140) [ 791.937928] 000000002807afd0: 0000000000000001 (0x1) [ 791.937932] 000000002dfd4a9a: 0000000000000000 ... [ 791.937940] 00000000af414281: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.937949] 00000000d3a2e247: 1ffff100365c4e20 (0x1ffff100365c4e20) [ 791.937957] 000000008e63b0a3: ffff880198f2a680 (0xffff880198f2a680) [ 791.937962] 00000000679e95b2: 0000000000000000 ... [ 791.937970] 00000000d559f312: 0000000000000001 (0x1) [ 791.937974] 000000000fb50e8d: 0000000000000000 ... [ 791.937982] 0000000074ca6f2a: ffff8801b2e271c8 (0xffff8801b2e271c8) [ 791.937995] 000000000fd21fa6: ffffffff815f1934 (lock_acquire+0x1e4/0x540) [ 791.938000] 000000007da037d5: 0000000000000000 ... [ 791.938013] 000000003dff24b3: ffffffff81b9e97e (kasan_report+0x8e/0x110) [ 791.938019] 000000003c5750ff: 0000000000000000 ... [ 791.938037] 000000001131e5ff: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.938053] 00000000e390f4e1: ffffffff815f1750 (lock_release+0xa30/0xa30) [ 791.938061] 000000002ad9f337: 0000000000000086 (0x86) [ 791.938068] 0000000052c5fedd: 00000000b2e27188 (0xb2e27188) [ 791.938083] 00000000db29e534: ffffffff89029cd8 (report_lock+0x18/0x40) [ 791.938091] 000000000aed230c: 0000000041b58ab3 (0x41b58ab3) [ 791.938103] 000000005a8930c5: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.938116] 0000000070e61733: ffffffff815f1750 (lock_release+0xa30/0xa30) [ 791.938121] 00000000de3e3542: 0000000000000000 ... [ 791.938128] 0000000011064908: ffffffff00000000 (0xffffffff00000000) [ 791.938140] 0000000007407cb7: ffffffff860c4720 (mini_qdisc_pair_init+0x160/0x160) [ 791.938144] 000000001b98a3ca: 0000000000000000 ... [ 791.938153] 0000000028c99718: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.938176] 000000008e8612e1: ffffffff88f925a0 (rcu_callback_map+0x40/0x40) [ 791.938182] 00000000867bb79e: 0000000000000000 ... [ 791.938194] 00000000106b7ade: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.938203] 000000000337a54f: ffff88019c376b78 (0xffff88019c376b78) [ 791.938210] 00000000d6015d7d: 0000000000000000 ... [ 791.938221] 000000008271684f: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.938230] 00000000fe71be97: ffff88019c376a78 (0xffff88019c376a78) [ 791.938236] 000000009c222b75: 0000000000000000 ... [ 791.938247] 000000005375a800: ffff88019c376940 (0xffff88019c376940) [ 791.938255] 000000007c48d9ab: 0000000000000100 (0x100) [ 791.938265] 0000000054464db7: ffff88019c376a70 (0xffff88019c376a70) [ 791.938274] 000000003c437d92: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.938289] 0000000077b6de6f: ffffffff89029cc0 (kmem_cache_boot+0x320/0x320) [ 791.938296] 0000000028312c9e: 0000000000000086 (0x86) [ 791.938301] 0000000048d091d8: 0000000000000000 ... [ 791.938317] 00000000d78aa4b3: ffffffff81365ee6 (fixup_exception+0xc6/0xcb) [ 791.938321] 00000000119a6f34: 0000000000000000 ... [ 791.938330] 00000000d09db23e: ffff8801b2e271f0 (0xffff8801b2e271f0) [ 791.938347] 00000000ca1fc683: ffffffff87940bb6 (_raw_spin_lock_irqsave+0x96/0xc0) [ 791.938357] 00000000d236a9ff: ffffffff81b9e97e (kasan_report+0x8e/0x110) [ 791.938365] 00000000fcd5f062: ffff8801b2e27348 (0xffff8801b2e27348) [ 791.938373] 000000006b1c81b4: 0000000000000008 (0x8) [ 791.938380] 000000000da66f86: ffff8801b2e27238 (0xffff8801b2e27238) [ 791.938392] 000000007d1711cf: ffffffff81b9e97e (kasan_report+0x8e/0x110) [ 791.938404] 00000000324f98cf: ffffffff816677a0 (rcu_report_qs_rnp+0x7a0/0x7a0) [ 791.938411] 0000000007ce5bb1: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.938418] 000000001d27a006: ffff8801b2e272c8 (0xffff8801b2e272c8) [ 791.938426] 0000000029a8b0ec: ffff880198f2a680 (0xffff880198f2a680) [ 791.938433] 00000000074bfd15: ffff8801b2e272c8 (0xffff8801b2e272c8) [ 791.938439] 00000000fb16ecaa: 000000000000000d (0xd) [ 791.938442] 00000000ad1885d4: 0000000000000000 ... [ 791.938450] 00000000b397a762: ffff8801b2e27248 (0xffff8801b2e27248) [ 791.938462] 000000000da6b591: ffffffff81b9ea74 (__asan_report_load8_noabort+0x14/0x20) [ 791.938470] 000000006ade75cc: ffff8801b2e27278 (0xffff8801b2e27278) [ 791.938482] 00000000cd57f1ce: ffffffff81365ee6 (fixup_exception+0xc6/0xcb) [ 791.938491] 00000000d87b605c: ffff8801b2e272c8 (0xffff8801b2e272c8) [ 791.938500] 0000000060fbf76e: ffff880198f2a680 (0xffff880198f2a680) [ 791.938504] 0000000058a6255f: 0000000000000000 ... [ 791.938512] 000000000dff31bb: ffff8801b2e272b8 (0xffff8801b2e272b8) [ 791.938526] 00000000626bf62f: ffffffff8129cac3 (do_general_protection+0x1c3/0x2f0) [ 791.938534] 0000000066ef7347: 0000000087a00a07 (0x87a00a07) [ 791.938541] 0000000037fea57a: 0000000000000001 (0x1) [ 791.938545] 00000000d5c26829: 0000000000000000 ... [ 791.938554] 00000000bc980ee2: ffff8801b2e272c9 (0xffff8801b2e272c9) [ 791.938565] 000000006723023c: ffffffff87a00f9e (general_protection+0x1e/0x30) [ 791.938570] 00000000288050b6: 0000000000000000 ... [ 791.938578] 00000000d95ae78d: ffff8801b2e27458 (0xffff8801b2e27458) [ 791.938587] 00000000cf8bcee8: 0000000010000000 (0x10000000) [ 791.938591] 00000000ce251a17: 0000000000000000 ... [ 791.938600] 00000000b7f5e222: ffff880198f2a680 (0xffff880198f2a680) [ 791.938608] 000000003f82814e: 1ffff100365c4e83 (0x1ffff100365c4e83) [ 791.938616] 0000000015163f2c: ffffc90002a12000 (0xffffc90002a12000) [ 791.938623] 00000000476514f1: 1ffff100331e55d7 (0x1ffff100331e55d7) [ 791.938638] 0000000068bf91c9: ffffffff811f4727 (vmx_vcpu_run+0x1307/0x2600) [ 791.938645] 000000005bdea1e8: 0000000000000005 (0x5) [ 791.938653] 0000000030979fab: ffffffffffffffff (0xffffffffffffffff) [ 791.938666] 00000000667f78eb: ffffffff811f4748 (vmx_vcpu_run+0x1328/0x2600) [ 791.938672] 00000000d3fd9b39: 0000000000000010 (0x10) [ 791.938680] 00000000d5ecdf4a: 0000000000010046 (0x10046) [ 791.938688] 00000000a4580412: ffff8801b2e27370 (0xffff8801b2e27370) [ 791.938696] 00000000cd536266: 0000000000000018 (0x18) [ 791.938704] 00000000dca12b52: 1ffff100365c4e83 (0x1ffff100365c4e83) [ 791.938713] 000000000ad0ac11: ffff880198f2aeb8 (0xffff880198f2aeb8) [ 791.938722] 00000000f19c5027: ffff88019c77e688 (0xffff88019c77e688) [ 791.938730] 000000003d8d582a: ffff88019c77e688 (0xffff88019c77e688) [ 791.938735] 00000000351fafad: 0000000000000000 ... [ 791.938743] 00000000d88610ee: ffff8801b2e273e0 (0xffff8801b2e273e0) [ 791.938758] 00000000d3a6008c: ffffffff815e1fe6 (find_held_lock+0x36/0x1c0) [ 791.938767] 00000000fe38bd96: 00000001b2e273b8 (0x1b2e273b8) [ 791.938776] 000000006abeac8e: ffff8801b2e27438 (0xffff8801b2e27438) [ 791.938785] 00000000b7dadfe6: 1ffff100365c4e83 (0x1ffff100365c4e83) [ 791.938793] 000000007b4a2214: ffff8801b2e274f8 (0xffff8801b2e274f8) [ 791.938802] 000000001625208e: ffff88019c77e688 (0xffff88019c77e688) [ 791.938811] 00000000784b6c7e: ffff880198f2a680 (0xffff880198f2a680) [ 791.938820] 00000000bdba5c14: ffff8801b2e27438 (0xffff8801b2e27438) [ 791.938828] 00000000e4bf1fbe: ffff8801b2e27520 (0xffff8801b2e27520) [ 791.938835] 00000000e0af99a9: 0000000000000286 (0x286) [ 791.938840] 0000000054193d42: 0000000000000000 ... [ 791.938848] 000000003f832237: ffff880100000001 (0xffff880100000001) [ 791.938857] 00000000a36cd698: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.938864] 00000000268984f0: 0000000000000286 (0x286) [ 791.938872] 000000009218bbe9: ffffffff00000001 (0xffffffff00000001) [ 791.938880] 00000000b65360b0: 0000000041b58ab3 (0x41b58ab3) [ 791.938894] 00000000ca0ec8da: ffffffff88bf1398 (K512_4+0x6818/0x12085c) [ 791.938907] 000000009320ce9f: ffffffff815f0d20 (lock_downgrade+0x8f0/0x8f0) [ 791.938916] 0000000033162354: 0000000000000500 (0x500) [ 791.938922] 00000000025d5f36: 0000000000000000 ... [ 791.938932] 000000002084b3c7: ffff88019c77e688 (0xffff88019c77e688) [ 791.938941] 000000001cce91d3: 0000000041b58ab3 (0x41b58ab3) [ 791.938959] 00000000dd2b4720: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.938974] 00000000423f1c0b: ffffffff815f1750 (lock_release+0xa30/0xa30) [ 791.938988] 0000000006c157f6: ffffffff88be6507 (regoff.34024+0x378ae7/0x37af60) [ 791.939002] 0000000050e62de3: ffffffff81542620 (check_same_owner+0x340/0x340) [ 791.939011] 00000000626e8fb3: ffff8801b2e274b0 (0xffff8801b2e274b0) [ 791.939024] 00000000a7ee06bc: ffffffff85ef9b5e (skb_set_owner_w+0x24e/0x360) [ 791.939030] 000000006a73e029: 0000000000000000 ... [ 791.939039] 0000000032c7251d: ffff8801afd007c0 (0xffff8801afd007c0) [ 791.939048] 0000000044e1d460: ffff8801b2e276c0 (0xffff8801b2e276c0) [ 791.939055] 000000008696da64: 0000000000034000 (0x34000) [ 791.939063] 00000000339801bb: dffffc0000000000 (0xdffffc0000000000) [ 791.939067] 000000008a3406bc: 0000000000000000 ... [ 791.939076] 00000000d6c26fa4: ffff880198f2a680 (0xffff880198f2a680) [ 791.939092] 0000000011df9c85: ffffffff881a3c60 (guid_null+0x120/0x560) [ 791.939099] 00000000e53036c6: 0000000000000285 (0x285) [ 791.939103] 00000000b624b512: 0000000000000000 ... [ 791.939109] 000000006a36526e: 0000000000000062 (0x62) [ 791.939116] 000000009d12467c: 00000000200002ec (0x200002ec) [ 791.939123] 00000000add7e1d9: 000000002000028a (0x2000028a) [ 791.939132] 0000000034b8eb5a: ffff8801b2e27508 (0xffff8801b2e27508) [ 791.939147] 000000005426a2de: ffffffff81b9da54 (kasan_check_write+0x14/0x20) [ 791.939157] 0000000032ca6da5: ffff8801b2e27548 (0xffff8801b2e27548) [ 791.939173] 00000000c6d8b7ce: ffff88019c376940 (0xffff88019c376940) [ 791.939180] 00000000c4fcb61f: 0000000000000000 ... [ 791.939189] 00000000f58a7111: 0000000000000062 (0x62) [ 791.939199] 0000000070854bd7: 000000000000006c (0x6c) [ 791.939205] 00000000817df4dc: 0000000000000000 ... [ 791.939216] 000000001c0d4f50: ffff8801b2e27548 (0xffff8801b2e27548) [ 791.939235] 000000009573d37d: ffffffff817c0c08 (__sanitizer_cov_trace_cmp8+0x18/0x20) [ 791.939245] 000000000b12126d: ffff8801b2e27660 (0xffff8801b2e27660) [ 791.939252] 0000000096aa120b: 0000000000000000 ... [ 791.939271] 0000000082d5a383: ffffffff817c0c08 (__sanitizer_cov_trace_cmp8+0x18/0x20) [ 791.939281] 0000000082be9464: ffff8801b2e27660 (0xffff8801b2e27660) [ 791.939295] 0000000068128dfe: ffffffff81c24e6d (__check_object_size+0x9d/0x5f2) [ 791.939304] 0000000058d2bf6a: 0000000041b58ab3 (0x41b58ab3) [ 791.939313] 00000000f0393536: ffff8801b2e27ca0 (0xffff8801b2e27ca0) [ 791.939322] 00000000648550b3: ffff8801b2e27c90 (0xffff8801b2e27c90) [ 791.939330] 00000000084690ac: ffff8801af2cb774 (0xffff8801af2cb774) [ 791.939340] 00000000e9b8cdcd: ffff8801b2e27c98 (0xffff8801b2e27c98) [ 791.939348] 00000000210e899c: 0000000041b58ab3 (0x41b58ab3) [ 791.939357] 00000000439d8289: 1ffff100365c4ebb (0x1ffff100365c4ebb) [ 791.939373] 00000000426b82fc: ffffffff81c24dd0 (usercopy_warn+0x120/0x120) [ 791.939381] 00000000b01a6e6e: 000000000000006c (0x6c) [ 791.939389] 00000000870b6843: ffff8801b2e27c48 (0xffff8801b2e27c48) [ 791.939399] 00000000254be3eb: ffff8801b2e27c40 (0xffff8801b2e27c40) [ 791.939408] 00000000082eec71: ffff8801af2cb774 (0xffff8801af2cb774) [ 791.939416] 00000000a273a4c2: 0000000000000062 (0x62) [ 791.939424] 0000000053aec4db: 0000000041b58ab3 (0x41b58ab3) [ 791.939438] 000000009ac07220: ffffffff88c57cfc (K512_4+0x6d17c/0x12085c) [ 791.939455] 00000000fcb69abd: ffffffff835dafc0 (_copy_from_iter_nocache+0x1050/0x1050) [ 791.939460] 00000000dd3412bb: 0000000000000000 ... [ 791.939471] 00000000e134e4d7: ffffea000656fa08 (0xffffea000656fa08) [ 791.939488] 000000008d39697e: ffffffff835d0bec (_copy_from_iter_full+0x2bc/0xd20) [ 791.939498] 000000003b1313dc: ffff8801dae236b0 (0xffff8801dae236b0) [ 791.939504] 00000000d8393489: 0000000000000000 ... [ 791.939523] 0000000028f94eea: ffffffff81b9da31 (kasan_check_read+0x11/0x20) [ 791.939533] 000000003c34fd61: ffff8801b2e276c0 (0xffff8801b2e276c0) [ 791.939542] 00000000c41bc2e0: 1ffff100365c4ecc (0x1ffff100365c4ecc) [ 791.939551] 00000000da415aba: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.939559] 0000000092342c82: 0000000000000062 (0x62) [ 791.939566] 00000000c93d1a2e: 0000000000000062 (0x62) [ 791.939575] 0000000053afd30c: ffff8801af2cb712 (0xffff8801af2cb712) [ 791.939580] 000000005c1a3894: 0000000000000000 ... [ 791.939595] 000000009f9fd6e1: ffffffff817c0c66 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) [ 791.939604] 00000000fbd2550b: ffff8801b2e268f8 (0xffff8801b2e268f8) [ 791.939613] 00000000dafdf71a: dffffc0000000000 (0xdffffc0000000000) [ 791.939621] 0000000020922d1d: ffff8801b4707db8 (0xffff8801b4707db8) [ 791.939629] 000000009015f5ae: ffff88019e45c1c0 (0xffff88019e45c1c0) [ 791.939638] 000000001f231f5f: ffff880198f2aed8 (0xffff880198f2aed8) [ 791.939648] 00000000795bbb1f: ffff8801b2e269a0 (0xffff8801b2e269a0) [ 791.939656] 00000000940857bc: 1ffff100368e0fb7 (0x1ffff100368e0fb7) [ 791.939664] 00000000ef7c2f49: ffff8801b2e268f8 (0xffff8801b2e268f8) [ 791.939673] 00000000a1149c47: ffff880198f2a680 (0xffff880198f2a680) [ 791.939681] 000000003c161aed: ffffed003b5c46d6 (0xffffed003b5c46d6) [ 791.939690] 0000000036ac4929: ffffed003b5c46d6 (0xffffed003b5c46d6) [ 791.939699] 000000004ceb6657: ffff8801dae236b3 (0xffff8801dae236b3) [ 791.939707] 00000000cb0f390d: ffff8801b2e26978 (0xffff8801b2e26978) [ 791.939717] 00000000d8cdaf10: 1ffff100365c4d13 (0x1ffff100365c4d13) [ 791.939726] 0000000027f7311a: ffff8801b4707d80 (0xffff8801b4707d80) [ 791.939735] 000000001747afee: ffff88019e45c3c8 (0xffff88019e45c3c8) [ 791.939740] 00000000f507eec8: 0000000000000000 ... [ 791.939748] 00000000002f2f22: ffff8801b2e27b30 (0xffff8801b2e27b30) [ 791.939765] 000000005e5f9611: ffffffff86bb7aee (packet_sendmsg+0x428e/0x6130) [ 791.939774] 0000000036f00016: ffff8801b2e27740 (0xffff8801b2e27740) [ 791.939782] 00000000d6580bb9: 000000000044f5d0 (0x44f5d0) [ 791.939791] 00000000d53f6df3: 0000000188bd51c7 (0x188bd51c7) [ 791.939800] 000000005dc5cca3: ffff8801b2e27798 (0xffff8801b2e27798) [ 791.939809] 00000000c34d423f: 1ffff100365c4eef (0x1ffff100365c4eef) [ 791.939816] 000000001c4534f4: ffff8801b2e27858 (0xffff8801b2e27858) [ 791.939828] 00000000683f2cb4: ffffffff88f92620 (rcu_bh_lock_map+0x40/0x40) [ 791.939838] 00000000038e2ef8: ffff880198f2a680 (0xffff880198f2a680) [ 791.939846] 00000000adfbab58: ffff8801b2e27798 (0xffff8801b2e27798) [ 791.939855] 000000001568a59f: ffff8801b2e27880 (0xffff8801b2e27880) [ 791.939862] 00000000f3cd0858: 0000000000000286 (0x286) [ 791.939867] 000000004fe8bb57: 0000000000000000 ... [ 791.939875] 00000000d9865248: ffff880100000001 (0xffff880100000001) [ 791.939884] 0000000073c26d7b: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.939891] 00000000acca94a2: 0000000000000286 (0x286) [ 791.939899] 00000000f1a5b842: ffffffff00000001 (0xffffffff00000001) [ 791.939908] 0000000047dd5da9: 1ffff100365c4f05 (0x1ffff100365c4f05) [ 791.939917] 00000000d281b6a6: ffff88019e45c710 (0xffff88019e45c710) [ 791.939928] 0000000048fbdc2e: ffff88019eaa6786 (0xffff88019eaa6786) [ 791.939936] 00000000bc11bb2b: 0000000000000062 (0x62) [ 791.939944] 00000000bf8d0310: ffff88019e45c220 (0xffff88019e45c220) [ 791.939954] 0000000095ff54a8: ffff8801afd00888 (0xffff8801afd00888) [ 791.939963] 00000000ade542d4: 00010000dae236a0 (0x10000dae236a0) [ 791.939970] 000000008c5e5cbe: ffff8801afd00890 (0xffff8801afd00890) [ 791.939979] 0000000010ced30e: ffff8801b2e27d04 (0xffff8801b2e27d04) [ 791.939988] 0000000061550119: ffff8801afd00898 (0xffff8801afd00898) [ 791.939997] 000000002b12da51: ffff8801dae23601 (0xffff8801dae23601) [ 791.940005] 0000000096618c28: ffff880100000062 (0xffff880100000062) [ 791.940020] 000000007363da37: ffffffff81b90008 (ksm_do_scan+0x2d68/0x4ff0) [ 791.940028] 0000000074cb0217: ffff880100000000 (0xffff880100000000) [ 791.940037] 00000000692c8805: ffff8801d26c3602 (0xffff8801d26c3602) [ 791.940046] 0000000056caef25: ffff880100000000 (0xffff880100000000) [ 791.940053] 0000000048f0626c: 