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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00', @ifru_mtu=0x1}) [ 1895.537481] binder: 18202:18207 ioctl c0306201 20007000 returned -14 [ 1895.568282] binder: 18202:18207 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1895.645179] binder_alloc: binder_alloc_mmap_handler: 18202 20001000-20004000 already mapped failed -16 05:35:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1895.757682] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.788663] binder_alloc: 18202: binder_alloc_buf, no vma [ 1895.803291] binder: 18202:18213 transaction failed 29189/-3, size 0-0 line 3035 [ 1895.835172] binder: 18202:18217 ioctl 40046207 0 returned -16 [ 1895.862127] binder: 18202:18220 BC_FREE_BUFFER u0000000020001000 no match [ 1895.878672] binder: release 18202:18207 transaction 791 out, still active [ 1895.893986] binder: undelivered TRANSACTION_COMPLETE [ 1895.903460] binder: 18202:18213 ioctl c0306201 20007000 returned -14 05:35:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000f00009ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:47 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4700, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1895.936753] binder: send failed reply for transaction 791, target dead 05:35:47 executing program 3: r0 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000380)={0x0, 0x3ff, 0x4, 0x5}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000003c0)={0x16, 0x26, 0x17, 0x0, 0x1, 0x9f1f, 0x0, 0xd5}) 05:35:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x700000000000000, 0x0}) 05:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = add_key(&(0x7f00000021c0)='id\x8d\x9cD\x81t\xfb\xfe\x10t/', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000010c0)="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", 0xfffffffffffffd39, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f00000020c0)="ee2f667ed3f2ee36b4ea2e446d20ad3f3f95bffaad2e510d8003302d0d2dc0ae389df047299e1900686460105e0643cc707ed5fb56b0b5e996882cdb6735c79d6ce72140cb3edd481662a71f984dc06c521297f1803c06734f4be1c464d29e44449662fcfe5dbfdd5585dc724160f6a4a29b1e7a9c5ef4c631b3b216b264d6106da233857b496a885d74437f9ee20de2006595521e00a0a219d419ae029abd7d074d8b5cd16474919a406e8c7834b7cc59a204dcb3556be9e772789db074af32b5f66de4b0f536", 0xc7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000240)=ANY=[@ANYBLOB="a545111d9c710feeb3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000033000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r1, r0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000002200)=0x4) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x14) [ 1896.126498] binder: undelivered TRANSACTION_ERROR: 29189 05:35:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7ff, 0x200000) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1896.280172] binder: 18235:18242 ioctl c0306201 20007000 returned -14 05:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) prlimit64(r3, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x80000000}, &(0x7f0000000200)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x2) setsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000100)="ada6759f71489109b8b162e54656d90bee22486dd840b7385bdb72cb8e36365e33ca68515a7b66fc9b62bd3c40414afc6651fe688a037ee03ef2b05430af9b5d7d1bb65cac8aa5e4f0335240b7625ae8d4adb0981e36ecb03c96952189960d373c5255d21cb6cc196c214a", 0x6b) [ 1896.330074] binder: 18235:18242 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) [ 1896.424391] binder_alloc: binder_alloc_mmap_handler: 18235 20001000-20004000 already mapped failed -16 [ 1896.521668] binder: 18235:18255 BC_FREE_BUFFER u0000000020001000 no match [ 1896.551148] binder_alloc: 18235: binder_alloc_buf, no vma 05:35:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) recvfrom$packet(r1, &(0x7f0000000280)=""/176, 0xb0, 0x1, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x810, &(0x7f0000000180)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fd2000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000000000000000000000000000000000000"]) [ 1896.602997] binder: BINDER_SET_CONTEXT_MGR already set [ 1896.638859] binder: 18235:18242 ioctl 40046207 0 returned -16 [ 1896.646721] binder: send failed reply for transaction 794 to 18235:18242 [ 1896.649123] binder: 18235:18252 transaction failed 29189/-3, size 0-0 line 3035 [ 1896.661571] binder: undelivered TRANSACTION_COMPLETE [ 1896.661693] binder: undelivered TRANSACTION_ERROR: 29189 05:35:48 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getgroups(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) dup3(r0, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000007bc0)={0x0, 0x0, 0xffffffffffff8000}, 0xc) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setuid(0x0) 05:35:48 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4701, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1896.745552] binder: 18235:18252 ioctl c0306201 20007000 returned -14 05:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x2000000000000000, 0x0}) [ 1896.888088] binder: undelivered TRANSACTION_ERROR: 29189 05:35:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000020309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000100)=""/27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) 05:35:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:35:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1897.211295] binder: 18271:18285 ioctl c0306201 20007000 returned -14 05:35:48 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4800, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1897.281904] binder: 18271:18285 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)=0x9) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x325) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1897.387484] binder_alloc: binder_alloc_mmap_handler: 18271 20001000-20004000 already mapped failed -16 [ 1897.409253] binder: BINDER_SET_CONTEXT_MGR already set [ 1897.440949] binder: 18271:18285 ioctl 40046207 0 returned -16 [ 1897.478948] binder_alloc: 18271: binder_alloc_buf, no vma [ 1897.479992] binder: 18271:18298 BC_FREE_BUFFER u0000000020001000 no match [ 1897.507293] binder: 18271:18290 transaction failed 29189/-3, size 0-0 line 3035 [ 1897.541747] binder: release 18271:18285 transaction 797 out, still active [ 1897.551275] binder: 18271:18290 ioctl c0306201 20007000 returned -14 [ 1897.567209] binder: undelivered TRANSACTION_COMPLETE 05:35:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40200, 0x20) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000810000000000002969edf52e483f0e098d9f7b076c26db7f326ef96324ca745f08776d992b18d6"]) [ 1897.594100] binder: send failed reply for transaction 797, target dead 05:35:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:35:49 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4801, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x3f00000000000000, 0x0}) [ 1897.859936] binder: undelivered TRANSACTION_ERROR: 29189 05:35:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:35:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="b38a23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000040309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1898.122268] binder: 18321:18322 ioctl c0306201 20007000 returned -14 05:35:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x9c) 05:35:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000024d564b00000000810000c4689fc6d44adb9fa7be77271d177e8028d3a06cc971f7e9a824b8e302f0d342b77ba820420db48feb27c730de5aff8053a364f9e5bc62c5fc38b35deb4e9742ac50ecfbc6f0874b60af82f43bf87f181a03d4bf8c71729d5a410e0d33d9c8eca4e17cfaa7f09c4a99fb0e1e2b5a36b92f76187ef0871d89e1357d8f3b4cb91f591a3a7adda7ef6c9babd4d5fd3164a6ef4ca494a7fd4f2a5285f6ee21e73c1c625ef5f3dc4c0df70390d8d159a1"]) [ 1898.193941] binder: 18321:18322 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1898.253827] binder_alloc: binder_alloc_mmap_handler: 18321 20001000-20004000 already mapped failed -16 [ 1898.328349] binder_alloc: 18321: binder_alloc_buf, no vma [ 1898.371404] binder: BINDER_SET_CONTEXT_MGR already set 05:35:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x9c) [ 1898.410800] binder: 18321:18322 transaction failed 29189/-3, size 0-0 line 3035 [ 1898.455055] binder: 18321:18338 BC_FREE_BUFFER u0000000020001000 no match [ 1898.483132] binder: release 18321:18322 transaction 800 out, still active [ 1898.492639] binder: 18321:18334 ioctl 40046207 0 returned -16 [ 1898.506496] binder: undelivered TRANSACTION_COMPLETE 05:35:49 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4900, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1898.542252] binder: 18321:18322 ioctl c0306201 20007000 returned -14 [ 1898.597023] binder: send failed reply for transaction 800, target dead 05:35:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:35:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x6b0200, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000240)=0xfffffffffffffd72) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="2f0700006600000000377d08393679669dbf8cdbf1b1a9b4384ebff7ed84f391d40784add4464c1a5dff5a0bd2331883c2c968ad958b421ecc2c8fb175925963b3c366b62e0056624583471df41d96f10d4d1ead3d6b7f0dd895f05e2491e1fec8260d1054b3040000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, [], [{0x100, 0x80000001, 0x8f, 0xfffffffffffffffb, 0x8c6, 0x7}, {0x0, 0xb6c, 0xb71, 0x20, 0x4, 0x5}], [[], [], []]}) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0x7, r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4800000000000000, 0x0}) [ 1898.672800] binder: undelivered TRANSACTION_ERROR: 29189 05:35:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x9c) [ 1898.860059] binder: 18354:18358 ioctl c0306201 20007000 returned -14 05:35:50 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) [ 1898.903291] binder: 18354:18358 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1898.957644] binder_alloc: binder_alloc_mmap_handler: 18354 20001000-20004000 already mapped failed -16 [ 1898.973009] binder: BINDER_SET_CONTEXT_MGR already set [ 1899.003388] binder: 18354:18358 ioctl 40046207 0 returned -16 [ 1899.040627] binder_alloc: 18354: binder_alloc_buf, no vma 05:35:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000100)="240000001a0025f00018000400cdfc0e800000000000008000001d000800010048050000", 0x24) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1899.064465] binder: 18354:18367 BC_FREE_BUFFER u0000000020001000 no match [ 1899.100855] binder: release 18354:18358 transaction 803 out, still active 05:35:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffdc0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0x840595cedb628c55, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1899.110618] binder: 18354:18365 transaction failed 29189/-3, size 0-0 line 3035 [ 1899.128843] binder: undelivered TRANSACTION_COMPLETE 05:35:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000080309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:50 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4901, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:50 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) [ 1899.175782] binder: send failed reply for transaction 803, target dead [ 1899.199451] binder: 18354:18365 ioctl c0306201 20007000 returned -14 05:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4c00000000000000, 0x0}) 05:35:50 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) [ 1899.424592] binder: undelivered TRANSACTION_ERROR: 29189 05:35:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1]) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x5, 0x1}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1899.561492] binder: 18388:18390 ioctl c0306201 20007000 returned -14 05:35:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1db) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 05:35:51 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1899.632352] binder: 18388:18390 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1899.705491] binder: BINDER_SET_CONTEXT_MGR already set [ 1899.721711] binder_alloc: 18388: binder_alloc_buf, no vma [ 1899.787634] binder: 18388:18390 ioctl 40046207 0 returned -16 [ 1899.807775] binder_alloc: binder_alloc_mmap_handler: 18388 20001000-20004000 already mapped failed -16 [ 1899.819247] binder: 18388:18400 transaction failed 29189/-3, size 0-0 line 3035 05:35:51 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4a00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1899.841801] binder: release 18388:18390 transaction 806 out, still active [ 1899.851613] binder: 18388:18400 ioctl c0306201 20007000 returned -14 [ 1899.877407] binder: undelivered TRANSACTION_COMPLETE 05:35:51 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1899.907419] binder: send failed reply for transaction 806, target dead 05:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6000000000000000, 0x0}) 05:35:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f1008"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1900.001074] binder: undelivered TRANSACTION_ERROR: 29189 [ 1900.141494] binder: 18416:18417 ioctl c0306201 20007000 returned -14 [ 1900.192233] binder: 18416:18417 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1900.268167] binder_alloc: binder_alloc_mmap_handler: 18416 20001000-20004000 already mapped failed -16 05:35:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f890000000a0309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:51 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:35:51 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1900.323890] binder_alloc: 18416: binder_alloc_buf, no vma [ 1900.391823] binder: 18416:18421 BC_FREE_BUFFER u0000000020001000 no match 05:35:51 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4a01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1900.435021] binder: BINDER_SET_CONTEXT_MGR already set 05:35:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f105b8baceb1fb2e3fe4329652e61efbcf1cdc19a61ee6c8271e90f3a23cae935b39fbd9da861388a34c40133cdf8028be58ae6fed48414c20e621d86c4f4ecdf67816b30e970e9c000cb23fdc2b57f23377efb853cf3c56889c5eeea73b10f6ee2d398244ba1bf195857e69455e146fcf1f6c3fabe0f7207fe1e058c1770e7d249a85bc852cc37e29b523659ba0f12e77af3e1a7659734e9dbc3d21a2f29912350656878ae4de4e2802ea42d3e46fee6c1578312110d6241a0a3525716ead4e281579d4eaff8cfe08ec6e00c1600"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7ff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:35:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1900.463046] binder: release 18416:18417 transaction 809 out, still active [ 1900.470849] binder: 18416:18426 ioctl 40046207 0 returned -16 [ 1900.478204] binder: undelivered TRANSACTION_COMPLETE 05:35:51 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x200000) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0xf, 0x4, 0x7ff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0104000000001000024d56faffffff008100000000000000"]) [ 1900.506205] binder: 18416:18427 transaction failed 29189/-3, size 0-0 line 3035 [ 1900.530126] binder: send failed reply for transaction 809, target dead [ 1900.537760] binder: 18416:18427 ioctl c0306201 20007000 returned -14 05:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6800000000000000, 0x0}) [ 1900.630125] binder: undelivered TRANSACTION_ERROR: 29189 05:35:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1900.752202] binder: 18445:18448 ioctl c0306201 20007000 returned -14 [ 1900.802500] binder: 18445:18448 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1900.903226] binder_alloc: binder_alloc_mmap_handler: 18445 20001000-20004000 already mapped failed -16 05:35:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x402000) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0), 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:35:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) r3 = dup(r0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x100000000, 0x1, 0x4, @random="192974505332", 'veth0_to_bridge\x00'}) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1900.988407] binder_alloc: 18445: binder_alloc_buf, no vma [ 1901.008835] binder: BINDER_SET_CONTEXT_MGR already set [ 1901.014392] binder: 18445:18456 transaction failed 29189/-3, size 0-0 line 3035 [ 1901.029596] binder: 18445:18458 ioctl 40046207 0 returned -16 [ 1901.070056] binder: 18445:18460 BC_FREE_BUFFER u0000000020001000 no match [ 1901.104290] binder: 18445:18456 ioctl c0306201 20007000 returned -14 [ 1901.119725] binder: release 18445:18448 transaction 812 out, still active [ 1901.142196] binder: undelivered TRANSACTION_COMPLETE [ 1901.173297] binder: send failed reply for transaction 812, target dead [ 1901.229458] binder: undelivered TRANSACTION_ERROR: 29189 05:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6c00000000000000, 0x0}) 05:35:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0x9, 0x100000000}, &(0x7f00000001c0)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000010c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) quotactl(0x1f, &(0x7f0000000200)='./file0\x00', r5, &(0x7f00000011c0)="9a91a791d5ad95f8969b507c1d76330857cef5efb5e26a38a1ee303a8309dba84315005bd1bad055bb9a87418000e8913b6b78e248b120f6f7944f8b7c94502675ef28d4605e1728b1f051b19c6182b83ec11967aaaba79d8b1e83b435ade58b01592e531ba02ea9350ff752a7c32c5f135bac57f1269530a6885499b2b7e04a5ec5e6ecc8c1414851") 05:35:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f890000000e0309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:52 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4b00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x9c) [ 1901.398655] binder: 18470:18473 ioctl c0306201 20007000 returned -14 05:35:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x9c) [ 1901.468186] binder: 18470:18473 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x301081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f0000000140)='/dev/kvm\x00', 0x9, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) [ 1901.536815] binder_alloc: binder_alloc_mmap_handler: 18470 20001000-20004000 already mapped failed -16 [ 1901.591960] binder_alloc: 18470: binder_alloc_buf, no vma 05:35:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x80040, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c7365636c6162656c2c66736d616769633d3078303030303030303030303030203430312c66736e616d653d407b24cb285b5e2c736d6163ff66737472616e736d7574653d61707072616973655f747970653d696d617369672c646f6e745f686173682c00e5a03ce7cda360568da13aeec85b66129e9518ecbadd117603"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1901.646988] binder: 18470:18480 BC_FREE_BUFFER u0000000020001000 no match [ 1901.681471] binder: 18470:18487 transaction failed 29189/-3, size 0-0 line 3035 [ 1901.717685] binder: release 18470:18473 transaction 815 out, still active [ 1901.726753] binder: 18470:18487 ioctl c0306201 20007000 returned -14 [ 1901.735839] binder: undelivered TRANSACTION_COMPLETE 05:35:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x9c) [ 1901.759530] binder: send failed reply for transaction 815, target dead 05:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7400000000000000, 0x0}) 05:35:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1901.828927] binder: undelivered TRANSACTION_ERROR: 29189 05:35:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) 05:35:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000010c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], @ANYBLOB="d6886ec8da6449092dca7605fb13af63c522e35b630176a2ae9ae1acf8b7a02df01b753067b0d999b00dddcba9517561279104d622e1bcc0ebd456cb5b61ff478a71d3736929dd5b77036b0b303bf8dc30aaeb85a86f523ef7db231a91332768a0e5bfbbf590ffbba57ccbf8fa0d53017045a11ee547490edd4c5b0c078a91cba08eaeea6a0b22825ab641ef713aca699879d352dca5c57d5be13812432784a680428ec47e640e5c78c5d67f55e3ae2b4af8c8f48cc86cd33434ab9692130415853a4928ff0287acadbd6be30ef1e32b0c0c568227c81642799a97e57d0260d64ddd125e537296154bba47ab", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="d2661deccf7f976118c5d822156c88aa17a4464aee80", @ANYRESHEX=r2]]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x7}}, 0x4a, 0xfffffffffffff001, 0x401, 0x6f, 0x2}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000001200)={r4, 0x10001}, 0x8) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0xd9c19fa6c4941f2c, 0x70, 0xb973, 0x4, 0x3, 0x6, 0x0, 0x7, 0x1008, 0xfe6bccb97489d6aa, 0x3, 0x9, 0x8001, 0x401, 0x4, 0x7e5f, 0xe44, 0x9, 0x9, 0x5, 0x5, 0xaa02, 0x3, 0x1451, 0x401, 0x0, 0x9, 0x9, 0x3, 0xff, 0x7, 0x6, 0x76a, 0x100000000, 0x9, 0x38000000000, 0x2, 0xe7, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080)}, 0x9f07aa332c27fe0f, 0x2, 0x6, 0x5, 0x100000000, 0x4, 0x5a008340}, 0x0, 0x9, 0xffffffffffffffff, 0x0) [ 1902.057096] binder: 18502:18506 ioctl c0306201 20007000 returned -14 [ 1902.145456] binder: 18502:18506 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1902.181381] binder_alloc: binder_alloc_mmap_handler: 18502 20001000-20004000 already mapped failed -16 [ 1902.215722] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.231281] binder: 18502:18513 ioctl 40046207 0 returned -16 05:35:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1902.263025] binder: 18502:18516 BC_FREE_BUFFER u0000000020001000 no match [ 1902.315414] binder: release 18502:18506 transaction 818 out, still active [ 1902.327081] binder: undelivered TRANSACTION_COMPLETE [ 1902.341036] binder: send failed reply for transaction 818, target dead 05:35:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f890000000f0309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) 05:35:53 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4b01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7a00000000000000, 0x0}) 05:35:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x9c) 05:35:54 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup3(r1, r1, 0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x8, 0x100, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r3 = socket$inet6(0xa, 0x5, 0x7) getsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000004d80), &(0x7f0000004dc0)=0x4) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1902.794455] binder: 18540:18541 ioctl c0306201 20007000 returned -14 05:35:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r2, 0x0) accept4(r2, &(0x7f0000000140)=@x25={0x9, @remote}, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x300, 0x0) getpeername(r4, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x80) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1902.859638] binder: 18540:18541 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:54 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) write$P9_RLERROR(r0, 0x0, 0x0) [ 1902.956004] binder_alloc: binder_alloc_mmap_handler: 18540 20001000-20004000 already mapped failed -16 05:35:54 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4c00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000180)="f2f866b9800000c00f326635004000000f3026f30f2ab000a0dde4440f20c0663502000000440f22c026f3dbceb8b6008ed0f30faf74b40f320f30", 0x3b}], 0x1, 0x0, &(0x7f0000000200)=[@cr0={0x0, 0x10}], 0x1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x5) connect(r4, &(0x7f00000000c0)=@x25={0x9, @remote={[], 0x3}}, 0x80) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000024d7d3156c565a71400008998b5467a08fd510000abbf6620000000"]) [ 1903.029641] binder: BINDER_SET_CONTEXT_MGR already set [ 1903.047879] binder: 18540:18556 ioctl 40046207 0 returned -16 [ 1903.056579] binder_alloc: 18540: binder_alloc_buf, no vma [ 1903.116581] binder: 18540:18545 transaction failed 29189/-3, size 0-0 line 3035 [ 1903.122105] binder: release 18540:18541 transaction 820 out, still active [ 1903.133122] binder: undelivered TRANSACTION_COMPLETE [ 1903.178594] binder: 18540:18545 ioctl c0306201 20007000 returned -14 [ 1903.185675] binder: send failed reply for transaction 820, target dead 05:35:54 executing program 3: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000300), 0x0}, 0x20) 05:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xfdfdffff00000000, 0x0}) [ 1903.300538] binder: undelivered TRANSACTION_ERROR: 29189 05:35:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000100309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@can, &(0x7f0000000040)=0x80) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x288040, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000180)={0x200, 0x4, 0x1, 0x8001}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1903.489410] binder: 18575:18576 ioctl c0306201 20007000 returned -14 [ 1903.543284] binder: 18575:18576 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) [ 1903.590055] binder_alloc: binder_alloc_mmap_handler: 18575 20001000-20004000 already mapped failed -16 [ 1903.632425] binder: BINDER_SET_CONTEXT_MGR already set 05:35:54 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4c01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1903.682493] binder: 18575:18586 BC_FREE_BUFFER u0000000020001000 no match [ 1903.695508] binder: 18575:18580 ioctl 40046207 0 returned -16 [ 1903.697636] binder_alloc: 18575: binder_alloc_buf, no vma [ 1903.714210] binder: release 18575:18576 transaction 823 out, still active [ 1903.734005] binder: 18575:18584 transaction failed 29189/-3, size 0-0 line 3035 [ 1903.745105] binder: undelivered TRANSACTION_COMPLETE [ 1903.765521] binder: send failed reply for transaction 823, target dead [ 1903.781179] binder: 18575:18584 ioctl c0306201 20007000 returned -14 05:35:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@commit={'commit', 0x3d, 0x1000000000}}]}) 05:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = dup3(r1, r1, 0x80000) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000240)={"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"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:35:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYRES32=r1]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x1, 0x200400) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x9, 0x8001, 0x1, 0x0, 0x80000, 0x3, 0xa, 0x4}}) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1903.934755] binder: undelivered TRANSACTION_ERROR: 29189 05:35:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000024d1f00000000008100000000005bdd047feb9e236f12182cbfcc0090a539207af2772be072d9d8b900"]) 05:35:55 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb701, 0x0) [ 1904.117745] binder: 18606:18607 ioctl c0306201 20007000 returned -14 [ 1904.182491] binder: 18606:18607 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:55 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:35:55 executing program 3: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup2(r0, r0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1904.289175] binder_alloc: binder_alloc_mmap_handler: 18606 20001000-20004000 already mapped failed -16 05:35:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_tables_targets\x00') ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)=""/146) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x399) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1904.392149] binder_alloc: 18606: binder_alloc_buf, no vma [ 1904.392966] binder: BINDER_SET_CONTEXT_MGR already set 05:35:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000600309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000003c0)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x224, 0x20, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200002, 0x0) fchmod(r1, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x119142, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x80400001) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010600000c00000000"]) [ 1904.449889] binder: 18606:18619 ioctl 40046207 0 returned -16 [ 1904.487805] binder: 18606:18607 transaction failed 29189/-3, size 0-0 line 3035 [ 1904.564666] binder: 18606:18607 ioctl c0306201 20007000 returned -14 [ 1904.565742] binder: 18606:18631 BC_FREE_BUFFER u0000000020001000 no match 05:35:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) [ 1904.631460] binder: send failed reply for transaction 826 to 18606:18607 [ 1904.665542] binder: undelivered TRANSACTION_COMPLETE [ 1904.679400] binder: undelivered TRANSACTION_ERROR: 29189 05:35:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:35:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1904.769407] binder: undelivered TRANSACTION_ERROR: 29189 [ 1904.949028] binder: 18650:18655 got transaction to context manager from process owning it 05:35:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sysfs$2(0x2, 0x6, &(0x7f0000000840)=""/109) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ptype\x00') ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000780)=0x8) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000700)={0x7fffffff, 0x80}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x91bf1dca99b139ed, 0x10, 0x0, 0xfffffffffffffc85) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) execveat(r4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000300)='md5sumprocmime_type-\xc3\x00'], &(0x7f0000000580)=[&(0x7f0000000380)='/proc/capi/capi20ncci\x00', &(0x7f00000003c0)='/dev/kvm\x00', &(0x7f0000000400)='/proc/capi/capi20ncci\x00', &(0x7f0000000440)='/proc/capi/capi20ncci\x00', &(0x7f0000000480)='/proc/capi/capi20ncci\x00', &(0x7f00000004c0)='-proccgroupR\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='/proc/capi/capi20ncci\x00'], 0x1400) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000001200)=""/4096) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfff}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x8, 0x205, 0x9, 0x3, 0xcf6, 0x7, 0x5, r6}, &(0x7f0000000280)=0x20) read$alg(r5, &(0x7f00000005c0)=""/211, 0xd3) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f00000006c0)={0x4, 0x7}) r7 = syz_open_dev$dspn(&(0x7f00000010c0)='/dev/dsp#\x00', 0x9d3, 0x400000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001100)={0x0, 0x30, 0x80000001, 0x40}, &(0x7f0000001140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000001180)={r8, 0x7}, &(0x7f00000011c0)=0x8) flistxattr(r4, &(0x7f00000000c0)=""/175, 0xaf) 05:35:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 05:35:56 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4d01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1905.053343] binder: 18650:18655 transaction failed 29201/-22, size 0-0 line 2887 [ 1905.126463] binder: 18650:18660 BC_FREE_BUFFER u0000000020001000 no match [ 1905.160435] binder_alloc: binder_alloc_mmap_handler: 18650 20001000-20004000 already mapped failed -16 [ 1905.213583] binder_alloc: 18650: binder_alloc_buf, no vma [ 1905.238236] binder: BINDER_SET_CONTEXT_MGR already set [ 1905.286064] binder: 18650:18664 transaction failed 29189/-3, size 0-0 line 3035 05:35:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000035000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) write(r2, &(0x7f00000000c0)="9ea24cf52d116e72e5105e1ecb86ddbec22b3bf80683e1aea05a68eed6b0ea9e187ef9c973d80a35b067bbb4d6abceac49fcaf76fd31748eec21c4c7b860d8f9010000000806f36fcd1fe5bb8746aa116c5bf274e140b40187734fd362d80c5f215c11cae5348102d7d4d840015931354f3637f32a60b9cb072b9d80a60efaec9b4294f3ff6937be3c11cda0061979a5c68d71be3a8172adab0c98d162e0348c473d5e997446963b6e5c343b15de33c91370cc8cbb2783b9f7660a7539df5806c7e7a8f000b40bc1458e23c7be37403bcb76711c2a803c7148a1e691a5c5e3c0", 0xffffffffffffff1a) [ 1905.333434] binder: undelivered TRANSACTION_ERROR: 29201 [ 1905.345114] binder: 18650:18655 ioctl 40046207 0 returned -16 [ 1905.372225] binder: undelivered TRANSACTION_ERROR: 29189 05:35:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x2b5) geteuid() getgroups(0x0, 0x0) dup3(r0, r1, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000100), 0xc) 05:35:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000509ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xb, 0x100012, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x639d87ac427394b, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x3, 0x3}, @decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x4}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:35:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/172, 0xac) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1000000000000219}) 05:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x1a1000) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xc1, @mcast2, 0x4}], 0x1c) [ 1905.783180] binder: 18690:18692 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1905.805633] binder: 18690:18692 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1905.813862] binder: 18690:18692 Release 1 refcount change on invalid ref 2 ret -22 [ 1905.842769] binder: 18690:18696 BC_FREE_BUFFER u0000000020001000 no match 05:35:57 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4e00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1905.896918] binder: 18690:18692 BC_ACQUIRE_DONE u0000000000000000 no match [ 1905.951485] binder: 18690:18692 unknown command 0 [ 1905.963909] binder: 18690:18692 ioctl c0306201 20007000 returned -22 [ 1905.983533] binder_alloc: binder_alloc_mmap_handler: 18690 20001000-20004000 already mapped failed -16 [ 1906.016205] binder: BINDER_SET_CONTEXT_MGR already set 05:35:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000140)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x101) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1906.096335] binder: 18690:18705 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1906.113352] binder: 18690:18692 ioctl 40046207 0 returned -16 [ 1906.134044] binder: 18690:18705 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1906.178560] binder: 18690:18705 Release 1 refcount change on invalid ref 2 ret -22 05:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1906.236336] binder: 18690:18705 BC_ACQUIRE_DONE u0000000000000000 no match [ 1906.267746] QAT: Invalid ioctl [ 1906.279621] binder: 18690:18705 unknown command 0 05:35:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000100)={{0x1, 0x1, 0x4, 0x81, '\x00', 0x80}, 0x0, 0x0, 0x9, r4, 0x5, 0x3f, 'syz1\x00', &(0x7f00000000c0)=['/dev/kvm\x00', '\x00', '/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00'], 0x25, [], [0x7ff, 0x2, 0x4, 0x4710263]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1906.305721] binder: 18690:18705 ioctl c0306201 20007000 returned -22 [ 1906.344321] QAT: Invalid ioctl 05:35:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11630840", @ANYRES64=r2], 0x0, 0x0, 0x0}) r3 = dup3(r0, r1, 0x80000) accept4$x25(r3, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000a80)) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x3, 0x4) 05:35:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0fc7af00002ed9ff0f090fc76a2eb800008ed836360fc76f00f20fc27cafd72e0f18de66b9a70b000066b8fa0f000066ba000000000f30fc", 0x38}], 0x1, 0x4, &(0x7f0000000140), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000209ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:57 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4e01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1906.627986] QAT: Invalid ioctl [ 1906.656822] binder: 18721:18722 ioctl c0306201 20007000 returned -14 [ 1906.707347] binder: 18721:18722 unknown command 1074291473 [ 1906.719380] QAT: Invalid ioctl [ 1906.759253] binder: 18721:18728 ioctl 8818564c 20000a80 returned -22 [ 1906.807232] binder: 18721:18722 ioctl c0306201 20000200 returned -22 05:35:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1906.862270] binder_alloc: binder_alloc_mmap_handler: 18721 20001000-20004000 already mapped failed -16 [ 1906.926430] binder: BINDER_SET_CONTEXT_MGR already set 05:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1906.972451] binder: 18721:18732 ioctl 40046207 0 returned -16 [ 1907.007596] binder: send failed reply for transaction 833 to 18721:18722 [ 1907.008426] binder: 18721:18741 transaction failed 29189/-22, size 0-0 line 2896 05:35:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) set_tid_address(&(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1907.053002] binder: 18721:18728 unknown command 1074291473 [ 1907.076858] binder: 18721:18728 ioctl c0306201 20000200 returned -22 [ 1907.098825] binder: 18721:18722 ioctl 8818564c 20000a80 returned -22 [ 1907.111984] binder: undelivered TRANSACTION_COMPLETE [ 1907.134065] binder: undelivered TRANSACTION_ERROR: 29189 05:35:58 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4f00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1907.163731] binder: 18721:18741 ioctl c0306201 20007000 returned -14 05:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x3b87, 0x200000000000000, 0x5, @random="20b31a4db59b", 'vlan0\x00'}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x8a5, 0x1ff, "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", 0x31, 0x4, 0x5, 0x8000, 0x100000000, 0x2, 0x2, 0x1}}}, 0x128) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) accept4(r3, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000fffffff200"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1907.273355] binder: undelivered TRANSACTION_ERROR: 29189 05:35:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:35:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0010"]) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x6e8a2042, 0xfffffffffffffffb, 0x20, 0x4, 0x9f}, 0x14) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80, 0x800) accept$inet(r3, 0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1907.601163] binder: 18756:18761 ioctl c0306201 20007000 returned -14 [ 1907.642657] binder: 18756:18761 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000509ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:35:59 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4f01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1907.741092] binder_alloc: binder_alloc_mmap_handler: 18756 20001000-20004000 already mapped failed -16 [ 1907.873194] binder: BINDER_SET_CONTEXT_MGR already set 05:35:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000002975600000000810000000000000044e729557e2fd07d2d449179201d09952e4f03d9a2421d8715d05a6f92be5c5d4eb1144f27165e0dc99e1a8a0328f48044c32b85b71ff2925f84c8735bd3a81e2131af2e348bb3707231fabf64791873fabeaf8c3b434e94b5a125bb848b534779c9fe9e157c99d52d238cbc168db101440bdd1055b3749c56946555ef37b8e7c86d0fa352f59601f4735993e0ce3d64ad15fc20d03ea336b3f8d7c332f6c44bababb1a1289615a39b6dcd"]) [ 1907.920202] binder: release 18756:18761 transaction 836 out, still active [ 1907.928391] binder_alloc: 18756: binder_alloc_buf, no vma [ 1907.940124] binder: undelivered TRANSACTION_COMPLETE [ 1907.959858] binder: 18756:18761 ioctl 40046207 0 returned -16 05:35:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001100)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000001200)=0xe8) r5 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001540)=0xe8) stat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000001640)='/dev/dri/card#\x00', 0x10001, 0x115201) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001680)=0x0) mount$9p_rdma(&(0x7f00000018c0)='127.0.0.1\x00', &(0x7f0000001900)='./file0/../file0\x00', &(0x7f0000001940)='9p\x00', 0x20, &(0x7f0000001980)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@version_u='version=9p2000.u'}], [{@obj_type={'obj_type', 0x3d, '/^+GPLself\'proc]posix_acl_access'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dri/card#\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@uid_lt={'uid<', r6}}, {@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt={'fowner>', r4}}]}}) r10 = geteuid() getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001ac0)={0x0, 0x7fffffff}, &(0x7f0000001b00)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001b40)={r11, 0x8}, 0x8) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000001880)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)=[{&(0x7f00000010c0)={0x40, 0x28, 0x4, 0x70bd26, 0x25dfdbff, "", [@nested={0x30, 0x7, [@generic="4b5d79064ccf8200fa9984eb988033ea7fa3e50d95400245c227d9f54691a809d18f5e", @typed={0x8, 0x2a, @ipv4=@local}]}]}, 0x40}, {&(0x7f0000001240)={0x1c0, 0x39, 0x222, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x44, 0x13, [@generic="82d803f9239a44bfe826048992b83b071755698b1a9df39a953e3b59efb5bf098ec7a0f7b0ae4c1a9fa92272a27b815a", @typed={0xc, 0x45, @u64=0x7}, @typed={0x4, 0x8c}]}, @generic="2c084d1c755db4c0bfe47e8501dfc324a0c5360e8dec03e13254e6cf465fab57a4fbc205db2616928db5fb33a8186e93387c8b23ba2b0d5828b668dbc625c1436bca60dea68c127e548986e8f6ad1f5722dc854101a57e4aea162750e0c75f049a93fb8750bb6689e2f82185fde0d19d80b24c31eda5c304149eea134c42b75a705c75eda2aba220c459c59795580c7a0dc75b36efca4e682d0af388f1d9e623b09affd40b23b81ed7cca77f8b9d92b2ec6ed33fb1a1376983b75bea7604027ee8524ad74575610872d0e3b6cee7492a39451d8708fbd5cb7ec3a824fc4e130098461eaa95069f2b8847955501829369192cbe22cb7e52", @nested={0x74, 0x8e, [@generic="37ea481e", @typed={0x10, 0x18, @str='/dev/vsock\x00'}, @typed={0x8, 0x73, @uid=r4}, @generic="6966dbbe", @typed={0x50, 0x82, @binary="248a8274b5eed53f62add2e62ad6db883ada6971054dbf235b1c801de9639021a793c846dc7066dade416515a68aceb6ef2fcd2728f94788a1904683074e6edb98ecd16c8027c21499623b"}]}]}, 0x1c0}], 0x2, &(0x7f0000001780)=[@rights={0x28, 0x1, 0x1, [r0, r3, r3, r3, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r3, r3, r3, r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r3, r1, r3, r1, r3, r1, r2]}, @rights={0x28, 0x1, 0x1, [r2, r1, r2, r8, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r12}], 0xe8, 0x4081}, 0x44800) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1907.966209] binder: 18756:18772 transaction failed 29189/-3, size 0-0 line 3035 [ 1907.966900] binder: send failed reply for transaction 836, target dead [ 1908.011450] binder: 18756:18772 ioctl c0306201 20007000 returned -14 05:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0xc5, "78101803c9dae2e25daa0bba9e6a90dfd8638fb12246466e637e92a9b5db235c18ac4405adc9b8fb1a6b84083ef1c397a8af3f8d9b305f431f36066aef64446b97a5aac5eb95f94ab233008c8230e889a16b409dfc737e949a0f92522a397ad04d5a6cd03cc15f23af49d8ee65f810b5580e6f66187b950ca29f7d9675ec54861d5b7944e409967010757f7ecf3871fc7b0772ac07529c841c8a79274cbb1c5405539b517b05b54ab8ca7f0f509e0fb5a70c9bd5fba4dc71c8a5b3407e0945cd175a0fbf7d"}, &(0x7f0000000040)=0xe9) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bind(r2, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r2, &(0x7f0000000180), 0x400000000000370, 0x3b9ac9ff, &(0x7f0000000100)={0x77359400}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1908.164231] binder: undelivered TRANSACTION_ERROR: 29189 [ 1908.196086] Unknown ioctl 35075 [ 1908.270912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1908.304007] Unknown ioctl 35075 [ 1908.395851] binder: 18789:18793 ioctl c0306201 20007000 returned -14 05:35:59 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5000, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1908.436135] binder: 18789:18793 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:35:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1908.502999] binder_alloc: binder_alloc_mmap_handler: 18789 20001000-20004000 already mapped failed -16 [ 1908.553151] binder: BINDER_SET_CONTEXT_MGR already set 05:35:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x400a02) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x5, 0x1000, 0xf2, 0x3, 0x1, 0x6, 0x8, 0x6}}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x48000000, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1908.584735] binder: 18789:18797 ioctl 40046207 0 returned -16 [ 1908.617601] binder_alloc: 18789: binder_alloc_buf, no vma [ 1908.652552] binder: send failed reply for transaction 839 to 18789:18793 [ 1908.657540] binder: 18789:18793 transaction failed 29189/-3, size 0-0 line 3035 [ 1908.662416] binder: 18789:18800 BC_FREE_BUFFER u0000000020001000 no match [ 1908.694034] binder: undelivered TRANSACTION_COMPLETE [ 1908.710936] binder: undelivered TRANSACTION_ERROR: 29189 [ 1908.717246] binder: 18789:18793 ioctl c0306201 20007000 returned -14 05:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r3 = dup(r1) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000400)=0x2ac1) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x102, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x20000000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x328, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="036b0840", @ANYRES64=r2], 0x0, 0x0, 0x0}) 05:36:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff02c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1908.854558] binder: undelivered TRANSACTION_ERROR: 29189 05:36:00 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5001, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1909.040499] binder: 18813:18818 ioctl 40086432 20000400 returned -22 05:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) r3 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffd) add_key$user(0x0, 0x0, &(0x7f0000000300)="23b34ece2679db0c68113ff574ccb1a6bfda558c47dd7ce03abdbdeb9ff2188de0354ba46cf68a89dec97fdcff8530f3fd407e8ed591dfbb604b33e0c6302b5e5faaaaeda2d60c37f8bf7b91ed3db3f49d387f747ab479c199130dd08a9856c983348af2b7488bd5721f9ee0825c7b25bee152a1989028ba498518ed0905ecac3eb1cf2baf2e8451b52bc3ddeeed256dafdbd8bb3972d0c2f7cc98c504f294611dd0c6df25bae50d6fa58f7feba27b428f61df57301005694af827ce227475ab90eb980a5e6fe7f7a6555fb736a1561f06eb80cdf37073746093a91cac1d2543d6e8f4dec6b8b2e492cafb311f900e83583a0e7bc92d979740afc0a862de54205c59efe719e7d89c371f10ac8ec2a8cad66270079491a9b64d747a520a6c0047edcccee4396f88ac4d4fda8ad991fa20c97c21bb74f46cc0afa49905719a8b04c93b599ae82bf02110eb51bc7de2f9c48cd1c0a9df03dabf3ee572ac933c0f14915955a4dcde749223bd65da0cc71662208030b4f2fbd7f6b9720ec234946268b1efcd4134aaa0c01f4362496de99d6c8ea4ae2a7d443dfdebbed6754a930200962dd372b37e3c77bdaced5dc8cc5dede947fe15061c62be7056e3b111d547ddbc62a0fae66ee2aa2565ac5763adae5281adad39bdb83427b4287f6241b0e23191e303e4b52a5e7ab23e0744581e0c928f793638cb52b60371d79f1310e1f8df6a8943cae9e3840146866e1a197a7a667e774f23a284ec0aa96748a3b42e3ae2538173c7ce29aae8a883e17c6c46240b32ce39ca8f0cb73f3b120e519d3a530d77221ea2c1cc8f96bdbfb85d4c44a0066fa9a025ac98434a05e01664623a6a1d77dba0e623bb1043d07ddae67845e3cfeee6e59c8259bfaf4fe0a805cd2454f7986c249cab7d84b6c0394f0e4765875fa82f7ea2d31465000c532328799948fd1739925001897c36bc6650c3b2fd879f3916a24e272c40d58bca7d78f51e95e1227339b65d91f2d4dd0e36650d8dfb05bf0e04398b0e292b2f3e52b55d5059ed0350d95c684209ea5277066d50671d920d699f3c5685ec56464a030b36ec80296356585bf2b15f25a801568ab68c23884149e074dbee4ccffa6e55918f8e250a511681ae92897b925f081e7f450a4e40cdd34e6638429e0b7b519f8e99918afaf426adff8341f1490a37442de2acbeac47859ee7d05863d0457e681b3ba065fd5f5e91ba0c85347a6a168ca5270b054180e7e23478cd725db74ad0e453788cd09cbcca1f0c0b050dfe2a6b8296c8451d74b9289991173d345a593ec0a8d36a509b02ca66cdc43576ec5d10a10b735dd5cfd7e37153dc49ba1b2e13e400c21119f98ebb7e2c9bbf6393f1a5893f0c80b66252282cb13588ac47ecd16bfa6ff5acf58c5039e32ccf496e9187c09ffbbde891b27b57a1a63ff4a929ed50005268b4bfe0dc52bb93fca90234a7cbd794da6971626b5e78546fd07b8bb26860fe6ae0ebe244c7e3bd987235a6c6b93e3de0a6b8ff503f66c7b030bbdf6b602f283ce024d1b7039096bc50498396f7ada52419732a5f785139446321a94b540fda8c29358b5087ca5559aa57b4998195b506e375af81333ef88fdee2b2b941d461ed58c2f3afb15e23b51ae199c73c2b7784be9fd5875a2bc34b411f0d7c09bdead5bc40925ce96521aefbf413b78a0549dad9fa3b2876ff110e3b5702c273dc7691d4b070be072d641f1938f5148c29e3920000de2b3dd8eb4b0f443cf672ae9403192386efd3a936eb48e597fb19d181cf9edb742e244d482cdb9d92ba0159e8f8d42223027ce11ddcfc5bf9ed9f4e88f2a1ca622e037ffc69877380ac9dea6d75fcddab18c9f06b294ddeb2f1bff65b0329eff01bd0d50ce8c7b0875c2309982ae4f7915cb8816fb103a8c14cbbc74cba4949c30d0e897dec039a4d8ecce42dcf8870cc86522ab15fed64783401e13263ce7316ff2b7517245318ad452810bac058faf65d13bcba8beee70032fe4b22a2bb2b1159e7f3fd2f316c812760ceb57178e54cd40a9b1d0d5579633b5eb67c961d42de7a2c42c9f1f4795c2ef32b6b4739378bf534fc338b7951e3a8ea7fe1b711bc93a536d49fc1d66408da6804b6b42ebdcbfd3749ddf94a3ab0be8d3bf3b277d24b2080ebe66b46a22458a4ec3bd26aa0a6dbfce883bf1839ad33c675b6bdc8ac059556592ad8f72a6edeed6260a2eb3086e15b9e3f5ffc78190aeca96a23d84e05d7c9fe7817713ab01eeb2eeb07f9b63f29fefca55657593747fc1ec680bc9673e8fd5ec1645a2c95124d0e30017a292515c9a18626ef3742196661be9740eadb2afea79981da7916e094ff4b134eb0b7dde3e80e895afade678366f06179584a35c3da6dea46cd536161268803c68ce315ea7eaf4d78b40378d406f3cfe5a245c52543e0802efec4b84a3942a5cba8926545829c7349a813dec3a8314ebce9b8bf342d8b126d2b0a257c4c6d397a046c44045a8abaa3702b4505df89745304442629fa941f1857b7b97b7710b0f2092f3586a199e25f5a59af5eeec614cda5c81dda0df7be161bfb210f3c068b6e396a0cc2ba784310ed3ffa07d1f560a2ca5bc3b947ea4fa4396f8cb880ad83465f3ed88000e9c1fd0835c9ef6cfd89e36ee56477472981f3e91439a0e4179ba3e099f0c91b3bbdbf54193561d600d2cbdc582995c50b0e9a6fe4e003d3d7bb74ec02a41b69d0e75f8d6ad5d6ef0375023fcb88b3efd1d639e15601711b90d5580ab403b7338c7192081a0e29aee0d14c899af29e676bb3e8c643d05d02d67b3fb12897efd6a2cee4a633c5997d9c1019e2a8bedb5ca7f08bf6ed3bee7e698a49b346cc7ceeb97afa6e5d09719fee28658c5e54370189bb2724978b14ba51015aa0d84ec14608e9987b92156ff80e2ef3d0835c774f938d5cbc884cdac935004c589bfd190e99700ffac3e5a0f1f4184701dea0e1627c4fa719c8a7ffbe86241e6ec8920c9640348954f7fdc7ac322456927fbfc3676b30632260dab52b3f682a894ae14cfa0742baa01cdaae57a2df47a976f049f3f433e82e320798c178ec0252bdb3c7d4250886b379d08a6ef7af0a7ac3cca39381412110ac5604c2f7fd2b4268ca855845282f7129531f389c4d6cccf3b2627998e69e271b681d59af5afa729f6394248d5aea2bdfaa311c9a17651bdc273f89587d47fa87c8c5e590ebc1d0bf8ba7eae601ea695d71a2dfdfe2e294e80aa7e9d800474dd0bf30f9a2b4b449a148d2e74f016f2a9d6c91078a36a4a065fe92a2c637e85d33dd4fb29ddad78636c8de13c2dc366f9b4cf50c18f2e90418cf2ba420079c1a1f40310d2b6f1cb345e2fa6b1c1fbfd25fce878832d9286294f28da1b6588b400e7375d85d252e86c705615d49cb8abdd1bfc87c400c0df2a724ef43b81d5db5c22c17b5e21019b1b639abc136052127293ad98d221bb75e1576fbb224c941f63f325037f13d0e485344cc8d557e4a57d99cc2014cda6b10a6e011aed9391144aaca3736d33f2e06bcbcce9d36573bb75d7c3e1e2b7b37539b34289f3228cace0ce27d08d70f0368bff7910f70b70bb2cf5eb7c85a922a8c59727b78c020e2416bce8d32b538ed9797a03e335a6b09625cf96d11caef3d4f3b40b03e9a38c7b3fafa6f6883c9e8cd3755d53570aade1b23cc5aebc3b6bc7f44122585044dd324ab8acb5f9661a530d194bee41e1a75fa2390e01f3591fc7b077de483264344575e7389d88a8d7a00b15638968a4fd41e567d6b830650f6b1e23e55f4eaa588130aac88fe7c8c65a9f0c03289b4c818219b621e0ccd2a11f752979b2711de1ee9cf28f85fb1408a80f1220d3be6ad1e39f407de835c48d08d0716ab38bdb9a0aa318fc702697664b5f2f2da18f093da2e1f5921d9161ae8a4f605b0c2d11e866ebff53eb60b2ecdf40763094da7b9db449e975075b7e189c634638b125192c7b708d320afc685d59356decbc1a0f0920c948b0629802104e04afa19d61af89324ca79521d6cc561dcb2cf643e998564a75d2b16097fe9e4c5f476de2db3b8a565e3e8b1ebd784877c0bebfc0c86eeb730954d69aa4279f58e3a797d97e4666845b9538983d3eada9dc4da643385966ee1c4f07b130f2f2de0ff44f9ffcd72ac07fba62f095eddd62c7ac15217d120152360ffb8a0f066907d791b65539050e23762cc6f497ceadd57da4d02b847d1b17db756b12b38d9a31e727ec3c39472ee2cac69df3ca88acf97936874f50348767169f90b070e77690bdae23693364e499c5b360e04ea2fcc9edda1c7e7c7f246afa8988260d2c28de36a02152d17e9b01b76efcf42b3c52adc0b00f0e0909be9a153cbd56c8a32967b73688ca5fab1343dd6ccc2da69ae27c19d1898502e56b0f0a108977e98a318fd11db6e96666354708adb33ee188251a4bc85864fe5bf6a75c49bb10c7e0210e1ee8764bc2c693022ff22801ee32f118d2f79add802edc9c43f27655372113915dd7418ff6c4d4968db3458fedcf8fc6535d4796aaaab8ecfd45691f2c01a5d1b3f9f475665a444c0ad2b5f4f029596621137ff846e064a05c843eca5da7865e5d4bed029fc8b290ff1402e3cb9b3da5475aa154e12689045aa18ede68c9e3cb1d5e85d5e9b8c5c801ef2f78893732159cc0d6bea5b4e70e4fe7943dc2efb271e3679c9d9c5e6db15d7a1f734a05c427e06783efbdb3622a42255722b8b835332f3b739ad9931461b301bcd3fe3eee7896d4e817d39d5e05396f8a6d8f552531ec74ddb696fb4c470e6dfbfa2ad65971f601a29165042a7f208db50ebcfa24985074898d8e2ad767248e44a7792539667bfba4904acbe75c5ad064c0040e8105b88484fc7d19612933d9244d119d4edece442b2b184d0f4a694f23dd7e7c1bdf1dc14022d224f1171b886416976489669073babcd451cd5da0d17d6a1c9f824d1db8fcee4eb", 