000000000000000e (0xe) [ 791.940063] 00000000ca43726d: ffff8801b2e27948 (0xffff8801b2e27948) [ 791.940071] 00000000017319e3: ffff8801b2e27988 (0xffff8801b2e27988) [ 791.940079] 0000000029dc3d34: 000000000000006c (0x6c) [ 791.940088] 00000000999d1ca2: ffff8801b2e27888 (0xffff8801b2e27888) [ 791.940097] 000000004b28e137: ffff88019eaa6540 (0xffff88019eaa6540) [ 791.940106] 00000000ae849909: 0000000041b58ab3 (0x41b58ab3) [ 791.940121] 000000009cca5655: ffffffff88ce68e0 (K512_4+0xfbd60/0x12085c) [ 791.940136] 00000000186e8da0: ffffffff86bb3860 (packet_getname+0x5f0/0x5f0) [ 791.940145] 00000000d6668977: ffff8801b2e27870 (0xffff8801b2e27870) [ 791.940153] 0000000078106820: 0000000000000286 (0x286) [ 791.940162] 00000000cc9b041a: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.940176] 0000000058d15a0f: 0000000000000001 (0x1) [ 791.940186] 00000000c458275d: ffff8801b3d5d5f0 (0xffff8801b3d5d5f0) [ 791.940194] 0000000044371996: dffffc0000000000 (0xdffffc0000000000) [ 791.940204] 00000000271c5168: ffff8801b2e279b8 (0xffff8801b2e279b8) [ 791.940212] 000000002ebb0273: 0000000041b58ab3 (0x41b58ab3) [ 791.940226] 000000000d8cfa86: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.940234] 0000000004d4defb: ffffffff00000000 (0xffffffff00000000) [ 791.940242] 000000001b7ef5a5: ffff8801b2e27938 (0xffff8801b2e27938) [ 791.940251] 000000004e607365: 1ffff100365c4f1b (0x1ffff100365c4f1b) [ 791.940259] 00000000cc4cc40e: 0000001300004000 (0x1300004000) [ 791.940268] 000000009c4857eb: ffff8801bdf2ec10 (0xffff8801bdf2ec10) [ 791.940277] 00000000d408686f: ffff8801b3d5d580 (0xffff8801b3d5d580) [ 791.940286] 00000000af67ff63: ffff8801bdf2ebc0 (0xffff8801bdf2ebc0) [ 791.940301] 00000000aa075c9c: ffffffff81601b01 (do_raw_spin_unlock+0x61/0x2f0) [ 791.940310] 000000008a1874e7: ffff8801b2e27978 (0xffff8801b2e27978) [ 791.940319] 0000000076f1b87c: ffffed00365c4f27 (0xffffed00365c4f27) [ 791.940326] 00000000b7a0536f: 0000000041b58ab3 (0x41b58ab3) [ 791.940339] 00000000e4ed2e5f: ffffffff88bd5a98 (regoff.34024+0x368078/0x37af60) [ 791.940354] 000000009276d2d7: ffffffff81cc8760 (expand_files.part.8+0x9c0/0x9c0) [ 791.940372] 00000000f8235dc8: ffffffff81294090 (compat_start_thread+0x80/0x80) [ 791.940380] 00000000778def9f: 0000000000000001 (0x1) [ 791.940397] 000000003e0ec936: ffffffff87940637 (_raw_spin_unlock_irq+0x27/0x70) [ 791.940406] 000000009693ec35: ffff8801bb106000 (0xffff8801bb106000) [ 791.940415] 00000000dd74a0d7: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.940424] 000000004100ea75: 1ffff100365c4f38 (0x1ffff100365c4f38) [ 791.940433] 0000000027835102: ffff880198f2aeb8 (0xffff880198f2aeb8) [ 791.940442] 00000000dcc20d3f: ffff88019c77e688 (0xffff88019c77e688) [ 791.940450] 00000000d196ba6c: ffff88019c77e688 (0xffff88019c77e688) [ 791.940455] 00000000eca03010: 0000000000000000 ... [ 791.940463] 0000000026eaf126: ffff8801b2e27988 (0xffff8801b2e27988) [ 791.940471] 00000000a245ee0f: ffff000000000000 (0xffff000000000000) [ 791.940479] 000000008e6d9e75: 00000001b2e27968 (0x1b2e27968) [ 791.940487] 000000005c8ca95e: ffff8801b2e279e0 (0xffff8801b2e279e0) [ 791.940495] 00000000865b5ad1: 1ffff100365c4f38 (0x1ffff100365c4f38) [ 791.940504] 00000000548409ea: ffff8801b2e27aa0 (0xffff8801b2e27aa0) [ 791.940513] 000000007ebd04e3: ffff88019c77e688 (0xffff88019c77e688) [ 791.940521] 000000009cb042d6: ffff880198f2a680 (0xffff880198f2a680) [ 791.940530] 00000000d5af2c12: ffff8801b2e279e0 (0xffff8801b2e279e0) [ 791.940538] 00000000f287d446: 0000000700000302 (0x700000302) [ 791.940543] 00000000b9664b7c: 0000000000000000 ... [ 791.940552] 0000000048130abb: ffff880100000001 (0xffff880100000001) [ 791.940561] 000000006f8a0d34: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.940569] 00000000a70db07b: 0000000000000286 (0x286) [ 791.940578] 00000000490ee6ab: ffffffff00000001 (0xffffffff00000001) [ 791.940587] 0000000094dc6fbb: 0000000041b58ab3 (0x41b58ab3) [ 791.940600] 0000000054d1d2ef: ffffffff88bf1398 (K512_4+0x6818/0x12085c) [ 791.940616] 00000000c5ed18a9: ffffffff815f0d20 (lock_downgrade+0x8f0/0x8f0) [ 791.940625] 000000006e73c540: ffff8801bdf2ebc0 (0xffff8801bdf2ebc0) [ 791.940630] 00000000ba2b9216: 0000000000000000 ... [ 791.940638] 000000003b3e9e44: ffff88019c77e688 (0xffff88019c77e688) [ 791.940647] 0000000045f56c7d: 0000000041b58ab3 (0x41b58ab3) [ 791.940664] 0000000001af2c0c: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.940672] 000000000698c6c6: 000000040000005a (0x40000005a) [ 791.940680] 0000000078084025: ffffffff0011dd86 (0xffffffff0011dd86) [ 791.940696] 000000004061662c: ffffffff81542620 (check_same_owner+0x340/0x340) [ 791.940704] 00000000479d33ca: 0000000000000001 (0x1) [ 791.940713] 0000000072998e9b: ffffea0006cb89c0 (0xffffea0006cb89c0) [ 791.940721] 00000000304f3cb1: ffff8801b2e27b30 (0xffff8801b2e27b30) [ 791.940738] 000000009ae67e1e: ffffffff81c24e6d (__check_object_size+0x9d/0x5f2) [ 791.940746] 000000001a616c5d: 0000000098f2a680 (0x98f2a680) [ 791.940751] 0000000016450608: 0000000000000000 ... [ 791.940760] 000000003a9e09f9: ffff880198f2a680 (0xffff880198f2a680) [ 791.940777] 0000000088f6f702: ffffffff881a4b40 (__func__.18908+0xaa0/0xf20) [ 791.940784] 00000000661fb5db: 000000000000000a (0xa) [ 791.940788] 