0xdb6, r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1909.110630] binder: 18813:18818 unknown command 1074293507 [ 1909.161818] binder: 18813:18818 ioctl c0306201 20000200 returned -22 [ 1909.218232] binder_alloc: binder_alloc_mmap_handler: 18813 20001000-20004000 already mapped failed -16 [ 1909.259952] binder: BINDER_SET_CONTEXT_MGR already set [ 1909.311587] binder: 18813:18818 ioctl 40046207 0 returned -16 05:36:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='/dev/kvm\x00') bind$isdn_base(r3, &(0x7f0000000100)={0x22, 0x5, 0x2, 0x0, 0x1}, 0x6) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r3, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xbf2, 0x8001, 0x4, 0x4, 0x0, 0x4, 0x2008, 0x5, 0xfffffffffffffff7, 0xffffffffffffffa3, 0x5, 0x200, 0xffff, 0x6, 0x8, 0x1890, 0x88, 0x9, 0xb98, 0xfffffffeffffffff, 0x4, 0x2, 0x6, 0x3ff, 0x100, 0x7, 0x6, 0x22, 0x0, 0x5, 0x6bf401e8, 0x40c9, 0x200, 0x5, 0x80, 0x1000, 0x0, 0x4, 0x1, @perf_config_ext={0x3ff, 0x2}, 0x508, 0x0, 0x1, 0xb, 0x0, 0x5, 0x794}, r4, 0x9, 0xffffffffffffff9c, 0x2) [ 1909.353455] binder: 18813:18831 ioctl 40086432 20000400 returned -22 [ 1909.401704] binder_alloc: 18813: binder_alloc_buf, no vma [ 1909.422896] binder: 18813:18834 unknown command 1074293507 05:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1909.448949] binder: release 18813:18818 transaction 842 out, still active [ 1909.457138] binder: 18813:18827 transaction failed 29189/-3, size 0-0 line 3035 [ 1909.468469] binder: undelivered TRANSACTION_COMPLETE [ 1909.495559] binder: send failed reply for transaction 842, target dead [ 1909.510455] binder: 18813:18834 ioctl c0306201 20000200 returned -22 05:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e5620840", @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1909.612116] binder: undelivered TRANSACTION_ERROR: 29189 05:36:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f777fadbfcc1993a69ed043a69432017393ee45acb7e9370b45a22b3cd79835183398e207e5b1355e6129e738a95f1c2ce1b3811ccb251694fa7e70e5f38722cfaab68b5f2957dc35abf44daa0c1711da456ca799c9"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x2, 0x7, 0x4}) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) wait4(r3, &(0x7f00000000c0), 0x2, &(0x7f0000000100)) [ 1909.782247] binder: 18845:18846 ioctl c0306201 20007000 returned -14 05:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1909.840702] binder: 18845:18846 unknown command 1074291429 [ 1909.874932] binder: 18845:18846 ioctl c0306201 20000200 returned -22 05:36:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff04c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1910.005203] binder_alloc: binder_alloc_mmap_handler: 18845 20001000-20004000 already mapped failed -16 05:36:01 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5100, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1910.049786] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.060665] binder: 18845:18846 ioctl 40046207 0 returned -16 [ 1910.114743] binder_alloc: 18845: binder_alloc_buf, no vma 05:36:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:36:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xda9, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1910.220206] binder: 18845:18862 transaction failed 29189/-3, size 0-0 line 3035 05:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1910.270146] binder: release 18845:18846 transaction 845 out, still active [ 1910.291399] binder: 18845:18862 ioctl c0306201 20007000 returned -14 [ 1910.299006] binder: undelivered TRANSACTION_COMPLETE [ 1910.324446] binder: send failed reply for transaction 845, target dead 05:36:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0004000000000000243b2c82a245a9bb7b0a84b13ee693342f8a19eb6fcff031fe5d477b9b993408645c3b0b9c77d6b8c35d4df32a26ef0a70758c7b"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000140)={{0x1, 0x0, 0x3f, 0x0, 0x5}, 0x200, 0x804b, 0x7fff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840d156ef3a51", @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1910.463998] binder: undelivered TRANSACTION_ERROR: 29189 [ 1910.614955] binder_alloc: 18881: binder_alloc_buf size 4189870528094100896 failed, no address space [ 1910.650761] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 05:36:02 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="eb"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1910.663041] binder: 18881:18882 transaction failed 29201/-28, size 3598604181861665327-591266344159632894 line 3035 [ 1910.698727] binder: 18881:18883 BC_FREE_BUFFER u001000513aef56d1 no match 05:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1910.738229] binder: 18881:18882 ioctl c0306201 20007000 returned -14 [ 1910.777143] binder_alloc: binder_alloc_mmap_handler: 18881 20001000-20004000 already mapped failed -16 05:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [{0x4b564d02, 0x0, 0x95ea}]}) [ 1910.794506] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.800197] binder: 18881:18882 ioctl 40046207 0 returned -16 [ 1910.832819] binder_alloc: 18881: binder_alloc_buf, no vma 05:36:02 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5101, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff08c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1910.897347] binder: 18881:18883 transaction failed 29189/-3, size 3598604181861665327-591266344159632894 line 3035 [ 1910.947300] binder: 18881:18896 BC_FREE_BUFFER u001000513aef56d1 no match [ 1910.984783] binder: undelivered TRANSACTION_ERROR: 29201 [ 1910.995609] binder: 18881:18883 ioctl c0306201 20007000 returned -14 05:36:02 executing program 0: socket$unix(0x1, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0xffffffffffffffec, 0x0) getpeername(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) fchmod(r1, 0x0) 05:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x42080) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @default, @null, @bcast, @null, @bcast, @netrom, @bcast]}, &(0x7f0000000000)=0x80, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/59, &(0x7f0000000180)=0x3b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1911.174592] binder: undelivered TRANSACTION_ERROR: 29189 05:36:02 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@remote, @multicast1}, &(0x7f0000000100)=0xc) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000002640)) r5 = dup2(r3, r1) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000280)=[@rights={0x20, 0x1, 0x1, [r5, r5, r2]}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000380)={0x0, 0x3, 0x8}) 05:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1911.408047] binder: 18915:18917 ioctl c0306201 20007000 returned -14 [ 1911.471177] binder: 18915:18917 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1911.614268] binder_alloc: binder_alloc_mmap_handler: 18915 20001000-20004000 already mapped failed -16 05:36:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x8000, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x9a, 0x3, 0xf7}, &(0x7f0000000240)=0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x8002) write$P9_RWSTAT(r5, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100130000000000024d564b000000c4e1e51ba3ca2d7d00"]) 05:36:03 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@remote, @multicast1}, &(0x7f0000000100)=0xc) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000002640)) r5 = dup2(r3, r1) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000280)=[@rights={0x20, 0x1, 0x1, [r5, r5, r2]}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000380)={0x0, 0x3, 0x8}) 05:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1911.698480] binder: BINDER_SET_CONTEXT_MGR already set [ 1911.706065] binder_alloc: 18915: binder_alloc_buf, no vma 05:36:03 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5200, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1911.751153] binder: 18915:18917 ioctl 40046207 0 returned -16 [ 1911.787868] binder: 18915:18927 transaction failed 29189/-3, size 0-0 line 3035 [ 1911.860800] binder: 18915:18938 BC_FREE_BUFFER u0000000020001000 no match [ 1911.860967] binder: 18915:18927 ioctl c0306201 20007000 returned -14 05:36:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff0ac7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:03 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@remote, @multicast1}, &(0x7f0000000100)=0xc) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000002640)) r5 = dup2(r3, r1) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000280)=[@rights={0x20, 0x1, 0x1, [r5, r5, r2]}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000380)={0x0, 0x3, 0x8}) 05:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1911.926835] binder: release 18915:18917 transaction 851 out, still active [ 1911.933905] binder: undelivered TRANSACTION_COMPLETE [ 1911.955609] binder: send failed reply for transaction 851, target dead 05:36:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xe, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b01b9f52ac3b90e0f11dd", @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1912.173898] binder: undelivered TRANSACTION_ERROR: 29189 05:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:03 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x20) 05:36:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x2, 0x3000, 0xfcd8247c6fe9420f, 0x4, 0x6, 0x4, 0xe5ad, 0xfffffffffffffffe, 0x3ff, 0x7fff, 0x6, 0x20}, {0xf000, 0x0, 0xe, 0x4, 0x1, 0x1020, 0x10000, 0x4, 0x0, 0x2, 0xc6, 0x8}, {0xd000, 0x4006, 0xf, 0xfffffffffffffffb, 0xfff, 0x0, 0x8, 0x4, 0x4a, 0x6, 0x3, 0x8a6}, {0x10f000, 0xf000, 0xb, 0x1, 0x5, 0x3, 0x1, 0x4, 0x3, 0x100, 0x0, 0x1}, {0x2004, 0x3000, 0x0, 0x47b4, 0x7, 0x80000000, 0x800, 0x4, 0x7ff, 0x8, 0x7, 0xdc00000000000000}, {0x10000, 0x0, 0xf, 0x10000, 0x4, 0x7, 0x2, 0x4, 0x7, 0x9, 0xffffffffffffffff, 0x1}, {0x0, 0x0, 0x1f, 0x5, 0x2, 0x8, 0x401, 0x0, 0x7, 0x3, 0xd0, 0x40}, {0x1000, 0x5000, 0xb, 0x200, 0x1, 0x3, 0xffffffffffffffaa, 0x0, 0x2, 0xfffffffffffffffc, 0x1, 0xfff}, {0x1000, 0x1480282bbf3ae0fb}, {0x1, 0x100000}, 0x40000, 0x0, 0x1, 0x104, 0xf, 0x1001, 0x100000, [0x4, 0x200, 0x1, 0x2]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1912.347269] binder_alloc: 18957: binder_alloc_buf, no vma [ 1912.364468] binder: 18957:18958 transaction failed 29189/-3, size 0-0 line 3035 05:36:03 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5201, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1912.390687] binder: 18957:18958 ioctl c0306201 20007000 returned -14 [ 1912.421600] binder: 18957:18964 unknown command -172424949 05:36:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x7) 05:36:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1912.505787] binder: 18957:18964 ioctl c0306201 20000200 returned -22 [ 1912.553470] binder: BINDER_SET_CONTEXT_MGR already set [ 1912.582516] binder_alloc: 18957: binder_alloc_buf, no vma [ 1912.596745] binder: 18957:18964 ioctl 40046207 0 returned -16 [ 1912.608314] binder: 18957:18968 transaction failed 29189/-3, size 0-0 line 3035 [ 1912.645584] binder: undelivered TRANSACTION_ERROR: 29189 [ 1912.646627] binder: 18957:18968 ioctl c0306201 20007000 returned -14 05:36:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:04 executing program 0: r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") recvmmsg(r0, &(0x7f0000001cc0), 0x311, 0x10102, &(0x7f0000000040)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001a00010200000200000000000001b669d451f1f0063ce22ba057fae219f171385121190b0ae858f9f1ff72c7f93e8ca855d7f4744d1cc169344279fdc793389b068ace4c38e2b7c2eedfbb0197ffb3db2c681dd503e297287f4099c3601311421a37331fffffc0000000000000000000000000000000"], 0x1}}, 0x0) [ 1912.819738] binder: undelivered TRANSACTION_ERROR: 29189 05:36:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff0ec7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/251) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) fcntl$setsig(r1, 0xa, 0x26) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x41, "aea10bd20b8dc4667a26105924f0479fb7d4123b84620b8a1dbc55974081b9d833e92032c2a62ca2db0cd8fd3ad2945fc992683454ef04a5b4c7cfb18c6bb2e80a"}, &(0x7f0000000140)=0x49) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r3, 0x1, 0x1000, "6dc5e5a31ca3a3536099a6b62d342f400925b066a4e7a207c4ff86501d6e1cb61688a80e337d8a5fb723f9fda96203198662270bd873ff2e0fd5f98a95d17dc795d7bedbb659792f290e7c6370b030e83cc96f0f13b5b8c25020b00a705711f5c3e5b8e8811666aa1f876b99b854af57230b71e083a5f332945cc338117f546ad9d3c0c984c02f3eb819c8c8e426c8c25e56f63edacc987214b1a930da80c89117ad2847dae45cb3d88332f48d462d5af9cf6f4a86dc1d12cabc98806588b49dafc7a08e0baa1c4ff939244009ff7ec2c76a386559f94080e8e15b16ba2c23c93d94dd9fb5cebc991d2ec4c049c9d21757dc41ca8c01b4c2eb55478ecb21af532fc24a60fb9bba99a7aa00ae33664974664a1fd9019752861281aed0f899a8159dc9c5aa1d19dc81b05f0bb60c56889a3f92ecf6c17381e65a39d0a18dbf258c872a39450a6046660e3f3525f1fa743dd0e5a641c26d1dcc54fb17576d9d146039cf846e4cc355e27437296535aa28490837e3b461c641f13c28b365aeb083778c68efcd5ef61a68fbd604385797548512769e20de02f4a882cb15d5c92689a223c110ac02653d101eef370f86fefcf3456bf7ec484d07970d754a55fec55f627f9b9d3c40c6f4b247feea0cd1a5a3c1e5c8420aa4625ff4cc88307a79e6ded5b61a5732f17636fb1238b2527234d23e043b21cc157ff8bfbe72900e380f49b1a6d07d343fd24f812807db077119c4fef5a94a8c0e9da68ca5346f67295977a3985692bf91d5aa8d0a758d39eeb4ee40551f829ede06390e44578cae91192f86d511274cc054dcb63b493e7555548ed718f3dd2150c67275c3a3e78b2a2880e202b589c3e466c07d65fab2458b9dde1e86e9362856efcb1ae1fb8846d451613fd1b0451632ec26f81435255dc8b1ca0adab473c8405e252a3df560990ad55ee95cd052547a58321db7fe2f8585f90ec66c93d02462bb288d30cffaa86698f4bfd9fd537803aef7271f790f02a9ae1d836df07c21e233f9880e0a36fb8b250f7c94a692c6cad3a0180d955114a042a93d2cac5932fe89e94badbb688cd23bc5eaec2d83fbb17132d042f0661e5566694380151a03115de41a3ec088418f26b774c5963856362beca0c6c9757866a71b3e0dd1bcecb8d256936f668b4865117d2cd432be386c9aa0573c0917d6786431876217dcb34d7517c70c82d8099705a8bd996353d8bc0a5f1a20c4521af1739ce72d228f8a5a37ecd3ff13cbaadf34b27ce74b93544132717b79edb1949c5deca0d1bea70789b4d28031e4d6b21ced3d513414f97e2987c43369731a52937e122ecf031214c298248719cf559d239a5a4896f0011de8b89d9cc55a342f528fe1fcf6bcb2b53f44a03350d2debdb32d26a9ec5dbedb18fd9bf55f13428e93e0ab22f333c770c9bf7c22e3236b1b3b29e5cdfe3d595c973b9a083ae5caef8bce2f0b56e31acc48b90940468c4665e4b4c8e8df1e525aca05102b1928cd5ae632e79d3c08a0dcb89620b929f643ef5f457dd2586503ae63efcd68cb21b8fe7d384f8268f5ffd4b764595fc9cd174fe5c115d757df4b1c869df63fcfe78a4a235b049d67e4ef62766396044f8f2b7c746817353dbfe1206004c4f7498d4db95fcd74079c6ae9725a7b41b6d2069b43aecbe3c1b2f90b675b666a0eca6f5a2c07abc45644113549449bfc88d750fe447a146115e458c6f77a83168a82cb15e03a01b9e031cc18570db3d27f984da00981b4ceb3ad3cd3e4a1653cb468762fa66e7d37015e5f25fe393d27d9eac0ac4c63f2c908f2458742c8fcdd342113a8f1144aef5160cf61bc17c0c9cbd7358d31887f8e0909aa5c1d7a3fe128b9558ff013023835d95b3f348dc38e1f3650245980f6af7c43cece6baf58ae2e4f7a0be4310882aa7eb29702374c3a7b2433ae8a3a43233bb0ebf0b145ea359c4f30ec6db54f0496ed71e35d796ab7350058281970dbd0ca339f3a258e63035ccdc407922390a62406faab9af3b698345dd5d5b2cbdcfa493a5aa3560cfbd37ebfeadd13a8df5246d88ead59dd722d7791a379f131af695eb998eaf253a4b61d4d296befb817fb8e3874e3212e6757169e4e76f414ed7ea12cc5215a8a7e2f4c6c4ae23d676d54a07254435d9874e66e993f294c94accf6c1557de4f85fd70904c041240cb7521990b04594adaed83f60376b0cc8c6f92864261ed4974b55c8e250c64e0c0697b85c6bc609b611b7231fb9812421d39ac24939836573129b8ee3279deb8392c18a2af0a3e982a2c7b9251ba95460d16d681e7d80e2f3dd2547560ee233959694e791ecab7396a4e2a7b299695d0227e38e3b440ccad628996d05dcdb30f4c57780cd2d47cf2bcae1c2c5311b366d7a162ff890aa80e89c01e635615d352eb1a5f623e3a2e5bbb655a9c4bd739c3d5bdb7aa2624ab33f6d4b2fd5e1bed9c4d354dd042a8fa6056eaa805ac78a5df58cf4c394e1a954326f35ea0a3eb08d5c289f51a0c16377cd6cb350253078d90094b2f06997dbc9ec30383b1def46c30f85902147d4aa023ea828548e14b488c552d8b06f2d2fbd3cdf17706c21957eacd4650c4525ab9fafd4734f5dbc616e5948f1d29c199a102019ecfdba82b3f81c0553a0a84b9966f955902a2aedfc641aa03340ae7364c079408609ca5faacaa90fd683651489426ef069d2baaed20abb9e77358247ae832784b77e4d0b886a8d25ab3123ff3755a71f1a8cd2082263306fcd4bbdaa13f2b4b6bdc6ba75ef5e56f5a4be1b1210ce05bc43c439704a00e950e560f4e2feb7446f002aacd3844ef12da53a51c0981259eae09b25587355d771dff81707dce88c3594676cab40bc96ffef45233fab588fabe27bc75789ed3b2bcd22f74af6c4477a949f4ec301b36705c91089546d69a11f07a145457e59de061b7bcac683df4c7a1a0d3714d3a01a350bbc47ad5f32a3a25071554390d6cd84be77c8a74b543792c94a03fbd037d53e82f8f7d04f63a76e70d691bd177d32d8fc14f6162081c6d06ea4fa6c02091b7cb9c400f418127f518fe641255c638192383aa983e9209dc4c94c3380fcee115356c39148416494deb7d727ce3fba3e27f7e47aa764ba78329dfdb46ff3a5f5f1e9e83c619396a58c6fd2e263da503fc45dc32b9c05049b3af3a9c31ba3ef978e48875da066855c3706c2b406208666d4abe08e5e8b6e4af347f667f089781b5ef2ad255ec6f8b37e0869a887e1be26ad2fe7e5cdc093f4919217dd249cb89ed111f116aa30b27aad14695cb26f3f1f32706b72c4179cd6ec3eed93041f333d32d32fa64a7c993de70a74c4b172c93d1f0890ade0f191a1d99c5ab015c0ed0f5cd65f392c2f08b0eae2fe7a8cc4d0cc883efc80c3aa3b93dfa99eb5d87016f2c30a33f9a0285f39ff34ecb9aef4d75bf42d28e120b154e186c1fc17d6940947e69e7d60551398f51114170894ef56270325e2ed3b68617e81dc6259dbc64bbf81c89020041e6e10086cc8eba0c40e563942986b91221ce72b862a328d3e83600647c2d7b4ee73f5050dbe58a5266f8e1eb3cacf0c239e1a13a553ce3c60bdbc1215cfdfb5b4328d55802a0e9a63c9d7d89ab05739518bbf6134c2ef97d648b3db6b3b09f68bd6403855cb9827357609844206e4155185118ac7c13cd101606cb47cd22c0ae66187b77754461659f6b51d3aea27733308ced25e6710157e19c92c542bd04939714d845563b239f30c08dc8fddaa3ff06673557a31c17c402bd685a8b850fe3d4b5aab80eed434325e2d1e4ec4fa7d7f74d943fc6c019d5f1f1c67b064c6406355073208273fa8bd618e066e6714abb94b3bce5b2802d8ccb484b9fc2dc32caf0fdfff587e2f7158f924aba6ceb65085d53e7ead6734fdb9ef7b1ffd439c83a3a17e6711c75f9ef0b0259840f146c0e58c38be51314f458347b2d4e255130060c87cc1facd220de69ed5a3f6907744702c751b533489f23059cbc1c0c711fadff7081f442736b9e8060d119e96d71efb270143e228e73c16dd04520b9fa75aaabdbc284d7bc76d57784518a50b20b7792164dfbdef54cf9e6545a7ba6048fe7be676d73c06ff01c3a4c6e90439f9a0ed3e12dfac32885ee291ed2add9677eae27b0397ced6f420bb6f6e56f12b8c789b0437899923e2f3776f90f03df51f7706bd6bd3b8c12d74568c2e15085e55c7e2152e939cb83d0095bcbe6455978333b47a361eccc5b4d7b9994cc3b68cf16d6842ef799e1e469f884bcc2eef907edebfcfd4735b670639d505d39838ee744dd89538305339adf39838a6c415b1566a69ea9d5cc559c62e9bba4ae8b7df807b61ef4a492444a8e849a620ae34269485a28024e1e43ee55df096930e6a3c684407b7228e4976a4653d581c54d4764bb582f03c1f023ade0dab94ebb81cca9bdae8b4d1617c1ba8281b138a5ad884c0e4f9f686e4f9bc79b899764de06801a99a7a2b57bb9a1b9ec54a777022241e3085872d6668ab3469cdd4fc162f21b1bbc97ff3f5cb68fba7f5911813eb292d3672ea12bbaeeddf4a3cea2c7cdbea5578527fd58fca4ad8d69b9e1fa88240d8a79f492f9984074ef2201cae993e320fd773aa37cfb0508e41f4f3901ef58c077b2eb8b2ee6068624278edb55a1af3ea1dee438903c0df5cf45548e16d840cff3ee792dfd7306792d25b55263f152b3a6d0fb595a8e874c83292e3206447167b0c2f8b31ee92c753b5f1e16e51d77cea872a5ae0fec249292c9f4d7ba68051f6b01be5762e3455a905a52552e06d562b473131cbae8d50417061556e79de1d3fcafc935576cc3eae299ec6f0b780eb5fc931016f11da1983beba1255381ea779fc7981824a9bd2c0d576db57891eb8fb2d2bac887158918270809ad94e11bed90c56873c1c433720590f6dd620b8e659d4af944ee2798e32aed8a23fd4373c2343f438e6acbbc139da9a305508bccc3a8984cd5c0f45b69f9de4c1f9c966d4a9fab9eeaddf8e8744aefd5461e7101118701632e04c87944b65b9e88ea588001351249bbf5cbc820cd14ae1770665e252b720fcc17363f894a37818138a94bcbe6e1179ebb465ae299ffc2c2fe42ac407e864626abb7ca10de34e3dad9d3177ebc936ea2f545a394f52f1a52103df7ed63498b11db6817df3acaddddc17061eac85a11bdf1863e726600c1b905721ad9dbb3cebddaeab10d7866344f79efbb78fd56bc1365106090ed1bf40a563925b1fbe0430b4109412873612cef7ac5d9504b0a02be8a773836f901c1586916adc4ab3f50b589d986eef487412f821094da73edea62b23ec2607eb385ef0103c38d5bdce2f909246d75fff1511b0872ccafcc000b233c4aa7a105d62d0d818fb2880736abde479388a2f3a4015785d103d478b5a28fe9f2a56ee884fe6655a9fed8865c0fa2b79978568986f6a99f9574e89f1f05096457ab2eac4b016b151bca484320849399c04f3e02e938c4b1560224f36911750db13eef386d0f397c8912b85da1cbffdf023b72da4abe302b510ceadcdc768885e2e24405f01d41ce142308bac3b36b4b78d3c19b9432c8fe76d9ca9cd366eca7065fec6c977d196cf1be63eba304ccff89a2f359e2f2ae725c5990b2b938a6ef8664d282c5b65bf550288dc35f26bca65f7b4f3c0e58a8f54ae9aa747474a8214dc36888e0f64da791c5906e8404dc7f54d6fe4c1fd9d971ec7a6355f4f407a2c7507bcd6da6c9adf4017e8286c99238c563cfa90e84c1ee9c7c434d6fa96da37a058e32ea8164631436a11f"}, 0xffffffffffffffd6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000024d566a001f00008100000000000000"]) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x5, 0x4f9c, 0xfffffffffffffffa}, 0xa) 05:36:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:04 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5300, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1913.046185] binder: 18987:18989 transaction failed 29189/-22, size 0-0 line 2896 [ 1913.063364] binder: 18987:18989 ioctl c0306201 20007000 returned -14 [ 1913.108805] binder: 18987:18994 transaction failed 29189/-22, size 0-0 line 2896 [ 1913.155879] binder: 18987:18994 ioctl c0306201 20007000 returned -14 [ 1913.162614] binder: undelivered TRANSACTION_ERROR: 29189 05:36:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00000000000000006c4406f3e49ddfe12d323958fd8215319fe925728940fa7c720214d61dacb935966e52c392a3f484deb72834601822c93c2b6fa967d4fd3fb69672b4de506fb363f5fd5e1269049c41f0babd2a7aa6e1a30b91afadfc461970d57c65a728f464e34b7d04c160d15a2d5a09be3f08a9cf197b0bc6b0eb86efd32f8bc41f777c03e47158a5441a11df25fc7c2967ec1129ceddfff546ea550ba516caa5fc071767bad6cf2115cc33d241ee11058ea9e818473887e04583d0e3d3e2577379"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) [ 1913.381583] binder: undelivered TRANSACTION_ERROR: 29189 05:36:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1913.527674] binder_alloc: 19010: binder_alloc_buf size -958772975725111464 failed, no address space 05:36:04 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5301, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1913.568614] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1913.588912] binder: 19010:19011 transaction failed 29201/-28, size 9005581363950512543-3871314598847316594 line 3035 [ 1913.604000] binder: 19010:19011 ioctl c0306201 20007000 returned -14 [ 1913.612173] binder: 19010:19014 BC_FREE_BUFFER u0000000020001000 no match 05:36:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1913.665726] binder_alloc: binder_alloc_mmap_handler: 19010 20001000-20004000 already mapped failed -16 [ 1913.695203] binder_alloc: 19010: binder_alloc_buf, no vma [ 1913.703570] binder: BINDER_SET_CONTEXT_MGR already set 05:36:05 executing program 0: [ 1913.710652] binder: 19010:19011 ioctl 40046207 0 returned -16 [ 1913.717779] binder: 19010:19014 transaction failed 29189/-3, size 9005581363950512543-3871314598847316594 line 3035 [ 1913.741574] binder: 19010:19020 BC_FREE_BUFFER u0000000020001000 no match [ 1913.840445] binder: undelivered TRANSACTION_ERROR: 29201 [ 1913.852325] binder: 19010:19014 ioctl c0306201 20007000 returned -14 05:36:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff0fc7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:05 executing program 0: 05:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:36:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1913.954442] binder: undelivered TRANSACTION_ERROR: 29189 05:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:05 executing program 0: [ 1914.189990] binder: 19038:19041 ioctl c0306201 20007000 returned -14 05:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:05 executing program 0: [ 1914.261852] binder: 19038:19041 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:05 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5400, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1914.329894] binder: BINDER_SET_CONTEXT_MGR already set 05:36:05 executing program 0: [ 1914.376784] binder_alloc: binder_alloc_mmap_handler: 19038 20001000-20004000 already mapped failed -16 [ 1914.393858] binder: 19038:19044 ioctl 40046207 0 returned -16 05:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1914.453871] binder: release 19038:19041 transaction 862 out, still active [ 1914.465905] binder: undelivered TRANSACTION_COMPLETE [ 1914.511215] binder: send failed reply for transaction 862, target dead 05:36:06 executing program 0: 05:36:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000040)=',em0.@posix_acl_access\x00'}, 0x30) ptrace$setregset(0x4205, r2, 0x6, &(0x7f00000001c0)={&(0x7f0000000100)="f8a6dbd1b043101bc791e929fcc698a125eec7c348fe813bfde0c1132b74412e448e41fda606f99014e421a9ba89ccb18ece25c5740a5da85e7f3465bbc2f39b0fb6972ecc9976dd50a9842edc95492d0d7beebd7b09a699f08f8eb1be60f7e7876bdb33dc6d99630d8041060543e9819a9e094177d1eec44f89aa2f2a31589eeedf12", 0x83}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="b7d1b96fe58f3533"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup2(r6, r7) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x101, 0x0, 0xffff, 0x9, 0x7, 0x200, 0xfffffffffffffffc, {0x0, @in6={{0xa, 0x4e21, 0x40, @mcast1}}, 0x1, 0xfffffffffffffff8, 0x2, 0x4, 0x7ff}}, &(0x7f00000005c0)=0xb0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000600)={r8, 0x10000, 0x6b}, 0x8) r9 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x38, 0x0, &(0x7f0000000240)=[@enter_looper, @increfs_done={0x40106308, r9, 0x2}, @free_buffer={0x40086303, r10}, @register_looper, @clear_death={0x400c630f, 0x2, 0x2}], 0x74, 0x0, &(0x7f0000000280)="83336d59deadb3a22e0626d02f83563b6c6a69408d94dc188b67d56b513cf6fe395cafe6b90d8def0e22f2a915fb8b4092a50a6bcc5f01088351997d00f4431ef862b1bffeaa06c78a20f709de99bdac5c2d4a5adde4042b9b2828bb056ed4eb8e63089c4a86493c555bfbbd2bd1d0b2bfeee3ab"}) r11 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="a4e2d119cd4e08000000a16d730eb194a220f3cc12bdbc500ea29d799bff21eb2b5a2e4c71dcbecd824002caf7d327c073f1b24f9a778639391c830161e2f426a221d24af2c389b06abfe622bb29098ba735fac9b520904881a581ac2e4375ac56290b8b66ad73f571d1c3768ccd667a12f16f9d6c8729eb77f564db142f6791a1c36a24c7071012200f71c07b56a4890ec2b4cf471c44c9c62e00d0399b92b617ddf4ee87294e65e720ed6ebf622cb299a78dd4ed0d61ccf3d74369466cc31261715a5a164d53858c0fd1cafc83c95b95", @ANYRES64=r11], 0x0, 0x0, 0x0}) 05:36:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0xcb}}, 0x7, 0x3}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x6, 0x52, 0xf8a}, 0x10) 05:36:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff10c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:06 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5401, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1914.970597] binder: 19067:19070 ioctl c0306201 20007000 returned -14 05:36:06 executing program 0: [ 1915.083830] binder: 19067:19075 BC_INCREFS_DONE u0000000000000000 no match 05:36:06 executing program 0: [ 1915.148515] binder: 19067:19081 unknown command 433185444 05:36:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1915.283840] binder: 19067:19081 ioctl c0306201 20000200 returned -22 05:36:06 executing program 0: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) getuid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, 0x0, 0x10022) tkill(r1, 0x1000000000016) [ 1915.335072] binder: 19067:19075 BC_FREE_BUFFER u0000000000000000 no match [ 1915.384981] net_ratelimit: 12 callbacks suppressed [ 1915.384989] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.395120] protocol 88fb is buggy, dev hsr_slave_1 [ 1915.403123] binder: 19067:19075 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 1915.417712] binder: 19067:19075 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 05:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:36:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffe43, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="106308400200002000000000f87c789bc8cb9ff6000660e7e1e334ea16168cf7643933aafdf64daf3f6327f9a9662ac626c8c799acbd5c0f4f3d43a2023bd972075f458ea1b6568ebc3083f15a39a3fa5096ac5eabdf15185d42e6a4a0956f0023d82e381fe7c0df91924eaff14822f282dc8e993b0e6227c2b31889eda83296671f3ea204f582e83ad197865d9fc3a4496413c41c0f2f3a511af4dc9409a5672a0b19bee813c7201136623ae04ad8f6c17d9b3cafaf9ba34e6d53207bf11470d6843197a4048f15edcba67ae9ec5bd9a4b966a6f78ddbe3ad"], 0xffef, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x100, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x1, 0x4}, @acquire_done={0x40106309, r2, 0x2}, @request_death={0x400c630e, 0x0, 0x3}], 0x0, 0x0, 0x0}) [ 1915.606189] binder: send failed reply for transaction 864 to 19067:19070 [ 1915.625572] binder: undelivered TRANSACTION_COMPLETE 05:36:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000000001141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 05:36:07 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5500, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1915.668567] binder: undelivered TRANSACTION_ERROR: 29189 [ 1915.728038] binder: 19101:19102 ioctl c0306201 20000080 returned -14 [ 1915.801076] binder: BINDER_SET_CONTEXT_MGR already set [ 1915.862413] binder: 19101:19106 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1915.886431] binder: 19101:19102 ioctl 40046207 0 returned -16 [ 1915.910756] binder: 19101:19106 BC_ACQUIRE_DONE u0000000020001000 no match 05:36:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff60c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x10, 0xc6}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f00000003c0)={0x3, 0x0, 0x77f7fb, 0x0, 0x4000000000820000, 0x0}, 0x2c) 05:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1916.025454] binder: 19101:19106 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1916.053502] binder_alloc: binder_alloc_mmap_handler: 19101 20001000-20004000 already mapped failed -16 [ 1916.135246] binder: BINDER_SET_CONTEXT_MGR already set 05:36:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000080)=0x400000000001, 0x9) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1916.186958] binder: 19101:19102 ioctl 40046207 0 returned -16 [ 1916.222263] binder: 19101:19124 ioctl c0306201 20000080 returned -14 [ 1916.260082] binder: BINDER_SET_CONTEXT_MGR already set [ 1916.275738] binder: 19101:19106 ioctl 40046207 0 returned -16 05:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1916.301374] binder: 19101:19124 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1916.339680] binder: 19101:19124 BC_ACQUIRE_DONE u0000000020001000 no match 05:36:07 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5501, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1916.367089] binder: 19101:19124 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 05:36:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11784840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x6, 0x8}, 0xc) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 05:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1916.609082] binder: 19138:19140 unknown command 1078491153 [ 1916.665664] binder: 19138:19140 ioctl c0306201 20007000 returned -22 [ 1916.702623] binder: 19138:19143 BC_FREE_BUFFER u0000000020001000 no match [ 1916.732649] binder_alloc: binder_alloc_mmap_handler: 19138 20001000-20004000 already mapped failed -16 [ 1916.799279] binder: BINDER_SET_CONTEXT_MGR already set [ 1916.821212] binder: 19138:19140 ioctl 40046207 0 returned -16 [ 1916.843564] binder: 19138:19150 unknown command 1078491153 [ 1916.864026] binder: 19138:19150 ioctl c0306201 20007000 returned -22 [ 1916.911292] binder: 19138:19143 BC_FREE_BUFFER u0000000020001000 no match 05:36:08 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5600, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e02000000000000000000000000000000", 0x48}], 0x1) 05:36:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00000000000000008ca9df09bb929cc4b255f7724594f6b08b43c4ea41f0a8263ff5201c4a9b12518b0809b26a235c3b1817ce7847de64fbc53c99ece71758ea834057840192db6dd5a9c74337cf3ce15f18f5f546524e7f793550f0e19450197e5deeb7438f2f760d49f7e2c346679ad337ce75493bc5325770390d3c998567e7e99ecb9f25d68d00000000000000000000000044af77b0147a7918070d2625cbaf1ebb5ce9fe0767956a0ca62a908ac2cc3ef80fb46d91fc7fd96618059b61e49288e02fdfc7add66ab719e5f9ae58843d716a7f8f8643b730b302a0e481a986c58c051717c5c96ea0dc5c67ea40293e1236a40108b14d649114a5586fb5cd97cdca9c9060e6c4556dfa9bbf82b5560d2fdb419910c10ba0acca0f76731a377299b71266b1488b0e6a994c0791262e2d5b70ac1897a6c333e69b267b7fe42ca6814a275aa30782662452"], 0xffffffffffffffe3, 0x0, 0x0}) 05:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1917.237034] binder: 19159:19160 transaction failed 29201/-22, size 2785740535430923147-5841902409254761791 line 3035 05:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x49d, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000200)={r4, 0x7ff, 0x8, 0x8, 0x8000, 0xfffffffffffffff7, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1917.373593] binder: 19159:19160 ioctl c0306201 20007000 returned -14 [ 1917.421155] binder_alloc: binder_alloc_mmap_handler: 19159 20001000-20004000 already mapped failed -16 [ 1917.459853] binder: BINDER_SET_CONTEXT_MGR already set [ 1917.498560] binder: 19159:19160 ioctl 40046207 0 returned -16 [ 1917.535193] binder: undelivered TRANSACTION_ERROR: 29201 05:36:09 executing program 0: memfd_create(0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kcmp(0x0, 0x0, 0x0, r2, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0)}}, 0x18) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$kcm(r0, 0x0, 0x80000000000000) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000300)) 05:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r2 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 05:36:09 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5601, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1918.048587] binder: 19179:19181 transaction failed 29189/-22, size 0-0 line 2896 05:36:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e04000000000000000000000000000000", 0x48}], 0x1) [ 1918.131445] binder: 19179:19181 ioctl c0306201 20007000 returned -14 [ 1918.169094] binder_alloc: binder_alloc_mmap_handler: 19179 20001000-20002000 already mapped failed -16 05:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1f, 0x9, 0x35a, 0x8001, 0xfffffffffffffffc, 0x1}, {0x4, 0x80, 0x2, 0x39, 0xbe9, 0x10001}], [[], [], [], [], [], [], [], []]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x200, 0x5, 0x6, 0x1, 0x2, 0x2, 0x12, 0x1}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1918.416929] binder: 19179:19181 transaction failed 29189/-22, size 0-0 line 2896 [ 1918.416946] binder_alloc: binder_alloc_mmap_handler: 19179 20001000-20002000 already mapped failed -16 [ 1918.417887] binder: undelivered TRANSACTION_ERROR: 29189 [ 1918.490274] Unrecognized hibernate image header format! [ 1918.505959] PM: Image mismatch: architecture specific data 05:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1918.554161] Unrecognized hibernate image header format! [ 1918.559979] binder: 19179:19181 ioctl c0306201 20007000 returned -14 [ 1918.595523] PM: Image mismatch: architecture specific data 05:36:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1918.639754] binder: undelivered TRANSACTION_ERROR: 29189 05:36:10 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5700, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:10 executing program 0: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5500, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1918.826287] binder: 19217:19220 ioctl c0306201 20007000 returned -14 [ 1918.837276] binder: 19217:19220 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lapb0\x00', 0x8200}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xfff, 0x0) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000300)={0x2, "7e6987424780107e38982d6d8b3b18d147a81544bff5c489c606a38bda43643e7a9144d0d8bfe8db817b829750f662eccfaec17beae2bd8cdf68cccce51cb444d3485be28914074fc5ef097c9844e6888142eb8d25b72b1339f5f248db61eed73dde41360c90fe9998b6adbbdc12a23385c25c9e9280a7d1e256500809d6583b"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x100, 0x0) write$P9_RMKDIR(r5, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x13, 0x3}}, 0x14) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb2f7a0000006000"]) clock_adjtime(0x0, &(0x7f0000000100)={0x401, 0x6, 0x83, 0x1, 0x7, 0x3, 0x6b, 0x7, 0xb3cc, 0x1a69000000, 0x7, 0xda, 0xda5, 0x3, 0x5, 0x0, 0x1800, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x9, 0x1f, 0x5, 0x400}) [ 1918.893525] binder_alloc: binder_alloc_mmap_handler: 19217 20001000-20004000 already mapped failed -16 [ 1918.931071] binder: BINDER_SET_CONTEXT_MGR already set [ 1918.944395] binder: 19217:19220 ioctl 40046207 0 returned -16 [ 1918.990968] binder_alloc: 19217: binder_alloc_buf, no vma [ 1918.991488] binder: 19217:19227 BC_FREE_BUFFER u0000000020001000 no match [ 1919.055125] binder: 19217:19221 transaction failed 29189/-3, size 0-0 line 3035 [ 1919.057797] binder: release 19217:19220 transaction 872 out, still active [ 1919.116048] binder: undelivered TRANSACTION_COMPLETE [ 1919.151369] binder: send failed reply for transaction 872, target dead [ 1919.180761] binder: 19217:19221 ioctl c0306201 20007000 returned -14 05:36:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e08000000000000000000000000000000", 0x48}], 0x1) 05:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) prctl$PR_GET_SECCOMP(0x15) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8b) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r2], 0x0, 0x0, 0x0}) 05:36:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mremap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2000008000000001, 0x0, 0xfffffffffffffe45) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/98) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1919.296273] binder: undelivered TRANSACTION_ERROR: 29189 [ 1919.425387] binder: 19247:19250 ioctl c0306201 20007000 returned -14 [ 1919.497891] binder: BINDER_SET_CONTEXT_MGR already set [ 1919.515304] binder: 19247:19250 ioctl 40046207 0 returned -16 [ 1919.521552] binder: send failed reply for transaction 875 to 19247:19250 [ 1919.533602] binder: 19247:19253 transaction failed 29189/-22, size 0-0 line 2896 [ 1919.541568] binder: 19247:19253 ioctl c0306201 20007000 returned -14 05:36:10 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5701, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1919.550186] binder_alloc: binder_alloc_mmap_handler: 19247 20001000-20002000 already mapped failed -16 [ 1919.561674] binder: undelivered TRANSACTION_COMPLETE [ 1919.579039] binder: undelivered TRANSACTION_ERROR: 29189 05:36:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1919.645942] binder: undelivered TRANSACTION_ERROR: 29189 05:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1919.788620] binder: 19257:19260 ioctl c0306201 20007000 returned -14 05:36:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x100000000000003, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x42000) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0xff, 0x10001}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r2, 0x80, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1919.836979] binder: 19257:19260 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1919.927411] binder_alloc: binder_alloc_mmap_handler: 19257 20001000-20004000 already mapped failed -16 05:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1919.997882] binder: BINDER_SET_CONTEXT_MGR already set [ 1920.055042] binder: 19257:19260 ioctl 40046207 0 returned -16 [ 1920.081016] binder: send failed reply for transaction 878 to 19257:19260 [ 1920.102145] binder: undelivered TRANSACTION_COMPLETE 05:36:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1920.152006] binder: undelivered TRANSACTION_ERROR: 29189 05:36:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x67ee}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e23, 0x100000001, @mcast1, 0x80}}, 0x7, 0x7ff}, &(0x7f0000000340)=0x90) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', r6}) 05:36:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0a000000000000000000000000000000", 0x48}], 0x1) 05:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="929c90067c63b246932d76373866099527518d5ae17e3fbf1ff0096312", 0x1d, 0xfffffffffffffff9) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x8a00, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000240)) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=ANY=[@ANYBLOB='load ecryptfs trusted:/dev/kvm\x00 0000000000511 27b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x39, r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd934000000000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r7, 0x1}, 0x8) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1920.401035] binder: 19283:19285 got transaction to context manager from process owning it 05:36:11 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5800, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1920.442982] binder: 19283:19285 transaction failed 29201/-22, size 0-0 line 2887 [ 1920.455425] binder: 19283:19285 ioctl c0306201 20007000 returned -14 [ 1920.477488] binder: 19283:19290 BC_FREE_BUFFER u0000000020001000 no match [ 1920.530602] binder_alloc: binder_alloc_mmap_handler: 19283 20001000-20004000 already mapped failed -16 [ 1920.595387] binder: BINDER_SET_CONTEXT_MGR already set [ 1920.629024] binder: 19283:19290 ioctl 40046207 0 returned -16 [ 1920.669476] binder: 19283:19285 BC_FREE_BUFFER u0000000020001000 no match [ 1920.702963] binder_alloc: 19283: binder_alloc_buf, no vma 05:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1920.744319] binder: undelivered TRANSACTION_ERROR: 29201 [ 1920.757356] binder: 19283:19297 transaction failed 29189/-3, size 0-0 line 3035 [ 1920.804382] binder: 19283:19297 ioctl c0306201 20007000 returned -14 05:36:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r2, r0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x8, 0x6, [], &(0x7f0000000000)=0x5}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000024d564b000000008100000000000000d9b4862655bab72793db1ed234c5e41626db39f8f42c9b3ac185471f7ff63c11f2aa673483e5ea9a715c21e9704acb21a0831c167eb3a9962416be2939803b0fce31c70422d7ab0745c3216211a421eb3f7ed44e8b8d6bede18ec16d7f44abcbf7357491eb5b42aa50cef6655f117162c876f477aa43bef5a552248c92b019789637085ff5f416b423e453e3105573275ffb07920c1db4cd1287600d2e5882238cd591e0bac54c4114adfd2b1940ca9378e729e27a63297145ccf3"]) 05:36:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0xffffffffffffffb1, 0x0, 0x0}) [ 1920.946193] binder: undelivered TRANSACTION_ERROR: 29189 05:36:12 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5801, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x3b87, 0x200000000000000, 0x5, @random="20b31a4db59b", 'vlan0\x00'}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x8a5, 0x1ff, "68c9c0d7239f1db61b4e9a902ad5f4e7e309e1677fba3d76e2ad04254b9c238d7ba850357eee8340965975ecbe6f62269395e161e5f115e6031b4226e718b5c4e4a728a8bf6576085bb532c30655aa68d2dabb87962a8727b7d8fd6b3d0e548b3e59de8fc4cb7775ce440fd22f5d0732ed27c840be9220764a6f6b44b26a33e8d7125ad62eb1d1d83e241285037778a5f7ff0197a5a49d3752e4333f5fb28ad1f4a73a5879957677ed3f1a1d65514dff41012c6378cb876edead35a55a09e8960a1ab08f4eb22f72b580401669defb4c001f961d68267f08845e77d39c1dccfb390de67f66a83f7640e0f3b180d31d5875e17181ffcc272326d807ac8090701d", 0x31, 0x4, 0x5, 0x8000, 0x100000000, 0x2, 0x2, 0x1}}}, 0x128) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) accept4(r3, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000fffffff200"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1921.112838] binder: 19314:19315 ioctl c0306201 20007000 returned -14 [ 1921.188714] binder: 19314:19315 ioctl c0306201 20000200 returned -14 05:36:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0e000000000000000000000000000000", 0x48}], 0x1) 05:36:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) recvfrom$inet6(r3, &(0x7f00000000c0)=""/32, 0x20, 0x40000001, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffa, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, 0x1c) [ 1921.288245] binder_alloc: binder_alloc_mmap_handler: 19314 20001000-20004000 already mapped failed -16 [ 1921.303260] binder: BINDER_SET_CONTEXT_MGR already set [ 1921.314999] binder: 19316:19321 ioctl 40046207 0 returned -16 [ 1921.347655] binder: BINDER_SET_CONTEXT_MGR already set 05:36:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1921.368575] binder: 19314:19315 ioctl 40046207 0 returned -16 [ 1921.375388] binder_alloc: 19314: binder_alloc_buf, no vma [ 1921.405658] binder: 19316:19321 transaction failed 29189/-3, size 0-0 line 3035 [ 1921.415241] binder_alloc: 19314: binder_alloc_buf, no vma [ 1921.445709] binder: 19316:19329 BC_FREE_BUFFER u0000000020001000 no match [ 1921.479928] binder: 19316:19321 ioctl c0306201 20007000 returned -14 [ 1921.489557] binder: 19314:19318 transaction failed 29189/-3, size 0-0 line 3035 [ 1921.502931] binder: send failed reply for transaction 883 to 19314:19315 [ 1921.511583] binder: 19314:19318 ioctl c0306201 20007000 returned -14 [ 1921.524541] binder: undelivered TRANSACTION_COMPLETE [ 1921.547636] binder: undelivered TRANSACTION_ERROR: 29189 05:36:12 executing program 3: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1921.637555] binder: undelivered TRANSACTION_ERROR: 29189 05:36:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) set_tid_address(&(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:13 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5900, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000024d564b0000000081000000800000006266e2cdb0000000000000000051445f7619af242ee7fae34327a91182aa14987ff1dd65a201563b5835a0f5339a8f8b51ee583f7ce0af9138c7c530f9936105596eec1a5f6b5e573ee77da485758a092ad8a32925b46aac4c2f661b4f3e434ce27add0a9eeabbd4a4bc3c53bc9ac550c766"]) [ 1921.694321] binder: undelivered TRANSACTION_ERROR: 29189 05:36:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1921.922933] binder: 19347:19349 ioctl c0306201 20007000 returned -14 [ 1922.006297] binder: 19347:19349 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1922.037819] binder: BINDER_SET_CONTEXT_MGR already set [ 1922.044346] binder: 19347:19349 ioctl 40046207 0 returned -16 [ 1922.110604] binder_alloc: 19347: binder_alloc_buf, no vma [ 1922.137001] binder: 19347:19357 transaction failed 29189/-3, size 0-0 line 3035 [ 1922.137059] binder: send failed reply for transaction 887 to 19347:19349 [ 1922.145018] binder: undelivered TRANSACTION_COMPLETE [ 1922.173473] binder: undelivered TRANSACTION_ERROR: 29189 05:36:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x700000000000000, 0x0}) 05:36:13 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000000)=""/51, 0x33, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1922.244725] binder: 19347:19357 ioctl c0306201 20007000 returned -14 05:36:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0f000000000000000000000000000000", 0x48}], 0x1) 05:36:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:13 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5901, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1922.381439] binder: 19363:19364 ioctl c0306201 20007000 returned -14 [ 1922.411852] binder: 19363:19364 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0500000001064000"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1922.470855] binder: undelivered TRANSACTION_ERROR: 29189 05:36:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000024d564b0000000081000000800000006266e2cdb0000000000000000051445f7619af242ee7fae34327a91182aa14987ff1dd65a201563b5835a0f5339a8f8b51ee583f7ce0af9138c7c530f9936105596eec1a5f6b5e573ee77da485758a092ad8a32925b46aac4c2f661b4f3e434ce27add0a9eeabbd4a4bc3c53bc9ac550c766"]) [ 1922.606498] binder: BINDER_SET_CONTEXT_MGR already set [ 1922.635440] binder: send failed reply for transaction 890 to 19363:19364 [ 1922.642868] binder: 19375:19379 ioctl 40046207 0 returned -16 [ 1922.651856] binder: undelivered TRANSACTION_COMPLETE [ 1922.662365] binder: 19375:19382 transaction failed 29189/-22, size 0-0 line 