00000000fabf0dee: 0000000000000000 ... [ 791.940797] 00000000bb11b877: ffff8801b2e27ac8 (0xffff8801b2e27ac8) [ 791.940806] 00000000536b952b: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.940815] 00000000c875b7a2: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.940824] 00000000a4f557e4: ffff880198f2a680 (0xffff880198f2a680) [ 791.940839] 00000000794823ae: ffffffff881a4b40 (__func__.18908+0xaa0/0xf20) [ 791.940847] 0000000085634401: 000000000000000a (0xa) [ 791.940855] 00000000d4e6f524: ffff8801b2e27cf8 (0xffff8801b2e27cf8) [ 791.940863] 00000000b3805cac: 000000000000001c (0x1c) [ 791.940870] 00000000f8f140a0: 000000000000001c (0x1c) [ 791.940879] 000000005e413a7c: 000000002000009c (0x2000009c) [ 791.940887] 00000000fa1d4c70: 0000000020000080 (0x20000080) [ 791.940896] 0000000078fca0a3: ffff8801b2e27af0 (0xffff8801b2e27af0) [ 791.940912] 000000001cba29fa: ffffffff817c0c88 (__sanitizer_cov_trace_const_cmp8+0x18/0x20) [ 791.940921] 0000000067795e81: ffff8801b2e27b30 (0xffff8801b2e27b30) [ 791.940937] 00000000e934e3fe: ffffffff8319d254 (security_socket_sendmsg+0x94/0xc0) [ 791.940946] 00000000f87cb524: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.940960] 0000000095ba1122: ffffffff86bb3860 (packet_getname+0x5f0/0x5f0) [ 791.940968] 00000000bafe3d19: ffff8801b2e27c78 (0xffff8801b2e27c78) [ 791.940976] 0000000049045eee: ffff8801d26c3680 (0xffff8801d26c3680) [ 791.940983] 00000000122e8394: ffff8801b2e27c98 (0xffff8801b2e27c98) [ 791.940988] 000000005fb19ef1: 0000000000000000 ... [ 791.940997] 00000000b040d76d: ffff8801b2e27b60 (0xffff8801b2e27b60) [ 791.941013] 00000000b1c16ec4: ffffffff85ee51c5 (sock_sendmsg+0xd5/0x120) [ 791.941021] 000000005f3c2f01: ffff8801b2e27db8 (0xffff8801b2e27db8) [ 791.941030] 00000000b77fd024: ffff8801b2e27c78 (0xffff8801b2e27c78) [ 791.941039] 0000000055f0413f: ffff8801d26c3680 (0xffff8801d26c3680) [ 791.941046] 00000000ed2e128c: ffff8801b2e27bb8 (0xffff8801b2e27bb8) [ 791.941054] 00000000ebf88e55: ffff8801b2e27de0 (0xffff8801b2e27de0) [ 791.941067] 000000005a46d7e2: ffffffff85eeb607 (__sys_sendto+0x3d7/0x670) [ 791.941075] 00000000993cab38: ffff8801b2e27cf8 (0xffff8801b2e27cf8) [ 791.941084] 00000000d4ceea5c: 00000000b2e27ca8 (0xb2e27ca8) [ 791.941091] 000000000f0c88f4: ffff8801b2e27bf8 (0xffff8801b2e27bf8) [ 791.941100] 000000009330d54c: 1ffff100365c4f73 (0x1ffff100365c4f73) [ 791.941107] 00000000ee5ed43b: 0000000000000000 ... [ 791.941116] 00000000a54da0de: 0000000041b58ab3 (0x41b58ab3) [ 791.941130] 000000008d3fafde: ffffffff88cc5298 (K512_4+0xda718/0x12085c) [ 791.941144] 00000000ed2bf4df: ffffffff85eeb230 (__ia32_sys_getpeername+0xb0/0xb0) [ 791.941157] 00000000e1627200: ffffffff81cc8e10 (fget_raw+0x20/0x20) [ 791.941164] 00000000ae16b1ee: ffffffff00000000 (0xffffffff00000000) [ 791.941179] 00000000280de600: ffffffff00000002 (0xffffffff00000002) [ 791.941183] 00000000721fa00a: 0000000000000000 ... [ 791.941191] 00000000fd0db626: ffff8801b2e27cd0 (0xffff8801b2e27cd0) [ 791.941207] 00000000bb527915: ffffffff8360dfcb (debug_check_no_obj_freed+0x30b/0x595) [ 791.941211] 0000000035b2a4ef: 0000000000000000 ... [ 791.941219] 000000001238bb6d: 0000000041b58ab3 (0x41b58ab3) [ 791.941228] 00000000df79af1b: ffff8801dae236a0 (0xffff8801dae236a0) [ 791.941235] 00000000f62bcaff: 1ffff10000000001 (0x1ffff10000000001) [ 791.941242] 000000001a95d2a4: ffff8801dae236b0 (0xffff8801dae236b0) [ 791.941249] 000000002d5e3176: ffff8801b2e27c18 (0xffff8801b2e27c18) [ 791.941263] 0000000068e5d70e: ffffffff81b9da31 (kasan_check_read+0x11/0x20) [ 791.941271] 0000000074728045: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.941280] 00000000e4d3bbcc: ffff880198f2a680 (0xffff880198f2a680) [ 791.941289] 00000000e7dec6eb: dffffc0000000000 (0xdffffc0000000000) [ 791.941298] 00000000da741361: 1ffff100365c4f8e (0x1ffff100365c4f8e) [ 791.941306] 0000000028ce2f36: 0000000020000280 (0x20000280) [ 791.941313] 00000000b6e4cd05: 000000000000006c (0x6c) [ 791.941322] 0000000043cadd55: ffff8801b2e27d78 (0xffff8801b2e27d78) [ 791.941337] 00000000c9d57be8: ffffffff8792a4bb (schedule+0xfb/0x450) [ 791.941350] 00000000e663bb02: ffffffff88f925a0 (rcu_callback_map+0x40/0x40) [ 791.941357] 00000000787ef91b: 0000000000000286 (0x286) [ 791.941366] 00000000be33daa0: ffff880198f2a680 (0xffff880198f2a680) [ 791.941374] 00000000a77919f1: 0000000041b58ab3 (0x41b58ab3) [ 791.941383] 00000000d56f5015: ffff8801b2e27cf8 (0xffff8801b2e27cf8) [ 791.941392] 000000009990d5b9: ffffffff0000001c (0xffffffff0000001c) [ 791.941401] 000000007bf61e58: ffff880100000001 (0xffff880100000001) [ 791.941406] 00000000ff75a7c1: 0000000000000000 ... [ 791.941415] 000000004c5ff539: ffff8801b2e27c48 (0xffff8801b2e27c48) [ 791.941419] 0000000097d90dfa: 0000000000000000 ... [ 791.941428] 000000002f13b06c: ffff880100000000 (0xffff880100000000) [ 791.941442] 0000000079f0e0e3: ffffffff85edf9f5 (sockfd_lookup_light+0xc5/0x160) [ 791.941451] 000000000ce7a5f3: 1ffff100365c4fa4 (0x1ffff100365c4fa4) [ 791.941461] 0000000015c89153: ffff8801b2e27d40 (0xffff8801b2e27d40) [ 791.941470] 00000000013aedcf: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.941478] 0000000081e28ebc: 1ffff100365c4fab (0x1ffff100365c4fab) [ 791.941486] 000000001456a19d: 0000000000000001 (0x1) [ 791.941494] 0000000033f35c6d: 000000050008000a (0x50008000a) [ 791.941501] 000000002b2c70b2: 00000000000002ff (0x2ff) [ 791.941510] 000000001e2f203b: 0100000000000000 (0x100000000000000) [ 791.941519] 00000000f00d7fd1: ffff880100000000 (0xffff880100000000) [ 791.941528] 0000000008277133: ffff8801b2e27e20 (0xffff8801b2e27e20) [ 791.941537] 00000000ed61549c: ffff880198f2a680 (0xffff880198f2a680) [ 791.941554] 00000000a3a0c245: ffffffff8100ab9c (exit_to_usermode_loop+0x8c/0x370) [ 791.941562] 00000000cad41110: ffff8801b2e27df8 (0xffff8801b2e27df8) [ 791.941570] 000000006e53b510: fffffbfff11e360e (0xfffffbfff11e360e) [ 791.941579] 00000000ffed7777: 1ffff100365c4fdc (0x1ffff100365c4fdc) [ 791.941585] 000000003be92a0c: 0000000000000086 (0x86) [ 791.941590] 000000005c860268: 0000000000000000 ... [ 791.941598] 000000007e2c757f: dffffc0000000000 (0xdffffc0000000000) [ 791.941607] 00000000b06727ad: ffff8801b2e27df8 (0xffff8801b2e27df8) [ 791.941614] 0000000000bb40da: ffff8801b2e27d78 (0xffff8801b2e27d78) [ 791.941628] 00000000ee55fd11: ffffffff817c0c66 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) [ 791.941636] 0000000059255b7c: ffff8801b2e27e20 (0xffff8801b2e27e20) [ 791.941648] 00000000ac1d205b: ffffffff8100ad04 (exit_to_usermode_loop+0x1f4/0x370) [ 791.941656] 000000006a0e3e65: 1ffff100365c4fb3 (0x1ffff100365c4fb3) [ 791.941663] 00000000635ec6f3: ffff8801b2e27f58 (0xffff8801b2e27f58) [ 791.941670] 00000000a97b5ed2: 0000000041b58ab3 (0x41b58ab3) [ 791.941684] 00000000b77ca7e9: ffffffff88bd5b9e (regoff.34024+0x36817e/0x37af60) [ 791.941697] 00000000ec7675c4: ffffffff8100ab10 (syscall_slow_exit_work+0x500/0x500) [ 791.941705] 0000000087a533d2: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.941712] 00000000f58d667c: ffff8801b2e27f58 (0xffff8801b2e27f58) [ 791.941719] 00000000915e87b3: 1ffff100365c4fc8 (0x1ffff100365c4fc8) [ 791.941727] 000000004e98b026: ffff8801b2e27f20 (0xffff8801b2e27f20) [ 791.941735] 000000006fb2769e: ffff8801b2e27f58 (0xffff8801b2e27f58) [ 791.941744] 00000000bfc40af5: dffffc0000000000 (0xdffffc0000000000) [ 791.941752] 00000000b847b6fc: ffff8801b2e27e20 (0xffff8801b2e27e20) [ 791.941767] 00000000354de9dc: ffffffff85eeb981 (__x64_sys_sendto+0xe1/0x1a0) [ 791.941776] 000000005697395d: ffff8801b2e27e10 (0xffff8801b2e27e10) [ 791.941793] 00000000789c87c0: ffffffff815ea661 (trace_hardirqs_on_caller+0x421/0x5c0) [ 791.941800] 000000009f263e70: 000000000000002c (0x2c) [ 791.941807] 0000000021dbe773: 1ffff100365c4fc8 (0x1ffff100365c4fc8) [ 791.941815] 000000002a7413ae: ffff8801b2e27e20 (0xffff8801b2e27e20) [ 791.941821] 000000008d771b65: 000000000000002c (0x2c) [ 791.941829] 00000000314ea10a: ffff8801b2e27f48 (0xffff8801b2e27f48) [ 791.941842] 000000003755494d: ffffffff8100c4d9 (do_syscall_64+0x1b9/0x820) [ 791.941855] 000000005680af08: ffffffff8153a7c3 (finish_task_switch+0x1d3/0x870) [ 791.941860] 000000007a4aaf69: 0000000000000000 ... [ 791.941868] 000000006091a0b7: 0000000041b58ab3 (0x41b58ab3) [ 791.941881] 000000008a709bac: ffffffff88bd5a98 (regoff.34024+0x368078/0x37af60) [ 791.941897] 00000000498b8263: ffffffff8100c320 (syscall_return_slowpath+0x5e0/0x5e0) [ 791.941906] 000000007b33c017: ffff8801b2e27e68 (0xffff8801b2e27e68) [ 791.941911] 000000000504e062: 0000000000000000 ... [ 791.941920] 00000000bf096e7a: ffff8801b2e27f48 (0xffff8801b2e27f48) [ 791.941935] 000000005e0e6f64: ffffffff8100c05d (syscall_return_slowpath+0x31d/0x5e0) [ 791.941944] 0000000034398236: ffff8801b2e27f58 (0xffff8801b2e27f58) [ 791.941951] 00000000d57cd6c8: 0000000041b58ab3 (0x41b58ab3) [ 791.941964] 0000000040db320a: ffffffff88bd51c7 (regoff.34024+0x3677a7/0x37af60) [ 791.941973] 0000000048d4ef82: ffff880198f2aeb0 (0xffff880198f2aeb0) [ 791.941981] 000000009444900f: ffff8801b2e27ea8 (0xffff8801b2e27ea8) [ 791.941987] 00000000d7675da5: 0000000000000008 (0x8) [ 791.941995] 00000000afd8bd99: ffff880198f2a680 (0xffff880198f2a680) [ 791.942012] 000000007ff79042: ffffffff87a0009d (entry_SYSCALL_64_after_hwframe+0x59/0xbe) [ 791.942017] 00000000e210b4b3: 0000000000000000 ... [ 791.942024] 000000000dbc4afc: 0000000000000086 (0x86) [ 791.942029] 00000000c329aee9: 0000000000000000 ... [ 791.942038] 00000000149d2508: ffff8801b2e27f48 (0xffff8801b2e27f48) [ 791.942051] 000000008173a772: ffffffff81007d20 (trace_hardirqs_off_thunk+0x1a/0x1c) [ 791.942056] 0000000064f6538e: 0000000000000000 ... [ 791.942065] 00000000d872c505: 3aee86f4bec70600 (0x3aee86f4bec70600) [ 791.942069] 000000009bd73e67: 0000000000000000 ... [ 791.942086] 00000000aa5ce777: ffffffff87a0008d (entry_SYSCALL_64_after_hwframe+0x49/0xbe) [ 791.942090] 00000000f9fa0f88: 0000000000000000 ... [ 791.942097] 000000006ccf5b86: 00000000004d1860 (0x4d1860) [ 791.942105] 00000000585e390a: 00000000004c1164 (0x4c1164) [ 791.942113] 00000000e96746f4: 00000000ffffffff (0xffffffff) [ 791.942121] 000000006ff7e1d2: 000000000072bea0 (0x72bea0) [ 791.942130] 000000002f673581: 00007fce202ec6d4 (0x7fce202ec6d4) [ 791.942138] 0000000035544d63: 0000000000000246 (0x246) [ 791.942143] 000000000c5b9734: 0000000000000000 ... [ 791.942150] 0000000052dbe6b7: 000000000000001c (0x1c) [ 791.942158] 00000000a309acb7: 0000000020000080 (0x20000080) [ 791.942175] 00000000ac9bbcc5: ffffffffffffffda (0xffffffffffffffda) [ 791.942184] 000000009a58656d: 0000000000455ab9 (0x455ab9) [ 791.942192] 00000000bdd42954: 000000000000006c (0x6c) [ 791.942200] 000000005b602f3b: 0000000020000280 (0x20000280) [ 791.942208] 000000009d4ded67: 0000000000000013 (0x13) [ 791.942215] 00000000ba6ed140: 000000000000002c (0x2c) [ 791.942223] 00000000c8ba397f: 0000000000455ab9 (0x455ab9) [ 791.942231] 00000000a90829d3: 0000000000000033 (0x33) [ 791.942239] 000000008771247a: 0000000000000246 (0x246) [ 791.942248] 00000000735bcdb1: 00007fce202ebc68 (0x7fce202ebc68) [ 791.942255] 00000000369ae6c6: 000000000000002b (0x2b) [ 791.942343] ================================================================== [ 791.998189] binder: BINDER_SET_CONTEXT_MGR already set [ 792.002754] BUG: KASAN: stack-out-of-bounds in fixup_exception+0xc6/0xcb [ 792.063519] binder: 23389:23409 ioctl 40046207 0 returned -16 [ 792.068307] Read of size 8 at addr ffff8801b2e27348 by task syz-executor4/23395 [ 792.068312] [ 792.068328] CPU: 0 PID: 23395 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #147 [ 792.068337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.068342] Call Trace: [ 792.068369] dump_stack+0x1c9/0x2b4 [ 792.068388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 792.068402] ? printk+0xa7/0xcf [ 792.068419] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 792.114313] binder: 23389:23409 ERROR: BC_REGISTER_LOOPER called without request [ 792.119269] ? fixup_exception+0xc6/0xcb [ 792.119289] print_address_description+0x6c/0x20b [ 792.119306] ? fixup_exception+0xc6/0xcb [ 792.119320] kasan_report.cold.7+0x242/0x2fe [ 792.119339] __asan_report_load8_noabort+0x14/0x20 [ 792.119352] fixup_exception+0xc6/0xcb [ 792.119368] do_general_protection+0x1c3/0x2f0 [ 792.119384] general_protection+0x1e/0x30 [ 792.119406] RIP: 0010:vmx_vcpu_run+0x1328/0x2600 [ 792.157470] binder: 23389:23417 unknown command 0 [ 792.162683] Code: 91 00 00 00 e8 19 c4 5c 00 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 [ 792.196755] binder_alloc: 23389: binder_alloc_buf, no vma [ 792.201506] 00 0f 85 8c 10 00 00 48 8b 04 24 <48> 8b 98 40 57 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 48 [ 792.201649] RSP: 0018:ffff8801b2e27370 EFLAGS: 00010046 [ 792.208547] binder: 23389:23409 transaction failed 29189/-3, size 0-0 line 2967 [ 792.215533] RAX: 1ffff100365c4e83 RBX: 0000000010000000 RCX: ffffc90002a12000 [ 792.215541] RDX: 1ffff100331e55d7 RSI: ffffffff811f4727 RDI: 0000000000000005 [ 792.215548] RBP: ffff8801b2e27458 R08: ffff880198f2a680 R09: 0000000000000000 [ 792.215555] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 792.215562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.215592] ? vmx_vcpu_run+0x1307/0x2600 [ 792.215618] ? find_held_lock+0x36/0x1c0 [ 792.224677] binder: 23389:23417 ioctl c0306201 2000efd0 returned -22 [ 792.228419] ? lock_downgrade+0x8f0/0x8f0 [ 792.228437] lock_release+0xa30/0xa30 [ 792.228455] ? check_same_owner+0x340/0x340 [ 792.228470] ? skb_set_owner_w+0x24e/0x360 [ 792.228498] ? kasan_check_write+0x14/0x20 [ 792.228520] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 792.228535] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 792.228549] ? __check_object_size+0x9d/0x5f2 [ 792.228567] ? usercopy_warn+0x120/0x120 [ 792.298841] binder: undelivered TRANSACTION_ERROR: 29189 [ 792.300756] ? _copy_from_iter_nocache+0x1050/0x1050 [ 792.300773] ? _copy_from_iter_full+0x2bc/0xd20 [ 792.300794] ? kasan_check_read+0x11/0x20 [ 792.300818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 792.300846] ? packet_sendmsg+0x428e/0x6130 [ 792.300872] ? ksm_do_scan+0x2d68/0x4ff0 [ 792.317601] binder: send failed reply for transaction 442 to 23389:23392 [ 792.322082] ? packet_getname+0x5f0/0x5f0 [ 792.322113] ? do_raw_spin_unlock+0x61/0x2f0 [ 792.322131] ? expand_files.part.8+0x9c0/0x9c0 [ 792.322156] ? compat_start_thread+0x80/0x80 [ 792.322171] ? _raw_spin_unlock_irq+0x27/0x70 [ 792.322202] ? lock_downgrade+0x8f0/0x8f0 [ 796.287977] ? check_same_owner+0x340/0x340 [ 796.292288] ? __check_object_size+0x9d/0x5f2 [ 796.296781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 796.302310] ? security_socket_sendmsg+0x94/0xc0 [ 796.307054] ? packet_getname+0x5f0/0x5f0 [ 796.311192] ? sock_sendmsg+0xd5/0x120 [ 796.315067] ? __sys_sendto+0x3d7/0x670 [ 796.319037] ? __ia32_sys_getpeername+0xb0/0xb0 [ 796.323702] ? fget_raw+0x20/0x20 [ 796.327143] ? debug_check_no_obj_freed+0x30b/0x595 [ 796.332156] ? kasan_check_read+0x11/0x20 [ 796.336296] ? schedule+0xfb/0x450 [ 796.339833] ? sockfd_lookup_light+0xc5/0x160 [ 796.344320] ? exit_to_usermode_loop+0x8c/0x370 [ 796.348995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.354535] ? exit_to_usermode_loop+0x1f4/0x370 [ 796.359285] ? syscall_slow_exit_work+0x500/0x500 [ 796.364129] ? __x64_sys_sendto+0xe1/0x1a0 [ 796.368352] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 796.373359] ? do_syscall_64+0x1b9/0x820 [ 796.377403] ? finish_task_switch+0x1d3/0x870 [ 796.381884] ? syscall_return_slowpath+0x5e0/0x5e0 [ 796.386821] ? syscall_return_slowpath+0x31d/0x5e0 [ 796.391749] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 796.397110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 796.401942] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.407292] [ 796.408899] The buggy address belongs to the page: [ 796.413818] page:ffffea0006cb89c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 796.421944] flags: 0x2fffc0000000000() [ 796.425822] raw: 02fffc0000000000 0000000000000000 ffffffff06cb0101 0000000000000000 [ 796.433690] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 796.441560] page dumped because: kasan: bad access detected [ 796.447246] [ 796.448856] Memory state around the buggy address: [ 796.453769] ffff8801b2e27200: 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 f2 f2 f2 f2 [ 796.461113] ffff8801b2e27280: f2 f2 04 f2 f2 f2 f2 f2 f2 f2 f8 f2 f2 f2 f2 f2 [ 796.468465] >ffff8801b2e27300: f2 f2 00 f2 f2 f2 f2 f2 f2 f2 00 00 f2 f2 f2 f2 [ 796.475825] ^ [ 796.481518] ffff8801b2e27380: f2 f2 00 00 04 f2 f2 f2 f2 f2 04 f2 f2 f2 f2 f2 [ 796.488956] ffff8801b2e27400: f2 f2 04 f2 f2 f2 f2 f2 f2 f2 04 f2 f2 f2 f2 f2 [ 796.496307] ================================================================== [ 796.503653] Disabling lock debugging due to kernel taint [ 796.509080] Kernel panic - not syncing: panic_on_warn set ... [ 796.509080] [ 796.516428] CPU: 0 PID: 23395 Comm: syz-executor4 Tainted: G B 4.18.0-rc4+ #147 [ 796.525154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.534495] Call Trace: [ 796.537075] dump_stack+0x1c9/0x2b4 [ 796.540688] ? dump_stack_print_info.cold.2+0x52/0x52 [ 796.545959] ? lock_downgrade+0x8f0/0x8f0 [ 796.550102] panic+0x238/0x4e7 [ 796.553277] ? add_taint.cold.5+0x16/0x16 [ 796.557422] ? add_taint.cold.5+0x5/0x16 [ 796.561464] ? do_raw_spin_unlock+0xa7/0x2f0 [ 796.565857] ? fixup_exception+0xc6/0xcb [ 796.569909] kasan_end_report+0x47/0x4f [ 796.573869] kasan_report.cold.7+0x76/0x2fe [ 796.578175] __asan_report_load8_noabort+0x14/0x20 [ 796.583089] fixup_exception+0xc6/0xcb [ 796.586960] do_general_protection+0x1c3/0x2f0 [ 796.591524] general_protection+0x1e/0x30 [ 796.595658] RIP: 0010:vmx_vcpu_run+0x1328/0x2600 [ 796.600389] Code: 91 00 00 00 e8 19 c4 5c 00 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8c 10 00 00 48 8b 04 24 <48> 8b 98 40 57 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 48 [ 796.619551] RSP: 0018:ffff8801b2e27370 EFLAGS: 00010046 [ 796.624904] RAX: 1ffff100365c4e83 RBX: 0000000010000000 RCX: ffffc90002a12000 [ 796.632162] RDX: 1ffff100331e55d7 RSI: ffffffff811f4727 RDI: 0000000000000005 [ 796.639413] RBP: ffff8801b2e27458 R08: ffff880198f2a680 R09: 0000000000000000 [ 796.646662] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 796.653914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.661996] ? vmx_vcpu_run+0x1307/0x2600 [ 796.666142] ? find_held_lock+0x36/0x1c0 [ 796.670190] ? lock_downgrade+0x8f0/0x8f0 [ 796.674319] lock_release+0xa30/0xa30 [ 796.678104] ? check_same_owner+0x340/0x340 [ 796.682408] ? skb_set_owner_w+0x24e/0x360 [ 796.686630] ? kasan_check_write+0x14/0x20 [ 796.690849] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 796.695850] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 796.700849] ? __check_object_size+0x9d/0x5f2 [ 796.705339] ? usercopy_warn+0x120/0x120 [ 796.709386] ? _copy_from_iter_nocache+0x1050/0x1050 [ 796.714478] ? _copy_from_iter_full+0x2bc/0xd20 [ 796.719128] ? kasan_check_read+0x11/0x20 [ 796.723294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.728818] ? packet_sendmsg+0x428e/0x6130 [ 796.733144] ? ksm_do_scan+0x2d68/0x4ff0 [ 796.737190] ? packet_getname+0x5f0/0x5f0 [ 796.741323] ? do_raw_spin_unlock+0x61/0x2f0 [ 796.745732] ? expand_files.part.8+0x9c0/0x9c0 [ 796.750304] ? compat_start_thread+0x80/0x80 [ 796.754695] ? _raw_spin_unlock_irq+0x27/0x70 [ 796.759177] ? lock_downgrade+0x8f0/0x8f0 [ 796.763318] ? check_same_owner+0x340/0x340 [ 796.767623] ? __check_object_size+0x9d/0x5f2 [ 796.772114] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 796.778158] ? security_socket_sendmsg+0x94/0xc0 [ 796.782908] ? packet_getname+0x5f0/0x5f0 [ 796.787040] ? sock_sendmsg+0xd5/0x120 [ 796.790912] ? __sys_sendto+0x3d7/0x670 [ 796.794871] ? __ia32_sys_getpeername+0xb0/0xb0 [ 796.799520] ? fget_raw+0x20/0x20 [ 796.803003] ? debug_check_no_obj_freed+0x30b/0x595 [ 796.808007] ? kasan_check_read+0x11/0x20 [ 796.812141] ? schedule+0xfb/0x450 [ 796.815668] ? sockfd_lookup_light+0xc5/0x160 [ 796.820170] ? exit_to_usermode_loop+0x8c/0x370 [ 796.824835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.830356] ? exit_to_usermode_loop+0x1f4/0x370 [ 796.835098] ? syscall_slow_exit_work+0x500/0x500 [ 796.839927] ? __x64_sys_sendto+0xe1/0x1a0 [ 796.844155] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 796.849156] ? do_syscall_64+0x1b9/0x820 [ 796.853289] ? finish_task_switch+0x1d3/0x870 [ 796.857775] ? syscall_return_slowpath+0x5e0/0x5e0 [ 796.863211] ? syscall_return_slowpath+0x31d/0x5e0 [ 796.868128] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 796.873484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 796.878323] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.884864] Dumping ftrace buffer: [ 796.888483] (ftrace buffer empty) [ 796.892171] Kernel Offset: disabled [ 796.895780] Rebooting in 86400 seconds..