2896 [ 1922.679711] binder: undelivered TRANSACTION_ERROR: 29189 05:36:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1922.700795] binder: 19375:19382 ioctl c0306201 20007000 returned -14 [ 1922.748250] binder: 19375:19379 BC_FREE_BUFFER u0000000020001000 no match 05:36:14 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000000c0)={"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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1922.788591] binder_alloc: binder_alloc_mmap_handler: 19375 20001000-20004000 already mapped failed -16 [ 1922.834652] binder: 19375:19379 ioctl c0306201 20007000 returned -14 [ 1922.898127] binder: 19375:19393 BC_FREE_BUFFER u0000000020001000 no match [ 1922.926730] Unknown ioctl 1342221989 [ 1922.934143] binder: undelivered TRANSACTION_ERROR: 29189 05:36:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'rose0\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x2f, 0x0, 0x6, {0xf, @udp_ip6_spec={@loopback, @loopback, 0x4e24, 0x4e24, 0x6}, {0x0, @random="e437eb187872", 0x3f, 0x100000001, [0x800, 0xf6]}, @sctp_ip6_spec={@loopback, @ipv4={[], [], @multicast2}, 0x4e24, 0x4e24, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10000, 0x4, [0x5, 0x10001]}, 0x9}, 0x6, [0x0, 0xfffffffffffff7f0, 0x6, 0x562900000000000, 0xf5b, 0x80000000]}}) syz_init_net_socket$ax25(0x3, 0x2, 0xfe) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00', @ifru_mtu=0x1}) 05:36:14 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5a00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1923.052806] binder: undelivered TRANSACTION_ERROR: 29189 [ 1923.154096] binder: 19399:19401 ioctl c0306201 20007000 returned -14 [ 1923.192420] binder: 19399:19401 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1923.203961] Unknown ioctl 1342221989 [ 1923.255225] binder: BINDER_SET_CONTEXT_MGR already set [ 1923.304230] binder_alloc: 19399: binder_alloc_buf, no vma [ 1923.338787] binder_transaction: 1 callbacks suppressed [ 1923.338805] binder: 19399:19401 transaction failed 29189/-3, size 0-0 line 3035 05:36:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e10000000000000000000000000000000", 0x48}], 0x1) [ 1923.378187] binder: send failed reply for transaction 895 to 19399:19401 [ 1923.400916] binder: undelivered TRANSACTION_COMPLETE [ 1923.406272] binder: 19399:19411 ioctl 40046207 0 returned -16 [ 1923.445223] binder: 19399:19401 ioctl c0306201 20007000 returned -14 05:36:14 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5a01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000100)="982574c9260eead45801f36397d8b2f5c4777613ce3a76388f46c6cb64ab0b86fac3d8d64fe4f0644901a09a37c6d7f792c531b411d407cab6346d33307a07e75488d609cffaab6b7299435ca7d6d9e74dd14f4f1057d6ea49433bfeebf6baf189f53cbbcb9097445b32180091542bacc3d6d687039b1961f2325c75c41062cf8611b4712e1fa2070a0c384264a3711081c63b4086fd828237fc9bd0cdf72887b4bdc70d98bdea54d1e62a557365b37dabfe64229b0ffe32934ebff51106d087d129a35273e61b992071f37eed74f49be12e0ae37c1c7c44381e", 0xda) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x880) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000001c0)={r4, &(0x7f0000000100)=""/158}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100ffffffee0000024d564b000000008100000000000000"]) 05:36:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x3f000000, 0x0}) 05:36:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1923.707789] binder: 19422:19426 ioctl c0306201 20007000 returned -14 [ 1923.758348] binder: BINDER_SET_CONTEXT_MGR already set [ 1923.765100] binder: 19422:19426 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1923.777652] binder: 19428:19429 ioctl 40046207 0 returned -16 [ 1923.804251] binder_alloc: 19422: binder_alloc_buf, no vma [ 1923.833411] binder_alloc: binder_alloc_mmap_handler: 19422 20001000-20004000 already mapped failed -16 [ 1923.848051] binder: 19428:19433 transaction failed 29189/-3, size 0-0 line 3035 [ 1923.900555] binder: BINDER_SET_CONTEXT_MGR already set [ 1923.942644] binder: 19422:19426 ioctl 40046207 0 returned -16 [ 1923.966946] binder: 19428:19433 ioctl c0306201 20007000 returned -14 [ 1923.988055] binder_alloc: 19422: binder_alloc_buf, no vma 05:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1924.014398] binder: 19422:19442 BC_FREE_BUFFER u0000000020001000 no match [ 1924.022426] binder: 19428:19429 BC_FREE_BUFFER u0000000020001000 no match [ 1924.066761] binder: send failed reply for transaction 898 to 19422:19426 [ 1924.074149] binder: 19422:19430 transaction failed 29189/-3, size 0-0 line 3035 05:36:15 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5b00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1924.108463] binder: undelivered TRANSACTION_COMPLETE [ 1924.127093] binder: 19422:19430 ioctl c0306201 20007000 returned -14 05:36:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/131, &(0x7f0000000180)=0x83) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) r4 = getpid() process_vm_writev(r4, &(0x7f0000000540)=[{&(0x7f0000000680)=""/4096, 0x87}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000001880)=""/204, 0xfffffd2a}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="54fe10"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)=0x2) add_key$user(0x0, 0x0, &(0x7f0000000300)="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", 0xdb6, 0xfffffffffffffffe) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x2, 0x2, 0x10000, 0x1000, &(0x7f000003a000/0x1000)=nil}) ioctl$RTC_WIE_OFF(r2, 0x7010) 05:36:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0xb623d05e9af01d5b) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x5, 0x100000001, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000100)={0xff, @loopback, 0x4e20, 0x3, 'dh\x00', 0x0, 0xd64d, 0x39}, 0x2c) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x800010010, r1, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xffffffffffffffc8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840a6a1583874c12ebdb14f8d7ecef1a38465726b02c8146e14f985cd746d23a631b5785122dfe24be39be19df49a00000000000077604b997d410000000000", @ANYRES64=r4], 0xfffffffffffffd94, 0x0, 0x0}) [ 1924.348074] binder: 19450:19454 ioctl c0306201 20007000 returned -14 05:36:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e60000000000000000000000000000000", 0x48}], 0x1) [ 1924.420692] binder: 19450:19454 ioctl c0306201 20000200 returned -14 [ 1924.481029] audit: type=1804 audit(1551850575.793:169): pid=19457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir577987176/syzkaller.2kx6Bc/3833/bus" dev="sda1" ino=17010 res=1 [ 1924.516427] binder_alloc: binder_alloc_mmap_handler: 19450 20001000-20004000 already mapped failed -16 05:36:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1924.545627] binder: BINDER_SET_CONTEXT_MGR already set [ 1924.557442] binder_alloc: 19450: binder_alloc_buf, no vma 05:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000001c0)=r4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0xffffffffffffff00}, 0x28, 0x3) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x20) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a000000000000000000000000000000"]) connect(r3, &(0x7f0000000200)=@rc={0x1f, {0x67, 0x2567, 0x6, 0x6, 0x0, 0xffff}, 0x2a0d4b32}, 0x80) 05:36:15 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5b01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1924.587282] binder: 19450:19454 ioctl 40046207 0 returned -16 [ 1924.601729] binder: 19450:19462 transaction failed 29189/-3, size 0-0 line 3035 [ 1924.642458] binder: 19450:19460 ioctl c0306201 20000200 returned -14 [ 1924.696227] binder: release 19450:19454 transaction 902 out, still active [ 1924.703320] binder: undelivered TRANSACTION_COMPLETE [ 1924.715823] binder: 19450:19462 ioctl c0306201 20007000 returned -14 [ 1924.750324] binder: send failed reply for transaction 902, target dead 05:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = dup3(r0, r0, 0x80000) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x20000, 0x0) bind$nfc_llcp(r4, &(0x7f00000003c0)={0x27, 0x1, 0x0, 0x6, 0x8, 0x1ffc000000, "f9b0f28ffed55dc51eb2ec746646fec245282d4db794df3de59ebc7c555bcbc94b5906e33de8ad538b439433360768627242b36342a9a8bde76e7bfde0407a", 0x37}, 0x60) 05:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xb00000000000000, 0x81}]}) [ 1925.009305] binder: 19479:19481 unknown command 242244892 [ 1925.031425] binder: 19479:19481 ioctl c0306201 20007000 returned -22 05:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) [ 1925.103114] binder: 19479:19481 BC_FREE_BUFFER u0000000020001000 no match [ 1925.178697] binder_alloc: binder_alloc_mmap_handler: 19479 20001000-20004000 already mapped failed -16 05:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1925.300449] binder: 19479:19481 unknown command 242244892 [ 1925.300565] binder: BINDER_SET_CONTEXT_MGR already set 05:36:16 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5c00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1925.345495] binder: 19479:19481 ioctl c0306201 20007000 returned -22 [ 1925.382055] binder: 19479:19490 ioctl 40046207 0 returned -16 [ 1925.459762] binder: 19479:19484 BC_FREE_BUFFER u0000000020001000 no match 05:36:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x48, 0x0}) 05:36:16 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) r1 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r0, r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x22) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) getgid() ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000140)={0x9, 0xffff, 0x7451}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 05:36:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4ef0000000000000000000000000000000", 0x48}], 0x1) 05:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x8000000000000051, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d40c0439494aac62bf0000160000000000001a00000000", @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1925.675547] binder: 19503:19507 ioctl c0306201 20007000 returned -14 [ 1925.694340] binder: 19503:19507 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1925.782383] binder: BINDER_SET_CONTEXT_MGR already set [ 1925.831856] binder: 19513:19515 ioctl 40046207 0 returned -16 [ 1925.870788] binder_alloc: 19503: binder_alloc_buf, no vma 05:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f8900000a000309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1925.913427] binder: 19513:19517 transaction failed 29189/-3, size 0-0 line 3035 [ 1925.913883] binder: send failed reply for transaction 906 to 19503:19507 [ 1925.958997] binder: undelivered TRANSACTION_COMPLETE [ 1925.964252] binder_release_work: 6 callbacks suppressed [ 1925.964258] binder: undelivered TRANSACTION_ERROR: 29189 [ 1925.982870] binder: 19513:19515 unknown command 956566740 [ 1925.996196] binder: 19513:19515 ioctl c0306201 20000200 returned -22 [ 1926.033424] binder: 19513:19517 ioctl c0306201 20007000 returned -14 05:36:17 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5c01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x4000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1f, 0x400000) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000100)) write$P9_RCREATE(r3, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x50, 0x2, 0x1}, 0x6}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) [ 1926.117395] binder_alloc: binder_alloc_mmap_handler: 19513 20001000-20004000 already mapped failed -16 05:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1926.162319] binder_alloc: 19513: binder_alloc_buf, no vma [ 1926.173068] binder: 19513:19526 transaction failed 29189/-3, size 0-0 line 3035 [ 1926.183638] binder: 19513:19526 ioctl c0306201 20007000 returned -14 [ 1926.191243] binder: 19513:19517 unknown command 956566740 [ 1926.199365] binder: 19513:19517 ioctl c0306201 20000200 returned -22 [ 1926.207652] binder: undelivered TRANSACTION_ERROR: 29189 05:36:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040), 0x220, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1926.304399] binder: undelivered TRANSACTION_ERROR: 29189 [ 1926.427883] binder: 19534:19539 unknown command 0 [ 1926.466086] binder: 19534:19539 ioctl c0306201 20000080 returned -22 [ 1926.474419] binder: 19534:19543 BC_FREE_BUFFER u0000000020001000 no match 05:36:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000a0000000000000000000000000000", 0x48}], 0x1) 05:36:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x84541, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x6e3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r4, 0x5, 0x5, 0xcb1}, &(0x7f0000000180)=0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x0, 0x81}]}) 05:36:17 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1926.611640] binder_alloc: binder_alloc_mmap_handler: 19534 20001000-20004000 already mapped failed -16 [ 1926.643781] binder: 19534:19543 unknown command 0 [ 1926.650097] binder: 19534:19543 ioctl c0306201 20000080 returned -22 [ 1926.658010] binder: BINDER_SET_CONTEXT_MGR already set [ 1926.668185] binder: 19534:19539 ioctl 40046207 0 returned -16 [ 1926.722047] binder: 19534:19551 BC_FREE_BUFFER u0000000020001000 no match 05:36:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:36:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x80010000000200, 0x14, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x5, 0x0}) 05:36:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x16, 0x81}]}) [ 1927.036870] binder: 19563:19565 ioctl c0306201 20007000 returned -14 [ 1927.058247] binder: BINDER_SET_CONTEXT_MGR already set [ 1927.070029] binder: 19566:19567 ioctl 40046207 0 returned -16 [ 1927.073192] binder: 19563:19565 BC_FREE_BUFFER u0000000000000000 no match 05:36:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1927.096155] binder: 19566:19567 ioctl c0306201 20007000 returned -14 [ 1927.134036] binder: 19566:19567 BC_FREE_BUFFER u0000000020001000 no match [ 1927.146612] binder_alloc: binder_alloc_mmap_handler: 19563 20001000-20004000 already mapped failed -16 05:36:18 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5d01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000a00000309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1927.238431] binder_alloc: 19563: binder_alloc_buf, no vma [ 1927.254025] binder: release 19566:19567 transaction 913 out, still active [ 1927.263189] binder: BINDER_SET_CONTEXT_MGR already set [ 1927.279932] binder: undelivered TRANSACTION_COMPLETE [ 1927.291292] binder: 19563:19570 BC_FREE_BUFFER u0000000000000000 no match [ 1927.301035] binder: 19563:19575 transaction failed 29189/-3, size 0-0 line 3035 [ 1927.314593] binder: release 19563:19565 transaction 912 out, still active [ 1927.324508] binder: 19563:19574 ioctl 40046207 0 returned -16 [ 1927.332975] binder: undelivered TRANSACTION_COMPLETE 05:36:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@nl, &(0x7f0000000100)=0x80) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000140)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1927.344373] binder: send failed reply for transaction 912, target dead [ 1927.352882] binder: 19563:19575 ioctl c0306201 20007000 returned -14 [ 1927.366188] binder: send failed reply for transaction 913, target dead [ 1927.383720] binder: undelivered TRANSACTION_ERROR: 29189 05:36:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000e0000000000000000000000000000", 0x48}], 0x1) 05:36:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0x16, 0x81}]}) [ 1927.531100] binder: 19582:19583 ioctl c0306201 20007000 returned -14 [ 1927.562306] binder: 19582:19583 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1927.611732] binder_alloc: binder_alloc_mmap_handler: 19582 20001000-20004000 already mapped failed -16 [ 1927.684483] binder: BINDER_SET_CONTEXT_MGR already set [ 1927.711575] binder: 19582:19583 ioctl 40046207 0 returned -16 [ 1927.733790] binder_alloc: 19582: binder_alloc_buf, no vma 05:36:19 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1927.775631] binder: 19582:19595 transaction failed 29189/-3, size 0-0 line 3035 [ 1927.818680] binder: 19582:19588 BC_FREE_BUFFER u0000000020001000 no match [ 1927.835195] binder: 19582:19595 ioctl c0306201 20007000 returned -14 05:36:19 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5e00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1927.863228] binder: send failed reply for transaction 916 to 19582:19583 [ 1927.892045] binder: undelivered TRANSACTION_COMPLETE [ 1927.913849] binder: undelivered TRANSACTION_ERROR: 29189 05:36:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x100) accept(r2, 0x0, &(0x7f0000000180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xb27314e4179e3a4b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000100)={0x81, 0x4, 0xce}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:19 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1927.961072] binder: undelivered TRANSACTION_ERROR: 29189 05:36:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x12, &(0x7f0000001580)=ANY=[@ANYBLOB="85000000130000205dc8d200000000019500000046ac9a76b12eed6670dca1b1fd636a8068537c17fc3711432b70518323adde260704a98b034c0cd480aafdf5557f18ea03d4fe5871dc31d7eda3c362c5ffb0209b25ef97b4226809d19175b16ff6be94cb30072a5fbe7257621897b2bde5a8a36836cae9e5e435df89170108735bf8797a548cf03f655423fa8514238fc17eda"], 0x0, 0x5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x12, 0x0, &(0x7f0000000480)="263abd030e98ff4dc870bd6e88a800a088a8", 0x0, 0x1000}, 0x28) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x4102, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000300)=0x8001, 0x4) unshare(0x40000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1094}, 0x20) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x200, 0x0) pipe2(&(0x7f0000000100), 0xfffffffd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3, 0x1c, 0xb7, 0xaed}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x400, 0x1, 0x8, 0x40, 0x9367}, &(0x7f00000003c0)=0x14) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0xf001], 0x0, 0x100, 0x279d}) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x100000000, 0x80000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10000000000010fd}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00', @ifru_mtu=0x1}) [ 1928.070149] binder: 19605:19606 ioctl c0306201 20007000 returned -14 05:36:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1928.132420] binder: 19605:19606 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1928.301111] IPVS: ftp: loaded support on port[0] = 21 [ 1928.408385] binder: BINDER_SET_CONTEXT_MGR already set [ 1928.413761] binder: 19605:19606 ioctl 40046207 0 returned -16 [ 1928.473676] binder_alloc: 19605: binder_alloc_buf, no vma 05:36:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x500000000000000, 0x0, 0x0}) [ 1928.646088] binder_alloc: binder_alloc_mmap_handler: 19605 20001000-20004000 already mapped failed -16 [ 1928.785056] binder: 19605:19616 transaction failed 29189/-3, size 0-0 line 3035 [ 1928.835578] binder: 19605:19616 ioctl c0306201 20007000 returned -14 [ 1928.851275] binder: release 19605:19606 transaction 919 out, still active [ 1928.853210] binder: BINDER_SET_CONTEXT_MGR already set [ 1928.860881] binder: undelivered TRANSACTION_COMPLETE 05:36:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4ec00e0000000000000000000000000000", 0x48}], 0x1) 05:36:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1928.899840] binder: 19623:19624 ioctl 40046207 0 returned -16 [ 1928.907488] binder: send failed reply for transaction 919, target dead [ 1928.928705] binder: undelivered TRANSACTION_ERROR: 29189 05:36:20 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5e01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1929.010762] binder: 19623:19624 transaction failed 29189/-22, size 0-0 line 2896 [ 1929.049097] binder: 19623:19624 ioctl c0306201 20007000 returned -14 [ 1929.100428] binder_thread_write: 1 callbacks suppressed [ 1929.100440] binder: 19623:19624 BC_FREE_BUFFER u0000000020001000 no match [ 1929.119576] binder: 19623:19624 ioctl c0306201 20000200 returned -14 [ 1929.187871] binder_alloc: 19633: binder_alloc_buf, no vma [ 1929.208441] binder: 19633:19639 transaction failed 29189/-3, size 0-0 line 3035 05:36:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x100000000000000, 0x0, 0x0}) 05:36:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x12, &(0x7f0000001580)=ANY=[@ANYBLOB="85000000130000205dc8d200000000019500000046ac9a76b12eed6670dca1b1fd636a8068537c17fc3711432b70518323adde260704a98b034c0cd480aafdf5557f18ea03d4fe5871dc31d7eda3c362c5ffb0209b25ef97b4226809d19175b16ff6be94cb30072a5fbe7257621897b2bde5a8a36836cae9e5e435df89170108735bf8797a548cf03f655423fa8514238fc17eda"], 0x0, 0x5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x12, 0x0, &(0x7f0000000480)="263abd030e98ff4dc870bd6e88a800a088a8", 0x0, 0x1000}, 0x28) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x4102, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000300)=0x8001, 0x4) unshare(0x40000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1094}, 0x20) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x200, 0x0) pipe2(&(0x7f0000000100), 0xfffffffd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3, 0x1c, 0xb7, 0xaed}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x400, 0x1, 0x8, 0x40, 0x9367}, &(0x7f00000003c0)=0x14) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0xf001], 0x0, 0x100, 0x279d}) syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x100000000, 0x80000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10000000000010fd}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00', @ifru_mtu=0x1}) 05:36:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1929.246281] binder: 19633:19639 ioctl c0306201 20007000 returned -14 [ 1929.246479] binder_alloc: binder_alloc_mmap_handler: 19633 20001000-20002000 already mapped failed -16 [ 1929.279466] binder: undelivered TRANSACTION_ERROR: 29189 [ 1929.425937] binder: BINDER_SET_CONTEXT_MGR already set [ 1929.463268] binder: 19645:19648 ioctl 40046207 0 returned -16 [ 1929.547913] binder: 19633:19639 BC_FREE_BUFFER u0000000000000000 no match [ 1929.557136] binder_alloc: 19633: binder_alloc_buf, no vma [ 1929.570679] IPVS: ftp: loaded support on port[0] = 21 [ 1929.575784] binder: 19645:19651 transaction failed 29189/-3, size 0-0 line 3035 05:36:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1929.700467] binder: BINDER_SET_CONTEXT_MGR already set [ 1929.813634] binder: 19645:19651 ioctl c0306201 20007000 returned -14 [ 1929.825398] binder: 19633:19641 ioctl 40046207 0 returned -16 [ 1929.831763] binder_alloc: 19633: binder_alloc_buf, no vma [ 1929.837581] binder: 19633:19655 transaction failed 29189/-3, size 0-0 line 3035 [ 1929.845228] binder: 19633:19655 ioctl c0306201 20007000 returned -14 [ 1929.853755] binder_alloc: binder_alloc_mmap_handler: 19633 20001000-20002000 already mapped failed -16 05:36:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000080)}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1929.863480] binder: 19633:19641 BC_FREE_BUFFER u0000000000000000 no match [ 1929.870799] binder: undelivered TRANSACTION_ERROR: 29189 [ 1929.899943] binder: undelivered TRANSACTION_ERROR: 29189 [ 1929.906000] binder: 19645:19648 BC_FREE_BUFFER u0000000020001000 no match [ 1929.921738] binder: 19645:19648 ioctl c0306201 20000200 returned -14 05:36:21 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5f00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000f0000000000000000000000000000", 0x48}], 0x1) 05:36:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0xfffffdfd, 0x0, 0x0}) [ 1930.233553] binder: 19657:19662 ioctl c0306201 20007000 returned -14 [ 1930.256219] binder: 19657:19662 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1930.275745] binder_alloc: binder_alloc_mmap_handler: 19657 20001000-20004000 already mapped failed -16 [ 1930.292537] binder: BINDER_SET_CONTEXT_MGR already set [ 1930.311505] binder: 19657:19662 ioctl 40046207 0 returned -16 [ 1930.357522] binder_alloc: 19657: binder_alloc_buf, no vma [ 1930.392010] binder: 19657:19670 BC_FREE_BUFFER u0000000020001000 no match 05:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x68000000, 0x0, 0x0}) [ 1930.425285] binder: release 19657:19662 transaction 927 out, still active [ 1930.432258] binder: undelivered TRANSACTION_COMPLETE [ 1930.447287] binder: 19657:19663 transaction failed 29189/-3, size 0-0 line 3035 [ 1930.451558] binder: send failed reply for transaction 927, target dead [ 1930.505082] binder: 19657:19663 ioctl c0306201 20007000 returned -14 [ 1930.507717] binder: 19671:19675 ioctl c0306201 20007000 returned -14 05:36:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1930.670045] binder: BINDER_SET_CONTEXT_MGR already set [ 1930.681610] binder: 19681:19682 ioctl 40046207 0 returned -16 [ 1930.744173] binder: 19671:19675 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1930.770662] binder: BINDER_SET_CONTEXT_MGR already set [ 1930.795043] binder: 19684:19685 ioctl 40046207 0 returned -16 [ 1930.795380] binder_alloc: 19671: binder_alloc_buf, no vma [ 1930.814276] binder: 19681:19682 BC_FREE_BUFFER u0000000020001000 no match [ 1930.826295] binder: 19671:19675 ioctl c0306201 20000200 returned -14 05:36:22 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5f01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1930.879864] binder: 19684:19685 BC_FREE_BUFFER u0000000020001000 no match [ 1930.891319] binder: 19681:19682 ioctl c0306201 20000200 returned -14 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f890000000e0309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1930.961622] binder_alloc: 19671: binder_alloc_buf, no vma [ 1930.967517] binder: 19681:19686 transaction failed 29189/-3, size 0-0 line 3035 [ 1930.981229] binder: 19684:19689 transaction failed 29189/-3, size 0-0 line 3035 [ 1930.985261] binder: 19681:19686 ioctl c0306201 20007000 returned -14 [ 1930.995900] binder: send failed reply for transaction 930 to 19671:19675 [ 1931.003548] binder: undelivered TRANSACTION_COMPLETE [ 1931.045060] binder_release_work: 2 callbacks suppressed [ 1931.045067] binder: undelivered TRANSACTION_ERROR: 29189 [ 1931.047187] binder: 19684:19689 ioctl c0306201 20007000 returned -14 [ 1931.127289] binder_alloc: binder_alloc_mmap_handler: 19684 20001000-20004000 already mapped failed -16 05:36:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x3000000, 0x0, 0x0}) [ 1931.186580] binder: undelivered TRANSACTION_ERROR: 29189 [ 1931.213078] binder_alloc: 19684: binder_alloc_buf, no vma 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1931.245304] binder: 19684:19689 transaction failed 29189/-3, size 0-0 line 3035 [ 1931.267902] binder: undelivered TRANSACTION_ERROR: 29189 [ 1931.274037] binder: 19684:19696 BC_FREE_BUFFER u0000000020001000 no match 05:36:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4eb7180000000000000000000000000000", 0x48}], 0x1) [ 1931.294414] binder: 19684:19689 ioctl c0306201 20007000 returned -14 [ 1931.412415] binder: 19700:19705 ioctl c0306201 20007000 returned -14 05:36:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) [ 1931.469690] binder: 19700:19705 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1931.489920] binder: undelivered TRANSACTION_ERROR: 29189 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1931.566633] binder: 19700:19705 ioctl c0306201 20000200 returned -14 [ 1931.681198] binder: BINDER_SET_CONTEXT_MGR already set [ 1931.703849] binder: 19711:19712 ioctl 40046207 0 returned -16 [ 1931.732090] binder_alloc: 19700: binder_alloc_buf, no vma 05:36:23 executing program 5: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x1d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1931.753792] binder: 19711:19713 transaction failed 29189/-3, size 0-0 line 3035 [ 1931.777262] binder: send failed reply for transaction 936 to 19700:19705 [ 1931.793375] binder: undelivered TRANSACTION_COMPLETE [ 1931.799708] binder: 19711:19712 BC_FREE_BUFFER u0000000020001000 no match [ 1931.824618] binder: undelivered TRANSACTION_ERROR: 29189 [ 1931.824759] binder: 19711:19713 ioctl c0306201 20007000 returned -14 05:36:23 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6000, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1931.928340] binder_alloc: binder_alloc_mmap_handler: 19711 20001000-20004000 already mapped failed -16 [ 1931.974081] binder_alloc: 19711: binder_alloc_buf, no vma [ 1932.000399] binder: 19711:19720 ioctl c0306201 20007000 returned -14 [ 1932.030035] binder: 19711:19713 BC_FREE_BUFFER u0000000020001000 no match 05:36:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1932.081120] binder: undelivered TRANSACTION_ERROR: 29189 05:36:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x6c00, 0x0, 0x0}) 05:36:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1932.199051] binder: undelivered TRANSACTION_ERROR: 29189 [ 1932.350305] binder: 19730:19733 ioctl c0306201 20007000 returned -14 05:36:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00600000000000000000000000000000", 0x48}], 0x1) [ 1932.415508] binder: BINDER_SET_CONTEXT_MGR already set 05:36:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x3f00, 0x0, 0x0}) [ 1932.446275] binder: 19730:19733 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:23 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6001, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1932.489204] binder: 19734:19735 ioctl 40046207 0 returned -16 [ 1932.489740] binder_alloc: 19730: binder_alloc_buf, no vma [ 1932.520543] binder: 19730:19733 ioctl c0306201 20000200 returned -14 [ 1932.572491] binder: 19734:19737 ioctl c0306201 20007000 returned -14 [ 1932.603785] binder_alloc: binder_alloc_mmap_handler: 19734 20001000-20004000 already mapped failed -16 05:36:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f8918b700000309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) [ 1932.679000] binder: BINDER_SET_CONTEXT_MGR already set 05:36:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1932.714661] binder: 19741:19744 ioctl 40046207 0 returned -16 [ 1932.720862] binder: BINDER_SET_CONTEXT_MGR already set [ 1932.791108] binder: release 19730:19733 transaction 941 out, still active [ 1932.791241] binder_alloc: 19730: binder_alloc_buf, no vma [ 1932.800625] binder: 19734:19735 ioctl 40046207 0 returned -16 [ 1932.818681] binder: undelivered TRANSACTION_COMPLETE [ 1932.828644] binder: 19741:19744 ioctl c0306201 20000200 returned -14 [ 1932.839647] binder: 19741:19749 ioctl c0306201 20007000 returned -14 [ 1932.846607] binder_alloc: 19730: binder_alloc_buf, no vma [ 1932.847618] binder: undelivered TRANSACTION_ERROR: 29189 [ 1932.889359] binder: 19734:19739 ioctl c0306201 20007000 returned -14 [ 1932.896945] binder: send failed reply for transaction 941, target dead [ 1932.931806] binder: undelivered TRANSACTION_ERROR: 29189 05:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=r3], 0x0, 0x0, 0x0}) 05:36:24 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6100, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x81}]}) [ 1933.132453] binder: undelivered TRANSACTION_ERROR: 29189 [ 1933.298917] binder: 19763:19768 ioctl c0306201 20007000 returned -14 [ 1933.358781] binder: 19763:19768 unknown command 536875008 [ 1933.399597] binder: 19763:19768 ioctl c0306201 20000200 returned -22 [ 1933.487120] binder_alloc: binder_alloc_mmap_handler: 19763 20001000-20004000 already mapped failed -16 05:36:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca18b70f7f89000000000309ff5bffff00c7e5ed4e00000000000000000000000000000000", 0x48}], 0x1) 05:36:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e18b70000000000000000000000000000", 0x48}], 0x1) 05:36:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6528202f937e79840d2ddff4f693c40189c762d246b65ca76aa9c5095a9c4f8dc216094a73eb0308b25149d4fecc90d5aef23535c27360c7ddd728fa172ba391cc1d4fd36653735f757686b133131112bee2cdee57808449256aee2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00', @ifru_mtu=0x1}) [ 1933.637870] binder: 19763:19768 ioctl c0306201 20007000 returned -14 [ 1933.672559] binder: 19763:19766 unknown command 536875008 [ 1933.715043] binder: 19763:19766 ioctl c0306201 20000200 returned -22 05:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000008000000000000000040000009000000000000000600000000000000da82000000000000000000000000000000000000000000000009000000cd000000000001000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="29ca8813bda501e28040f4c64a385b44a563f225e720daba8ee7f07c544e53ace5a186bb3c080b54a22a24f81e11614d405c29eb30a3c615b6ca0716c78b933cd4186e3aaaef61a0c8d752d8b450ad1b40775383127dafc74039bcf8adea5770d6a8e038d32e5c43da8aa31b398631"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:25 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6101, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1933.950695] binder: 19786:19788 ioctl c0c0583b 20000240 returned -22 [ 1933.980449] binder_transaction: 6 callbacks suppressed [ 1933.980466] binder: 19786:19788 transaction failed 29189/-22, size -6029389351338580082-6055943180866986469 line 2896 05:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:25 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1934.094289] binder: 19786:19788 ioctl c0306201 20007000 returned -14 [ 1934.158163] binder: 19786:19790 ioctl c0c0583b 20000240 returned -22 [ 1934.204170] binder: 19786:19788 transaction failed 29189/-22, size -6029389351338580082-6055943180866986469 line 2896 [ 1934.286890] FAULT_INJECTION: forcing a failure. [ 1934.286890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1934.300950] binder: 19786:19788 ioctl c0306201 20007000 returned -14 [ 1934.369752] CPU: 0 PID: 19797 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 1934.376651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.386018] Call Trace: [ 1934.388632] dump_stack+0x172/0x1f0 [ 1934.392354] should_fail.cold+0xa/0x1b [ 1934.396284] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1934.401427] ? ___might_sleep+0x163/0x280 [ 1934.405610] should_fail_alloc_page+0x50/0x60 [ 1934.410127] __alloc_pages_nodemask+0x1a1/0x710 [ 1934.414818] ? perf_trace_lock+0x334/0x510 [ 1934.419082] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1934.424130] ? check_preemption_disabled+0x48/0x290 [ 1934.429169] ? pmd_val+0x85/0x100 [ 1934.432640] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1934.438195] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1934.443763] alloc_pages_vma+0xdd/0x540 [ 1934.447774] __handle_mm_fault+0x1dd4/0x3f20 [ 1934.452219] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1934.457083] ? find_held_lock+0x35/0x130 [ 1934.461171] ? handle_mm_fault+0x322/0xb30 [ 1934.465454] ? kasan_check_read+0x11/0x20 [ 1934.469632] handle_mm_fault+0x43f/0xb30 [ 1934.473725] __do_page_fault+0x5da/0xd60 [ 1934.477832] do_page_fault+0x71/0x581 [ 1934.481651] ? page_fault+0x8/0x30 [ 1934.485220] page_fault+0x1e/0x30 [ 1934.488720] RIP: 0033:0x406c9d [ 1934.491929] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 61 4e 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 1934.510845] RSP: 002b:00007f7bb1de50a0 EFLAGS: 00010206 05:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1934.516226] RAX: 0000000000406c90 RBX: 00007f7bb1de6c90 RCX: 0000000000000000 [ 1934.523506] RDX: 0000000020028000 RSI: 0000000000000005 RDI: ffffffffffffffff [ 1934.530790] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1934.538072] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f7bb1de76d4 [ 1934.545364] R13: 00000000004c6754 R14: 00000000004dbce8 R15: 0000000000000007 05:36:25 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1934.567351] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 1934.662588] CPU: 1 PID: 19797 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 1934.669473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.678843] Call Trace: [ 1934.681451] dump_stack+0x172/0x1f0 [ 1934.685175] dump_header+0x10f/0xb6c [ 1934.688909] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1934.694024] ? ___ratelimit+0x60/0x595 [ 1934.697925] ? do_raw_spin_unlock+0x57/0x270 [ 1934.702354] oom_kill_process.cold+0x10/0x6f5 [ 1934.702377] ? lock_downgrade+0x810/0x810 [ 1934.702398] ? kasan_check_read+0x11/0x20 [ 1934.702420] out_of_memory+0x79a/0x1280 [ 1934.702436] ? lock_acquire+0x1ea/0x3f0 [ 1934.723147] ? oom_killer_disable+0x280/0x280 [ 1934.723170] ? mutex_trylock+0x18e/0x1e0 [ 1934.723186] ? pagefault_out_of_memory+0xeb/0x11c [ 1934.723205] pagefault_out_of_memory+0x109/0x11c [ 1934.741330] ? out_of_memory+0x1280/0x1280 [ 1934.745582] ? lock_downgrade+0x810/0x810 [ 1934.749748] mm_fault_error+0x100/0x3a0 [ 1934.753736] __do_page_fault+0xc13/0xd60 [ 1934.757815] do_page_fault+0x71/0x581 [ 1934.761631] ? page_fault+0x8/0x30 [ 1934.765177] page_fault+0x1e/0x30 [ 1934.768629] RIP: 0033:0x406c9d [ 1934.771828] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 61 4e 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 1934.790828] RSP: 002b:00007f7bb1de50a0 EFLAGS: 00010206 [ 1934.796203] RAX: 0000000000406c90 RBX: 00007f7bb1de6c90 RCX: 0000000000000000 [ 1934.803477] RDX: 0000000020028000 RSI: 0000000000000005 RDI: ffffffffffffffff 05:36:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0ec00000000000000000000000000000", 0x48}], 0x1) 05:36:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6200, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1934.810747] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1934.818027] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f7bb1de76d4 [ 1934.825300] R13: 00000000004c6754 R14: 00000000004dbce8 R15: 0000000000000007 [ 1934.899539] binder: 19803:19806 transaction failed 29189/-22, size 0-0 line 2896 [ 1934.928435] binder: 19803:19806 ioctl c0306201 20007000 returned -14 05:36:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1935.009569] binder_thread_write: 2 callbacks suppressed [ 1935.009585] binder: 19803:19814 BC_FREE_BUFFER u0000000000000000 no match 05:36:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:36:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x6, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x80, 0x20b, 0x8, 0x10000, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r4, 0xf2, "edb2e6bf66d5fa3ac53415c46fa8bcb7340ce136a19586f0c45a4ef74c638c0ede9e26bb3e036c86f1066238a0396570b4e3ae4e2a3386b52d1b82f7ad8311030109a81a99aa293066a6fff10b2b35c3a03300691721af4b4687b6fcdc783282f80850602d13399217a6e861ddba6aec260a218e154dca113d40c5047f1a3eab7640f41caae131749533edb123b2c526664fe7d09db882a7092b583cd2e85eb43cea66e7dbc0258f2a29d33f0036a630e9f723ff28dbffcccfbff6a3f0f8c583009a8fc8b8937e1fed8ce001cb3722599db26bee639b34bd5bd8f22189616246814a886049480734b6047c2f452f48fad77a"}, &(0x7f0000000140)=0xfa) 05:36:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1935.369840] binder: 19825:19826 ioctl c0306201 20007000 returned -14 05:36:26 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6201, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1935.410131] binder: 19825:19826 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1935.476491] Mem-Info: [ 1935.525209] active_anon:167550 inactive_anon:7600 isolated_anon:0 [ 1935.525209] active_file:26234 inactive_file:28776 isolated_file:0 [ 1935.525209] unevictable:1536 dirty:127 writeback:0 unstable:0 [ 1935.525209] slab_reclaimable:15145 slab_unreclaimable:128305 [ 1935.525209] mapped:58799 shmem:283 pagetables:2543 bounce:0 [ 1935.525209] free:1152845 free_pcp:490 free_cma:0 [ 1935.543208] binder: BINDER_SET_CONTEXT_MGR already set [ 1935.597338] binder_alloc: binder_alloc_mmap_handler: 19825 20001000-20004000 already mapped failed -16 [ 1935.612055] Node 0 active_anon:670140kB inactive_anon:30400kB active_file:103828kB inactive_file:115104kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:234132kB dirty:476kB writeback:0kB shmem:1132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1935.643821] binder: 19825:19826 ioctl 40046207 0 returned -16 [ 1935.691467] binder: 19825:19830 BC_FREE_BUFFER u0000000020001000 no match [ 1935.698929] Node 1 active_anon:60kB inactive_anon:0kB active_file:1108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:964kB dirty:32kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1935.748600] binder: release 19825:19826 transaction 951 out, still active [ 1935.759126] binder: undelivered TRANSACTION_COMPLETE [ 1935.783654] binder: send failed reply for transaction 951, target dead [ 1935.873761] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.019691] lowmem_reserve[]: 0 2553 2555 2555 [ 1936.024340] Node 0 DMA32 free:811312kB min:36232kB low:45288kB high:54344kB active_anon:665944kB inactive_anon:30400kB active_file:103828kB inactive_file:115104kB unevictable:6144kB writepending:476kB present:3129332kB managed:2617972kB mlocked:6144kB kernel_stack:9088kB pagetables:10024kB bounce:0kB free_pcp:2800kB local_pcp:1400kB free_cma:0kB [ 1936.062060] lowmem_reserve[]: 0 0 2 2 [ 1936.066052] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.103179] lowmem_reserve[]: 0 0 0 0 [ 1936.109475] Node 1 Normal free:3782756kB min:53624kB low:67028kB high:80432kB active_anon:60kB inactive_anon:0kB active_file:1108kB inactive_file:0kB unevictable:0kB writepending:32kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.181557] lowmem_reserve[]: 0 0 0 0 [ 1936.201602] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1936.234988] Node 0 DMA32: 2955*4kB (UME) 1710*8kB (UME) 2634*16kB (UME) 2160*32kB (UME) 1431*64kB (UME) 352*128kB (UME) 62*256kB (UM) 22*512kB (UME) 13*1024kB (UM) 9*2048kB (UME) 119*4096kB (UM) = 819708kB [ 1936.253702] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1936.264965] Node 1 Normal: 83*4kB (UME) 225*8kB (UME) 269*16kB (UME) 54*32kB (UME) 14*64kB (UM) 10*128kB (U) 8*256kB (UE) 2*512kB (UE) 3*1024kB (ME) 1*2048kB (U) 919*4096kB (M) = 3782756kB [ 1936.282223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.291220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.300053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.309404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.318135] 55292 total pagecache pages [ 1936.322211] 0 pages in swap cache [ 1936.325816] Swap cache stats: add 0, delete 0, find 0/0 [ 1936.331269] Free swap = 0kB [ 1936.334384] Total swap = 0kB [ 1936.337561] 1965979 pages RAM [ 1936.340755] 0 pages HighMem/MovableOnly [ 1936.344814] 339412 pages reserved [ 1936.353753] 0 pages cma reserved [ 1936.357377] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=27455,uid=0 [ 1936.371835] Out of memory: Kill process 27455 (syz-executor.5) score 1007 or sacrifice child [ 1936.382984] Killed process 27455 (syz-executor.5) total-vm:72964kB, anon-rss:18496kB, file-rss:34816kB, shmem-rss:0kB 05:36:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x3, {{0x1, 0x3ff, 0x1, r3}}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 05:36:27 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6300, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x7ffffffff000) 05:36:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00f00000000000000000000000000000", 0x48}], 0x1) [ 1936.508478] binder: 19842:19847 ioctl 4004556e 2 returned -22 [ 1936.547276] binder: 19842:19847 ioctl c0306201 20007000 returned -14 [ 1936.591196] binder: 19842:19847 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) sendto$netrom(r1, &(0x7f0000000340)="9c853068c82180496eaa9aed01a8376df1a5b4d76976657436e8c4e4468438310093e9d8c553d24f5cb830267a8546c9d44ba5b88dff02e2216a5470585447d038595330522f3e811f492233c95e4289c706a2166bcb95585b2d6f29cfe9264a5420997944ae695da685c415dc5ada21decdcec65a4dad2289e953b1ce9d5a20a469c431bf414b889da992644186a4b909fe62", 0x93, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r3 = accept(r1, &(0x7f0000000240)=@isdn, &(0x7f0000001100)=0xffffffffffffffa4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0x6}], 0x1c) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000010c0)) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x7f, 0x0) r5 = dup(r4) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getresuid(0x0, &(0x7f0000000e80), 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x6, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001080)=r9) getdents64(r0, 0x0, 0x9c) 05:36:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0) [ 1936.767194] binder_alloc: binder_alloc_mmap_handler: 19842 20001000-20004000 already mapped failed -16 05:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1936.873191] binder: 19842:19861 ioctl 4004556e 2 returned -22 [ 1936.908974] binder: BINDER_SET_CONTEXT_MGR already set [ 1936.938732] binder_alloc: 19842: binder_alloc_buf, no vma [ 1936.979554] binder: 19842:19863 ioctl 40046207 0 returned -16 [ 1937.011515] binder: 19842:19864 BC_FREE_BUFFER u0000000020001000 no match [ 1937.050608] binder: 19842:19867 transaction failed 29189/-3, size 0-0 line 3035 [ 1937.091914] binder: release 19842:19847 transaction 953 out, still active [ 1937.108896] binder: 19842:19867 ioctl c0306201 20007000 returned -14 [ 1937.115672] binder: undelivered TRANSACTION_COMPLETE 05:36:28 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6301, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1937.156552] binder: send failed reply for transaction 953, target dead 05:36:28 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xab03, 0x10000) connect$netlink(r0, &(0x7f0000000080)=@unspec, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x4, 0x0, 0x0, 0x0) [ 1937.281789] binder_release_work: 5 callbacks suppressed [ 1937.281797] binder: undelivered TRANSACTION_ERROR: 29189 [ 1937.449791] binder: 19879:19881 ioctl c0306201 20007000 returned -14 05:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00400300000000000000000000000000", 0x48}], 0x1) [ 1937.502626] binder: 19879:19881 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1937.623268] binder_alloc: binder_alloc_mmap_handler: 19879 20001000-20004000 already mapped failed -16 05:36:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x5, 0x0, 0x0, 0x0) [ 1937.691305] binder: BINDER_SET_CONTEXT_MGR already set [ 1937.741278] binder_alloc: 19879: binder_alloc_buf, no vma [ 1937.803095] binder: release 19879:19881 transaction 956 out, still active [ 1937.812390] binder: 19879:19881 ioctl 40046207 0 returned -16 [ 1937.840530] binder: undelivered TRANSACTION_COMPLETE 05:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1937.858752] binder: 19879:19886 transaction failed 29189/-3, size 0-0 line 3035 [ 1937.876828] binder: send failed reply for transaction 956, target dead [ 1937.903389] binder: 19879:19886 ioctl c0306201 20007000 returned -14 05:36:29 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6400, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/129) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1938.063573] binder: undelivered TRANSACTION_ERROR: 29189 [ 1938.238829] binder: 19907:19908 ioctl c0306201 20007000 returned -14 [ 1938.264489] binder: 19907:19908 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1938.294048] binder_alloc: binder_alloc_mmap_handler: 19907 20001000-20004000 already mapped failed -16 [ 1938.306480] binder: BINDER_SET_CONTEXT_MGR already set [ 1938.321460] binder: 19907:19908 ioctl 40046207 0 returned -16 [ 1938.341126] binder_alloc: 19907: binder_alloc_buf, no vma [ 1938.347892] binder: 19907:19910 transaction failed 29189/-3, size 0-0 line 3035 05:36:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x2062c4b559280e29) getdents64(r0, 0x0, 0x9c) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000001080)='./file0\x00', 0x400) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000010c0), 0x4) 05:36:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 05:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5df02b965c9e9f26aa4ebb4abc024960bc7e8c1ea5db55e5f093fa93215d4a7f56d773f815cbb70d709c4aa7da6"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1938.413951] binder: 19907:19910 ioctl c0306201 20007000 returned -14 [ 1938.481720] binder: send failed reply for transaction 959 to 19907:19908 [ 1938.535689] binder: undelivered TRANSACTION_COMPLETE 05:36:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x15e, 0x0, 0x0}) [ 1938.573060] binder: undelivered TRANSACTION_ERROR: 29189 [ 1938.612955] binder: undelivered TRANSACTION_ERROR: 29189 05:36:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00034000000000000000000000000000", 0x48}], 0x1) 05:36:30 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6401, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$TCFLSH(r0, 0x540b, 0x7) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="c993bf7ffbbc5452cafa8ef220dbb70f8980238929f045e5f106975fc8170b437f79717073f0000c085aca34da39955deef9a23fc0e1f204f862da28c868df84a47591a1018c655b939c6777db91d2fcf64459628622fd64359987aefd2816e862d176688731a98493b36ffd6efa34c5f666c821449050260e971811e2ace95190d6737b5bf5a916a0adb73068541129cb42ff5e69c9e95e7adf9657da9014f78300e55b74853886c574a0e09cc6a975b93940325a", @ANYRES16=r0, @ANYRESOCT=r0]) getdents64(r0, &(0x7f0000001080)=""/4096, 0x206) getdents64(r0, 0x0, 0xfffffffffffffea9) 05:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1938.773151] binder: 19925:19927 ioctl c0306201 20007000 returned -14 05:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7, 0x0, 0x0, 0x0) [ 1938.857859] binder: 19925:19927 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1938.924492] binder: 19925:19927 ioctl c0306201 20000200 returned -14 [ 1938.976378] binder_alloc: binder_alloc_mmap_handler: 19925 20001000-20004000 already mapped failed -16 [ 1939.045241] binder: BINDER_SET_CONTEXT_MGR already set [ 1939.051549] binder: 19925:19927 ioctl 40046207 0 returned -16 [ 1939.125274] binder_alloc: 19925: binder_alloc_buf, no vma [ 1939.142058] binder: 19925:19931 transaction failed 29189/-3, size 0-0 line 3035 [ 1939.147485] binder: release 19925:19927 transaction 962 out, still active 05:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1939.195004] binder: undelivered TRANSACTION_COMPLETE [ 1939.201573] binder: send failed reply for transaction 962, target dead 05:36:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="6872af2234deba6bab322e872ac755623e314e7d") ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000010c0)={0x25, &(0x7f0000001080)="648caba9494be1a2dea7815d3bbf3b34fee96da79af4d196f2b90ce91a5f4ec333c3a433a0"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001100), &(0x7f0000001140)=0x4) [ 1939.245784] binder: 19925:19931 ioctl c0306201 20007000 returned -14 [ 1939.258627] binder: undelivered TRANSACTION_ERROR: 29189 05:36:30 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6500, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000006, 0x10911, r1, 0x0) 05:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) [ 1939.543919] binder: 19957:19960 ioctl c0306201 20007000 returned -14 05:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1939.603579] binder: 19957:19960 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000001080)=""/205) [ 1939.715851] binder_alloc: binder_alloc_mmap_handler: 19957 20001000-20004000 already mapped failed -16 05:36:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4efffff000000000000000000000000000", 0x48}], 0x1) [ 1939.829639] binder_alloc: 19957: binder_alloc_buf, no vma 05:36:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa, 0x0, 0x0, 0x0) [ 1939.870499] binder: 19957:19965 BC_FREE_BUFFER u0000000020001000 no match [ 1939.939932] binder: 19957:19975 transaction failed 29189/-3, size 0-0 line 3035 [ 1939.947990] binder: send failed reply for transaction 965 to 19957:19960 05:36:31 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6501, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1939.987500] binder: undelivered TRANSACTION_COMPLETE [ 1939.997901] binder: 19957:19975 ioctl c0306201 20007000 returned -14 [ 1940.022217] binder: undelivered TRANSACTION_ERROR: 29189 05:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0dbeb7df0e210f0f26a06eec044be3b9584d6513ba6f5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) r1 = geteuid() renameat(r0, &(0x7f0000001140)='./file0\x00', r0, &(0x7f0000001180)='./file0\x00') lstat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 05:36:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$packet(r2, &(0x7f0000000140)={0x11, 0xff, r3, 0x1, 0x9f, 0x6, @dev={[], 0xb}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000d3954ae6cc"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1940.127259] binder: undelivered TRANSACTION_ERROR: 29189 [ 1940.320051] binder: 19992:19995 ioctl c0306201 20007000 returned -14 05:36:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xb, 0x0, 0x0, 0x0) [ 1940.383857] binder: 19992:19995 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0xfffffffffffffd49) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001080)={'syz', 0x3}, &(0x7f00000010c0)="28cdb6e80ddafb7db229de76a57150e41bae3c485722117731f86fe9dc983019f5c46ae1eddecc8857ab98e7eccf79da22cefbbaf177e8ec9aeb67fa5c90067d47f65397c580bbf7118dc223923f31f3112e44c23930b6ef14ca48a4e10e3b133b4cef7c1fb2d3124c623a35cd392e3669c3e0d470", 0x75, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001140)={r1, 0x6}, &(0x7f0000001180)={'enc=', 'raw', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000001200)="faa2eb87543e818f11d5c8", &(0x7f0000001240)="f0b4343a1c24593eb5dfbb52db7ca21905f4796eb7e7e8fe39585e112f4f610df2e17dec99beb7dec44169ce4ace2631775980eae85cc6713ff951f62232c3a15f9f498e269fe2371fff2f662ee7945f361264f1870f5c285e0162005a895e98a2ba08fd76e5b0a5d76d22b8227c593f5d41ef484188b1676b4b64fa453d62b8de086e5ef6980312c2dd7fa591577264e907f7d50cd8da08f616c29860ef6d591a727dc36473c015d42a0c162c7023a0cf93ffc62a07761f6a9c44ae9786dd920b8da542539aa3d1a6d961ddaac01cc96df70f810de2f9bdfea3c85dd5b70971a2d984d6d46ec79f432a1217fc7b631fd17e9c30e01695b3a9cfb9") 05:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1940.501195] binder_alloc: binder_alloc_mmap_handler: 19992 20001000-20004000 already mapped failed -16 [ 1940.556741] binder: BINDER_SET_CONTEXT_MGR already set [ 1940.657649] binder: 19992:20002 ioctl 40046207 0 returned -16 [ 1940.657944] binder_alloc: 19992: binder_alloc_buf, no vma [ 1940.669613] binder: release 19992:19995 transaction 968 out, still active [ 1940.688570] binder: undelivered TRANSACTION_COMPLETE 05:36:32 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6600, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000001000000000000000000000000", 0x48}], 0x1) [ 1940.764173] binder: 19992:19995 transaction failed 29189/-3, size 0-0 line 3035 [ 1940.778548] binder: send failed reply for transaction 968, target dead 05:36:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00W:\x00\x00\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x66}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r1, 0x6}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001100)=@assoc_id=r2, 0x4) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x2610290a) [ 1940.855500] binder: 19992:19995 ioctl c0306201 20007000 returned -14 05:36:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0x0) 05:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="086f0000000019df080000"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1940.943494] binder: undelivered TRANSACTION_ERROR: 29189 [ 1941.074825] binder: 20021:20025 ioctl c0306201 20007000 returned -14 [ 1941.125761] binder: 20021:20025 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:32 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6601, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1941.254281] binder_alloc: binder_alloc_mmap_handler: 20021 20001000-20004000 already mapped failed -16 [ 1941.342186] binder: BINDER_SET_CONTEXT_MGR already set 05:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x200000007fff, 0xb2) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000010c0)=0x4) getdents64(r0, 0x0, 0x267) 05:36:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x14, 0x0, 0x0, 0x0) [ 1941.376944] binder: 20021:20025 ioctl 40046207 0 returned -16 [ 1941.464023] binder_alloc: 20021: binder_alloc_buf, no vma [ 1941.496269] binder: 20021:20039 transaction failed 29189/-3, size 0-0 line 3035 [ 1941.559573] binder: send failed reply for transaction 971 to 20021:20025 [ 1941.575545] binder: 20021:20039 ioctl c0306201 20007000 returned -14 [ 1941.583388] binder: undelivered TRANSACTION_COMPLETE [ 1941.618737] binder: undelivered TRANSACTION_ERROR: 29189 05:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 05:36:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000001080)=0x3, 0x4) getdents64(r0, 0x0, 0x9c) [ 1941.753127] binder: undelivered TRANSACTION_ERROR: 29189 05:36:33 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6700, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000002000000000000000000000000", 0x48}], 0x1) 05:36:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1941.945178] binder: 20055:20057 ioctl c0306201 20007000 returned -14 05:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x50, 0x0, 0x0, 0x0) [ 1941.986048] binder: 20055:20057 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1942.028306] binder_alloc: binder_alloc_mmap_handler: 20055 20001000-20004000 already mapped failed -16 [ 1942.058990] binder: BINDER_SET_CONTEXT_MGR already set 05:36:33 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000001100)='/dev/vcsa#\x00', 0x0, 0x101000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001140)={0x5, 0xfffffffffffffffd, 0x1f, 0x0, 0x4, 0xfffffffffffff8ad, 0x9, 0x9, 0x400, 0x200, 0xd7, 0x3, 0x0, 0x100000000, 0x5, 0x8000, 0xfffffffffffffff8, 0x8, 0xffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001080), 0x113}}, 0x20) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) [ 1942.083238] binder: 20055:20057 ioctl 40046207 0 returned -16 [ 1942.115284] binder_alloc: 20055: binder_alloc_buf, no vma [ 1942.146488] binder: 20055:20069 BC_FREE_BUFFER u0000000020001000 no match [ 1942.165382] binder: 20055:20063 transaction failed 29189/-3, size 0-0 line 3035 [ 1942.238883] binder: send failed reply for transaction 974 to 20055:20057 [ 1942.286025] binder: 20055:20063 ioctl c0306201 20007000 returned -14 [ 1942.292651] binder: undelivered TRANSACTION_COMPLETE [ 1942.339809] binder: undelivered TRANSACTION_ERROR: 29189 05:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x10000040000107]}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x18, 0x0, 0x48, 0x40, 0x18, 0x40]}, 0x4}}, @request_death={0x400c630e, 0x1, 0x3}], 0x110, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 05:36:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x17c) getdents64(r0, 0x0, 0x9c) [ 1942.433581] binder: undelivered TRANSACTION_ERROR: 29189 05:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xc0, 0x0, 0x0, 0x0) 05:36:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd989dc0d13ce634275b6b44a0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1942.676329] binder: 20086:20088 IncRefs 0 refcount change on invalid ref 1 ret -22 05:36:34 executing program 5: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001140)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) sendto$ax25(r1, &(0x7f0000001180)="b6419cfe88b311721f2156b9b2edc4f446f1054300e4a6a9fa59d39aff25e366631e1479551274b28538910afea3ff3706fe79eeabfe0491821465ac850a62a4fbe7af16af6a692b86f3fcdfd9aed29c711929d217b261c1e2714567d2908eb6fb6cb0bddf78ed195e344a0abf82e459408bfd2829182eeb7976d05c4906c624b29c4c2aa8ad2094d35f25db246d4a8625dd553430618cecb89e404942cdd2700da68298244e21b5bedc0804b54e60f81c4ad4e8a16489ce", 0xb8, 0x8000, &(0x7f0000001080)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r2 = syz_open_procfs(r0, &(0x7f0000001100)='map_files\x00') getpeername$unix(r2, &(0x7f0000001240)=@abs, &(0x7f0000000040)=0x6e) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r2, 0x0, 0x9c) [ 1942.720560] binder: 20086:20088 ioctl c0306201 20000140 returned -14 [ 1942.765191] binder: 20086:20088 BC_FREE_BUFFER u0000000020001000 no match [ 1942.885526] binder_alloc: binder_alloc_mmap_handler: 20086 20001000-20004000 already mapped failed -16 05:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x500, 0x0, 0x0, 0x0) 05:36:34 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6701, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000004000000000000000000000000", 0x48}], 0x1) [ 1942.987856] binder: BINDER_SET_CONTEXT_MGR already set [ 1942.993491] binder: 20086:20096 ioctl 40046207 0 returned -16 05:36:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000001180), 0x400) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1943.033030] binder: 20086:20101 BC_FREE_BUFFER u0000000020001000 no match [ 1943.090516] binder: 20086:20104 IncRefs 0 refcount change on invalid ref 1 ret -22 05:36:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1943.145446] binder: 20086:20104 ioctl c0306201 20000140 returned -14 05:36:34 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001080)={{0x1, 0x3}, {0x1, 0x7}, 0x100, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) 05:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x2, 0x1) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000040)=""/31) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="f7200000000000202d7861553e6e2d05e4f01bc68cefa19a401669d0d026cd7ace31b8348583"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 05:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x600, 0x0, 0x0, 0x0) [ 1943.522272] binder_alloc: 20123: binder_alloc_buf size 8848916129282869264 failed, no address space [ 1943.593332] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 05:36:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001080)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001700)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000012c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0}, &(0x7f0000001340)=0xc) fstat(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000001640)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="040002000000000008000600", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="10000200000000002000040000000000"], 0x64, 0x1) 05:36:35 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6800, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1943.690348] binder: 20123:20127 transaction failed 29201/-28, size 8848771521144493632-144608138375630 line 3035 05:36:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1943.795494] binder: 20123:20130 BC_FREE_BUFFER u0000000020001000 no match [ 1943.839354] binder: 20123:20127 ioctl c0306201 20007000 returned -14 [ 1943.898782] binder_alloc: binder_alloc_mmap_handler: 20123 20001000-20004000 already mapped failed -16 [ 1943.971015] binder: BINDER_SET_CONTEXT_MGR already set 05:36:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000001080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0xeae0, 0x8, 0x38, &(0x7f0000000080)="bcd44d0955268f39aa952d0b0556885b46da6b755fb06431b03aa5b54b495a1e4ff8770a40cbf345fc92d3827704540922d9479ea28628a7"}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0xe}, @multicast2}, 0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) 05:36:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000008000000000000000000000000", 0x48}], 0x1) 05:36:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x700, 0x0, 0x0, 0x0) [ 1944.081888] binder: 20123:20127 ioctl 40046207 0 returned -16 [ 1944.125046] binder: undelivered TRANSACTION_ERROR: 29201 [ 1944.159689] binder_alloc: 20123: binder_alloc_buf, no vma [ 1944.217861] binder: 20123:20147 transaction failed 29189/-3, size 8848771521144493632-144608138375630 line 3035 [ 1944.275039] binder: 20123:20147 ioctl c0306201 20007000 returned -14 05:36:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163d50e", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:35 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6801, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1944.396987] binder: undelivered TRANSACTION_ERROR: 29189 05:36:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0xffffffffffffffa3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001080)) signalfd4(r0, &(0x7f0000000040)={0x80}, 0x8, 0x80000) [ 1944.528192] binder: 20167:20169 unknown command 248865553 [ 1944.576999] binder: 20167:20169 ioctl c0306201 20007000 returned -22 05:36:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x900, 0x0, 0x0, 0x0) 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd98"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1944.662653] binder: 20167:20175 BC_FREE_BUFFER u0000000000000000 no match [ 1944.715648] binder_alloc: binder_alloc_mmap_handler: 20167 20001000-20004000 already mapped failed -16 [ 1944.761302] binder: BINDER_SET_CONTEXT_MGR already set [ 1944.786963] binder: 20167:20182 unknown command 248865553 [ 1944.819240] binder: 20167:20175 ioctl 40046207 0 returned -16 05:36:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0xffffffffffffff6f) [ 1944.846972] binder: 20167:20173 BC_FREE_BUFFER u0000000020001000 no match [ 1944.877183] binder: 20167:20182 ioctl c0306201 20007000 returned -22 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b001036dd98"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0400000000000004fe94595b59a3db77be4d8356bb3ca29c3d61b7a8a984f5a28356d46921db3f84e0fdd938fe7881087622c1192dd53dd36cb174808fecdcc3d46474efec4f5e4a4a53db9df8be1591293c32cd7d62fa7ca1f57db0b86f267c23dc3fbfe67b83b1ff7495fb84e51c34c5ddc10619ba52d13e5b43b469979e532ab437b8747f7dae6655"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0000000a000000000000000000000000", 0x48}], 0x1) 05:36:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000001080)=""/4096, 0xfffffffffffffe8b) getdents64(r0, 0x0, 0x9c) [ 1945.260337] binder: 20197:20198 transaction failed 29201/-22, size -6704306606056185539--8917167800614365565 line 3035 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa00, 0x0, 0x0, 0x0) 05:36:36 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='\xb3wlan1\x9b\'}\x00'}, 0x30) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)='vmnet1\x00'}, 0x30) r0 = getpgid(0x0) getpgrp(r0) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001100)={0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x458, 0x0, 0x230, 0x118, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000240), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x37c1, 0x1}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x22}, 0xff, 0x0, @empty, {[0xff, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x18}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x80000000, 0x80000000, 0x1, 0x6, 0x5, 0xa5e4, 'gre0\x00', 'bridge_slave_0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @remote, 0x8, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = syz_open_procfs(r1, &(0x7f00000012c0)='smaps_rollup\x00v\xf2\x10~\xb52Y4J\xd29{\xd9\xbc4\xc9+LrX\x19\xc6\xe0J\xc4ZX\x88\xa0\xb4\xf6Q)\xd4\x94d\xe4\xe8E\xddf\xeb\x1b\x01\x1c\xe4\xaa#:R\xc4\x03e\xe2\xf7\xd0_2w\xfcz\xa2?\xc7\xbc\xb0w\x10\x8c\x97\x01\xd4\xcdL\xab=\xb0\xb0X\x1c[\x13\x01\xb3A\x17z\xf7\xbf\xe4\xf6<\xe3\xe9\x15&kFB\x82\xa5!\x11\xc5\x95KzNt\ayU\xe0\x05\xc9\x97x\x01F\xf9\x89\xbeF\xfc\'\xc6[\xca\x8fR7N,\x9d\b\xe9\xb1\x19\x939\xb0L\x8c\x1e\xbb\xac\x89\x13\xae\xcb\fl+Nm\x97jof\xa0?$\xd0\x06O\xc2\x1b~Vk\xb4u\xe9\xa7\x1cA\'5\x17\xa3\xa0\xe5y6y\xad\xab\xdf\xddT\xc1\xe4\'L\xfd\xbc\xf1h8l\xf5\xf3\xe1\xbcC2\x03.\xb3f8!q8\x8f!}\x12\x10\xe1\xc8MQ\xadU\x9e\x06\xb4r\'\x9aC\x8e\xe1\x82\xda!p\x17*L\x92\xabr\xa1\x1a\xf6\xd0\xa0\xf8\v\xfc<\n(\xed\x1f\xdcR\xd4\xd4F\xf1\xd1/<\x82\xfd\xfe_\xc8\xfb\xcb\xeb\t\xa5\x93\xee\x802\xdcq\xfb.\xeb\a\xccJ=\xd0\xe2\xde\r\x11\xca\xee\xf9\x81\xc1nW\x1atV\xc0\xdeu\xad\x85\x11\xc6o\xbb\xdf\f1\x11\xd9\x96.@*\xc3\xae>\xab6\x96\xac\xbd\x80:\xc4w\xa3\xd16\t\x1f\xa7\x94\xc4\f\xeav\xf9Rm\v\xa1\'\xfa') getdents64(r3, &(0x7f0000002440)=""/4096, 0xffffffffffffff8e) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000040)) getdents64(r3, 0x0, 0x9c) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000000)={'team_slave_0\x00', 0x93e}) [ 1945.413538] binder: 20197:20205 BC_FREE_BUFFER u0000000020001000 no match [ 1945.413581] binder: 20197:20198 ioctl c0306201 20007000 returned -14 05:36:36 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6900, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1945.578601] binder_alloc: binder_alloc_mmap_handler: 20197 20001000-20004000 already mapped failed -16 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1945.642926] binder_alloc: 20197: binder_alloc_buf, no vma [ 1945.695821] binder: 20197:20198 transaction failed 29189/-3, size -6704306606056185539--8917167800614365565 line 3035 [ 1945.705048] binder: BINDER_SET_CONTEXT_MGR already set [ 1945.712248] binder: 20197:20218 ioctl 40046207 0 returned -16 05:36:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000001080)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000010c0)=0x0) syz_open_procfs(r1, &(0x7f0000001100)='setgroups\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1945.740522] binder: undelivered TRANSACTION_ERROR: 29201 [ 1945.757846] binder: 20197:20223 BC_FREE_BUFFER u0000000020001000 no match 05:36:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xb00, 0x0, 0x0, 0x0) [ 1945.791880] binder: 20197:20198 ioctl c0306201 20007000 returned -14 05:36:37 executing program 4: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1945.952493] binder: undelivered TRANSACTION_ERROR: 29189 05:36:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1946.075396] binder: 20235:20237 ioctl c0306201 20007000 returned -14 05:36:37 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280)={0x0}, &(0x7f00000012c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000001240)='net/fib_trie\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) [ 1946.122141] binder: 20235:20237 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0000000e000000000000000000000000", 0x48}], 0x1) 05:36:37 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6901, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1946.228676] binder_alloc: binder_alloc_mmap_handler: 20235 20001000-20004000 already mapped failed -16 [ 1946.290715] binder: BINDER_SET_CONTEXT_MGR already set 05:36:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xd00, 0x0, 0x0, 0x0) 05:36:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0xa, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x84) getdents64(r0, 0x0, 0x9c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000001080)={0x1c, 0xad, 0x20}) [ 1946.384249] binder_alloc: 20235: binder_alloc_buf, no vma [ 1946.420945] binder: 20235:20248 ioctl 40046207 0 returned -16 05:36:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1946.435515] binder: release 20235:20237 transaction 985 out, still active [ 1946.450650] binder: 20235:20237 transaction failed 29189/-3, size 0-0 line 3035 [ 1946.477842] binder: undelivered TRANSACTION_COMPLETE [ 1946.513105] binder: 20235:20237 ioctl c0306201 20007000 returned -14 [ 1946.520204] binder: send failed reply for transaction 985, target dead 05:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1946.678188] binder: undelivered TRANSACTION_ERROR: 29189 05:36:38 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000010c0)) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000001240)='neu\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001100)={{0x8, 0x20}, {0x3, 0x9}, 0x11, 0x1, 0x100}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000001080)='net/igmp\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 05:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885e19b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1400, 0x0, 0x0, 0x0) [ 1946.876552] binder: 20269:20271 ioctl c0306201 20007000 returned -14 [ 1946.902204] binder: 20269:20271 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:38 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6a00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1947.000263] binder_alloc: binder_alloc_mmap_handler: 20269 20001000-20004000 already mapped failed -16 [ 1947.046290] binder: BINDER_SET_CONTEXT_MGR already set [ 1947.100117] binder: 20269:20271 ioctl 40046207 0 returned -16 [ 1947.108769] binder_alloc: 20269: binder_alloc_buf, no vma 05:36:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x141000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1947.146264] binder: 20269:20276 BC_FREE_BUFFER u0000000020001000 no match [ 1947.211069] binder: send failed reply for transaction 988 to 20269:20271 [ 1947.221813] binder: undelivered TRANSACTION_COMPLETE 05:36:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0000000f000000000000000000000000", 0x48}], 0x1) [ 1947.269449] binder: undelivered TRANSACTION_ERROR: 29189 [ 1947.288940] binder: 20269:20281 transaction failed 29189/-3, size 0-0 line 3035 05:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1947.365027] binder: 20269:20281 ioctl c0306201 20007000 returned -14 [ 1947.375556] binder: undelivered TRANSACTION_ERROR: 29189 05:36:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x2000, 0x0, 0x0, 0x0) 05:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x68, &(0x7f00000001c0)="d808b0ee01ea0955423916eeb9f8d2a4f0928ed4ed2ba70e93ab0392def62b113532bc768d3b3e13b5db6de595") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) listen(r2, 0x3) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100)="4755947dcfe5929f14e05d96c863ca40fff988a77b0d25520ba1b2e35bfb649db89af5e00275779a45ea6964d9208387d03ea3968a56bc04384d1f671b", 0x3d, r1}, 0x68) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x4, {0x4ed58e56}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="036308402e99b47fad27", @ANYRES64=r4], 0x0, 0x0, 0x0}) 05:36:38 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000010c0)='net/ptype\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24008080) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000011c0)={{0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'none\x00', 0xc, 0x7, 0x51}, {@empty, 0x4e22, 0x12004, 0x10001, 0x0, 0x1}}, 0x44) read(r1, &(0x7f0000001380)=""/15, 0xf) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001100)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000001180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r3, 0x0, 0x2, 0x4}}, 0x20) getdents64(r1, 0x0, 0x9c) [ 1947.635334] binder: 20300:20303 ioctl 68 200001c0 returned -22 [ 1947.676237] binder: 20300:20303 BC_FREE_BUFFER u100027ad7fb4992e no match 05:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1947.738166] binder: 20300:20303 ioctl 68 200001c0 returned -22 [ 1947.770500] binder_alloc: binder_alloc_mmap_handler: 20300 20001000-20003000 already mapped failed -16 [ 1947.808556] binder: BINDER_SET_CONTEXT_MGR already set [ 1947.826715] binder: 20300:20308 ioctl 40046207 0 returned -16 [ 1947.860542] binder_alloc: 20300: binder_alloc_buf, no vma [ 1947.893120] binder: 20300:20307 transaction failed 29189/-3, size 0-0 line 3035 05:36:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x3f00, 0x0, 0x0, 0x0) 05:36:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2080, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001140)=0x3, 0xfffffffffffffffa) write$FUSE_DIRENT(r0, &(0x7f0000001080)={0x78, 0x0, 0x4, [{0x6, 0x100000000, 0x1c, 0xfffffffffffffffc, 'em0ppp1}{vmnet0keyring\\ppp1%'}, {0x3, 0x7, 0x17, 0x80000000, '\\:cpuset%\x8d[!*vmnet0proc'}]}, 0x78) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000001100)={{0x0, @name="bc53350cf2ed67272de2913e984eed72a96f7848fc37256dc6067085609aac18"}, 0x8, 0x7, 0x8651}) [ 1947.935719] binder: 20300:20308 BC_FREE_BUFFER u100027ad7fb4992e no match [ 1947.965759] binder: release 20300:20303 transaction 991 out, still active [ 1948.006446] binder: undelivered TRANSACTION_COMPLETE 05:36:39 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6a01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0xa000) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='/dev/media#\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1948.079755] binder: send failed reply for transaction 991, target dead [ 1948.152517] binder: undelivered TRANSACTION_ERROR: 29189 [ 1948.277145] binder: 20324:20329 unknown command 0 05:36:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x4000, 0x0, 0x0, 0x0) 05:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000010000000000000000000000000", 0x48}], 0x1) [ 1948.356292] binder: 20324:20329 ioctl c0306201 20007000 returned -22 05:36:39 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001280)='\x00', 0xffffffffffffffff}, 0x30) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000011c0)='/dev/amidi#\x00', 0x7, 0x400) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001200)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000013c0)='ti\xb1\x95{\x0f\a-/ers\x00') flock(r2, 0x1) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r2, 0x0, 0x9c) write$P9_RSTATFS(r2, &(0x7f0000001080)={0x43, 0x9, 0x2, {0x1000, 0x100000000, 0x5, 0x81, 0x1000, 0x77d, 0x7, 0x2a, 0x1}}, 0x43) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001100)={0x207b4821, 0xc, 0x4, 0x231000, {}, {0x3, 0x8, 0xffff, 0x0, 0x7fffffff, 0x9, "3a5b3de7"}, 0x4, 0x4, @offset=0x30, 0x4}) [ 1948.448723] binder: BINDER_SET_CONTEXT_MGR already set [ 1948.477482] binder: 20324:20337 ioctl 40046207 0 returned -16 [ 1948.497009] binder: 20324:20329 unknown command 0 [ 1948.569034] binder: 20324:20329 ioctl c0306201 20007000 returned -22 05:36:40 executing program 5: getpgid(0xffffffffffffffff) getpid() r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f00000010c0)='att\xa8\xee\xd6\xb6\xd0\xcb\x82\x89\xcaO\x8eW\xf6\'\xe8+Zr\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r3) syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x8, 0x0) close(r3) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) getdents64(r1, 0x0, 0x9c) 05:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x5000, 0x0, 0x0, 0x0) 05:36:40 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6b00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef4885"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 05:36:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x60ff, 0x0, 0x0, 0x0) [ 1949.017702] binder: 20364:20365 ioctl c0306201 20007000 returned -14 [ 1949.055499] binder: 20364:20365 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1949.098555] binder_alloc: binder_alloc_mmap_handler: 20364 20001000-20004000 already mapped failed -16 [ 1949.142251] binder: BINDER_SET_CONTEXT_MGR already set 05:36:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/dlm-control\x00', 0x10b800, 0x0) getdents64(r0, 0x0, 0x9c) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001080)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x880) [ 1949.200640] binder: 20364:20365 ioctl 40046207 0 returned -16 [ 1949.264172] binder_alloc: 20364: binder_alloc_buf, no vma [ 1949.266817] binder: release 20364:20365 transaction 995 out, still active [ 1949.278009] binder: 20364:20370 transaction failed 29189/-3, size 0-0 line 3035 05:36:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1949.316285] binder: 20364:20370 ioctl c0306201 20007000 returned -14 [ 1949.322819] binder: undelivered TRANSACTION_COMPLETE 05:36:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000060000000000000000000000000", 0x48}], 0x1) [ 1949.370521] binder: send failed reply for transaction 995, target dead 05:36:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x59) 05:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x30002, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000080)="da0c6c6ab141cb6cb66b14ad11239144aa7728d97a112e69f799379454f9668719c8284adcb400c5b71c1f927ef65307830bfb7af13e7dbae0074dbe41926e9e855fd957cbbcdbd004fec6cf925001f6f71308e74976b684aa3daad2522e9ddc2430f68abeae8815b704c5aa4f91061a1538810cc5f41527686e01dcd9174f7499c6bf7e0a2e47243d1592cc99c2c9b8c0dd5ed8691b1e474ae2332a4fb55c6ba1be7ae7f21b55bf3f75a0e6005a59a0792c67eec6e3ece168221d2a8018") mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xbc, 0x0, &(0x7f0000000040), 0x2fe, 0x0, 0x0}) 05:36:40 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6b01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7400, 0x0, 0x0, 0x0) [ 1949.469215] binder: undelivered TRANSACTION_ERROR: 29189 [ 1949.618850] binder_alloc: 20391: binder_alloc_buf, no vma [ 1949.646020] binder: 20391:20392 transaction failed 29189/-3, size 0-0 line 3035 [ 1949.685643] binder: 20391:20392 ioctl c0306201 20007000 returned -14 05:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xa0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xd) getdents64(r0, 0x0, 0x9c) [ 1949.756148] binder: 20391:20392 unknown command 1986356271 [ 1949.785108] binder: 20391:20392 ioctl c0306201 20000200 returned -22 [ 1949.822964] binder: BINDER_SET_CONTEXT_MGR already set 05:36:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x9400, 0x0, 0x0, 0x0) [ 1949.935636] binder_alloc: 20391: binder_alloc_buf, no vma [ 1949.941597] binder: undelivered TRANSACTION_ERROR: 29189 [ 1949.968988] binder: 20391:20401 ioctl 40046207 0 returned -16 [ 1949.999672] binder: 20391:20392 transaction failed 29189/-3, size 0-0 line 3035 [ 1950.052911] binder: 20391:20392 ioctl c0306201 20007000 returned -14 05:36:41 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6c00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001080)) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x2, "6f64047239c0176fb892338b7f94d83414e040eeefa26136876b83162cacd98a", 0x2, 0x1}) 05:36:41 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x78f12467, 0x1, 0x0, 0x101, 0x8, 0x4, 0xffffffff, 0xb354, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="1e002100331ad6f009234c37ab6f2be28000000000000000af0000b4c5f34d563bcd"], &(0x7f0000000180)=0x26) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000300)={0x0, 0x80000001, 0x8, [], &(0x7f00000002c0)=0x3f}) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000280)=0x5cbdcdd5, 0x4) [ 1950.174136] binder: undelivered TRANSACTION_ERROR: 29189 [ 1950.297515] binder: 20423:20424 ioctl c0306201 20007000 returned -14 [ 1950.345954] binder: 20423:20428 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1950.414031] binder: 20423:20434 ioctl c01064b5 20000240 returned -22 05:36:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4effffff9e000000000000000000000000", 0x48}], 0x1) 05:36:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x200000, 0x0, 0x0, 0x0) 05:36:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xae2) getdents64(r0, 0x0, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000011c0)={0x0, 0x4}, &(0x7f0000001080)=0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000010c0)={r1, @in={{0x2, 0x4e21, @remote}}, 0x173, 0x1, 0x32, 0x8, 0x40}, 0x98) [ 1950.490995] binder_alloc: binder_alloc_mmap_handler: 20423 20001000-20004000 already mapped failed -16 [ 1950.587130] binder: BINDER_SET_CONTEXT_MGR already set [ 1950.621290] binder_alloc: 20423: binder_alloc_buf, no vma [ 1950.624095] binder: 20423:20438 ioctl c01064b5 20000240 returned -22 [ 1950.632781] binder: 20423:20434 ioctl 40046207 0 returned -16 05:36:42 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6c01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1950.659514] binder: 20423:20424 transaction failed 29189/-3, size 0-0 line 3035 [ 1950.660152] binder: 20423:20428 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1950.679573] binder: 20423:20424 ioctl c0306201 20007000 returned -14 05:36:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents(r0, &(0x7f0000001080)=""/145, 0x91) getdents64(r0, 0x0, 0x9c) [ 1950.778560] binder: release 20423:20424 transaction 1001 out, still active [ 1950.791298] binder: undelivered TRANSACTION_COMPLETE [ 1950.839723] binder: send failed reply for transaction 1001, target dead 05:36:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x307100, 0x0, 0x0, 0x0) [ 1951.053249] binder: undelivered TRANSACTION_ERROR: 29189 05:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:42 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1951.202964] binder: 20464:20466 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1951.294680] binder_alloc: binder_alloc_mmap_handler: 20464 20001000-20004000 already mapped failed -16 [ 1951.337721] binder: BINDER_SET_CONTEXT_MGR already set [ 1951.376406] binder: 20464:20466 ioctl 40046207 0 returned -16 05:36:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000018b7000000000000000000000000", 0x48}], 0x1) [ 1951.465482] binder: 20464:20473 BC_FREE_BUFFER u0000000020001000 no match 05:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000001080)={'U-', 0x20}, 0x28, 0x1) getdents64(r0, 0x0, 0x9c) 05:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x301000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) socket$unix(0x1, 0x2, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x90, "50b794", "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"}}, 0x110) [ 1951.542600] binder: send failed reply for transaction 1004 to 20464:20466 [ 1951.580608] binder: undelivered TRANSACTION_COMPLETE 05:36:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x400000, 0x0, 0x0, 0x0) [ 1951.615078] binder: undelivered TRANSACTION_ERROR: 29189 [ 1951.732527] binder: 20490:20492 ioctl c0306201 20007000 returned -14 [ 1951.772271] binder: 20490:20492 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1951.841894] binder_alloc: binder_alloc_mmap_handler: 20490 20001000-20004000 already mapped failed -16 [ 1951.895558] binder: BINDER_SET_CONTEXT_MGR already set [ 1951.908722] binder_alloc: 20490: binder_alloc_buf, no vma [ 1951.932115] binder: 20490:20492 ioctl 40046207 0 returned -16 05:36:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x50a000, 0x0, 0x0, 0x0) [ 1951.964546] binder: 20490:20500 transaction failed 29189/-3, size 0-0 line 3035 [ 1951.998700] binder: 20490:20502 BC_FREE_BUFFER u0000000020001000 no match [ 1952.023479] binder: release 20490:20492 transaction 1006 out, still active [ 1952.046270] binder: 20490:20500 ioctl c0306201 20007000 returned -14 [ 1952.053037] binder: undelivered TRANSACTION_COMPLETE [ 1952.064457] binder: send failed reply for transaction 1006, target dead 05:36:43 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000001080)='wlan0mime_type\x00'}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0xeb60f7bb17b34b02) setns(r1, 0x48000000) 05:36:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4ae, 0x0, &(0x7f0000005fd4), 0x18c, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1952.139423] binder: undelivered TRANSACTION_ERROR: 29189 05:36:43 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6d01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1952.265538] binder: 20510:20511 unknown command 0 [ 1952.295101] binder: 20510:20511 ioctl c0306201 20007000 returned -22 [ 1952.332786] binder: 20510:20511 BC_FREE_BUFFER u0000000020001000 no match 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1952.360495] binder_alloc: binder_alloc_mmap_handler: 20510 20001000-20004000 already mapped failed -16 [ 1952.419462] binder: 20510:20511 unknown command 0 05:36:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000001080)={0x4, 0x57, [{0x6, 0x0, 0x100}, {0x665, 0x0, 0x80000001}, {0x1, 0x0, 0x3}, {0x3, 0x0, 0x8}]}) getdents64(r0, 0x0, 0x9c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000001100)=0x4) write$FUSE_IOCTL(r0, &(0x7f0000001140)={0x20, 0xfffffffffffffff5, 0x5, {0x81, 0x0, 0xca82, 0x20}}, 0x20) [ 1952.463201] binder: 20510:20511 ioctl c0306201 20007000 returned -22 05:36:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000ec0000000000000000000000000", 0x48}], 0x1) [ 1952.508813] binder: BINDER_SET_CONTEXT_MGR already set [ 1952.514311] binder: 20510:20525 BC_FREE_BUFFER u0000000020001000 no match 05:36:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x70a000, 0x0, 0x0, 0x0) [ 1952.569413] binder: 20510:20522 ioctl 40046207 0 returned -16 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001080)='/dev/admmidi#\x00', 0x5, 0x280) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) 05:36:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x8, 0x0, 0x3, 0x1ff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x713000, 0x0, 0x0, 0x0) 05:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1953.109264] binder: 20547:20549 got transaction to context manager from process owning it 05:36:44 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6e00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:44 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000001080)='map_files\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000001100)='map_files\x00') fcntl$dupfd(r1, 0x406, r1) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) r2 = socket(0x40000000015, 0x805, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x4000000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) getdents64(r1, 0x0, 0x9c) [ 1953.152585] binder: 20547:20549 transaction failed 29201/-22, size 0-0 line 2887 [ 1953.165229] binder: 20547:20549 ioctl c0306201 20007000 returned -14 [ 1953.189039] binder: 20547:20553 ioctl c028660f 20000080 returned -22 [ 1953.236669] binder: 20547:20549 BC_FREE_BUFFER u0000000020001000 no match [ 1953.251674] binder_alloc: binder_alloc_mmap_handler: 20547 20001000-20004000 already mapped failed -16 [ 1953.350217] binder: BINDER_SET_CONTEXT_MGR already set 05:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1953.398105] binder: 20547:20553 ioctl c028660f 20000080 returned -22 [ 1953.399042] binder: 20547:20564 BC_FREE_BUFFER u0000000020001000 no match [ 1953.429575] binder_alloc: 20547: binder_alloc_buf, no vma [ 1953.456746] binder: undelivered TRANSACTION_ERROR: 29201 05:36:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4effffd7ed000000000000000000000000", 0x48}], 0x1) 05:36:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x740000, 0x0, 0x0, 0x0) [ 1953.480602] binder: 20547:20562 ioctl 40046207 0 returned -16 [ 1953.518590] binder: 20547:20549 transaction failed 29189/-3, size 0-0 line 3035 [ 1953.528926] binder: 20547:20549 ioctl c0306201 20007000 returned -14 05:36:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x7, 0x36, 0x63a88000, 0x20000000000000, 0x64]}, &(0x7f0000001080)=0xe) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1953.646041] binder: undelivered TRANSACTION_ERROR: 29189 [ 1953.743522] binder: 20579:20583 ioctl c0306201 20007000 returned -14 [ 1953.806278] binder: 20579:20583 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1953.839811] binder_alloc: binder_alloc_mmap_handler: 20579 20001000-20004000 already mapped failed -16 [ 1953.859706] binder: BINDER_SET_CONTEXT_MGR already set [ 1953.870978] binder_alloc: 20579: binder_alloc_buf, no vma [ 1953.880260] binder: 20579:20583 ioctl 40046207 0 returned -16 [ 1953.890546] binder: 20579:20584 transaction failed 29189/-3, size 0-0 line 3035 [ 1953.903430] binder: 20579:20584 ioctl c0306201 20007000 returned -14 05:36:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4effffff9e000000000000000000000000", 0x48}], 0x1) [ 1953.926236] binder: 20579:20584 BC_FREE_BUFFER u0000000020001000 no match [ 1953.959445] binder: release 20579:20583 transaction 1013 out, still active 05:36:45 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6e01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1953.973096] binder: undelivered TRANSACTION_COMPLETE 05:36:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80ffff, 0x0, 0x0, 0x0) [ 1954.010901] binder: send failed reply for transaction 1013, target dead 05:36:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) accept4$ax25(r0, &(0x7f0000001080)={{0x3, @netrom}, [@netrom, @bcast, @rose, @null, @bcast, @bcast, @remote, @default]}, &(0x7f0000000040)=0x48, 0x80803) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0x0, @remote, 0x5}}, 0x100, 0x40, 0x10001, 0x6, 0x200}, &(0x7f00000011c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001200)={r1, 0x8}, 0x8) getdents64(r0, 0x0, 0x9c) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000001280)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001240)) 05:36:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x121000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x13f, 0xb}}, 0x20) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r3, 0x8, &(0x7f0000000140)=[0x9, 0xb0, 0x79a, 0x4, 0x3, 0x3, 0x4, 0x10000], &(0x7f0000000180)=[0x7, 0x2, 0x4, 0x40, 0x9, 0xccf, 0x5, 0x0, 0x5, 0x8000], 0x5, 0x1, 0xfb, &(0x7f00000001c0)=[0x1], &(0x7f0000000240)=[0xfffffffffffffff7, 0x7, 0x8, 0x0, 0xfffffffffffffff7, 0x1, 0x79]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1954.064410] binder: undelivered TRANSACTION_ERROR: 29189 05:36:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000004080)=""/4096, 0xf853f6cf9358d914) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x0, {0x8d6b, 0x7f, 0x4, 0x80000000}}) getdents64(r0, 0x0, 0x9c) [ 1954.266284] binder: 20599:20602 ioctl c0306201 20007000 returned -14 [ 1954.310982] binder: 20599:20602 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x940000, 0x0, 0x0, 0x0) [ 1954.392307] binder_alloc: binder_alloc_mmap_handler: 20599 20001000-20004000 already mapped failed -16 05:36:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4efffffff0000000000000000000000000", 0x48}], 0x1) [ 1954.467204] binder: BINDER_SET_CONTEXT_MGR already set [ 1954.511687] binder: 20599:20602 ioctl 40046207 0 returned -16 [ 1954.513536] binder: 20599:20614 BC_FREE_BUFFER u0000000020001000 no match 05:36:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='s\x00\x00\x00\x00\x00\x00\x00\x00\x00R\x0f\xbe=\xe8\xa7\x12@\xba\x05\x1b\xc9u\xe5\xe0\xb4n\xa2\x04\x8aNa\x1d;\xf1\xe2C;\xc2h\x8a{\xed\xd4\xaa\xd2\x9e\xcf\x7fV9n\xfb\xdf\x0e\xf1X\x18-c\xa9\xba\xee\xf7G\xcf\x88h\x8c\xd3\x03\xcc\xf3\xba\xa0\x1eK\x03T\xae\x17\xad\xb7\x9f\x9aQ\x9ce\xd7\xd8\xee\x88\x06W\x99w\xe3\xd6\xe9u\xdf/(#\xfd\x99\x8fF\xf6U\xd7\x19\xa9\x929\xadH\x97\xd8\xbbj\xb3\t)\xb0{\xce\xd3{=(\xac#Q\f\xac\xb9w\x04L\x97\x9a;\x92\x06\v\xfa\x1eZ\x9cR\xb9B\x17e?\xf9\nxm\x93\x83\x94\xa5\x06\x9a\x02F-Ji\xb0\xc4l;\xb49N\x8fVv]\xc1+\f\x1e\xdc\\\x90\x1a\xcc\xcc\xd4M\x01~\ff@\x84\xf6TY\xcc\xafRt\x10\x94ZyX\x8f\xe8\xc9\xbd\x94\xea\x84D-\xd8\xbeDL\b\xfb\x1f\xb6\x1e\xe9\x8f\x9aS\x7f\xc4B\x8e\xef\xd9\xc5\xb5\xb3q\xfbOH\x9d\b\xd5w\x1e{D$') setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x2, 0x4) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x200400) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001180), &(0x7f00000011c0)=0x6) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000001200)={'ipddp0\x00', 0x1, 0x401}) [ 1954.569077] binder: release 20599:20602 transaction 1016 out, still active [ 1954.605060] binder: undelivered TRANSACTION_COMPLETE 05:36:45 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6f00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1954.631555] binder: send failed reply for transaction 1016, target dead 05:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) mmap$binder(&(0x7f0000003000/0xc000)=nil, 0xc000, 0x1000000, 0x48831, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa05000, 0x0, 0x0, 0x0) 05:36:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x2, 0x1) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000040)=""/31) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="f7200000000000202d7861553e6e2d05e4f01bc68cefa19a401669d0d026cd7ace31b8348583"], 0xffffffffffffffe3, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1954.883153] binder: 20626:20629 ioctl c0306201 20007000 returned -14 [ 1954.921915] binder: 20626:20629 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:46 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000001080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$nl_xfrm(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="580000002500100801000000fedbdf2505f00000180008001200080001ff0a00765360639edad76195ece2002c001700040000002dbd7000278c0d00003f0000000100000009000000080000000000000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4040) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) [ 1954.924822] binder: BINDER_SET_CONTEXT_MGR already set [ 1954.998833] binder_alloc: binder_alloc_mmap_handler: 20626 20001000-20004000 already mapped failed -16 [ 1955.012892] binder: 20630:20631 ioctl 40046207 0 returned -16 [ 1955.057429] binder: BINDER_SET_CONTEXT_MGR already set [ 1955.068909] binder: 20630:20640 BC_FREE_BUFFER u0000000020001000 no match [ 1955.090671] binder: 20626:20629 ioctl 40046207 0 returned -16 [ 1955.091194] binder_alloc: 20626: binder_alloc_buf, no vma [ 1955.151269] binder: 20630:20637 transaction failed 29189/-3, size 8848771521144493632-144608138375630 line 3035 [ 1955.152863] binder_alloc: 20626: binder_alloc_buf, no vma [ 1955.169810] binder: send failed reply for transaction 1018 to 20626:20629 [ 1955.194200] binder: undelivered TRANSACTION_COMPLETE [ 1955.201938] binder: 20630:20637 ioctl c0306201 20007000 returned -14 [ 1955.213190] binder: undelivered TRANSACTION_ERROR: 29189 05:36:46 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000001080)=""/102) getdents64(0xffffffffffffffff, 0x0, 0x9c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8011, 0xffffffffffffffff, 0x0) 05:36:46 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x6f01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa07000, 0x0, 0x0, 0x0) [ 1955.367691] binder: 20626:20645 transaction failed 29189/-3, size 0-0 line 3035 [ 1955.395819] binder: 20626:20645 ioctl c0306201 20007000 returned -14 05:36:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_fXles\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000001080)='./file0\x00') getdents64(r0, 0x0, 0x9c) [ 1955.455692] binder: undelivered TRANSACTION_ERROR: 29189 05:36:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4efffffffe000000000000000000000000", 0x48}], 0x1) 05:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634855", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000001000000000000000000000000", 0x48}], 0x1) 05:36:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000001080)=""/80, 0x50, 0x80, &(0x7f0000001100)={r1, r2+10000000}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001140), &(0x7f0000001180)=0x4) 05:36:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1000000, 0x0, 0x0, 0x0) [ 1955.692920] binder: undelivered TRANSACTION_ERROR: 29189 05:36:47 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7000, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1955.788811] binder: 20666:20669 unknown command 1430807313 [ 1955.818282] binder: 20666:20669 ioctl c0306201 20007000 returned -22 [ 1955.860661] binder: 20666:20669 BC_FREE_BUFFER u0000000020001000 no match [ 1955.880446] binder_alloc: binder_alloc_mmap_handler: 20666 20001000-20004000 already mapped failed -16 [ 1955.920426] binder: BINDER_SET_CONTEXT_MGR already set [ 1955.938772] binder: 20666:20669 ioctl 40046207 0 returned -16 [ 1955.979637] binder: 20666:20674 unknown command 1430807313 [ 1956.017352] binder: 20666:20685 BC_FREE_BUFFER u0000000020001000 no match 05:36:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xff, 0x43ea41) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000001080)=0x100020) 05:36:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1000040, 0x0, 0x0, 0x0) [ 1956.052606] binder: 20666:20674 ioctl c0306201 20007000 returned -22 05:36:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0]], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0363084094794e9eaae1df54e1fcf3cbd5fd6db8c4aa8c266fb223eb58d5939c23a84115a16970fc876c527d73fb8dc21550a1e9f5ce53067fbb5ac7a2da05037e915cc526c6a798ee1691b72e0c294ca692fdbad4edf64b0f7f3e7552fb41a50829dcc69b8b760f4519a7e42531d58a260c4a5351f0b7fc160f6a01803f666602226b714e9397d6ec048b750c33166e6466d916241d901fb3c0798de6e60c950bf2b2cdd502ba2a52bab6f4ac409fc375461a5e6764cf302dca40264418522d65e87161a87292ed15016768", @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1956.263744] binder: 20692:20694 BC_FREE_BUFFER u54dfe1aa9e4e7994 no match 05:36:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001080)={{0x0, 0x2, 0xcdda, 0x1, 0xffff}, 0x8, 0x8, 0xffffffffffffff6d}) getdents64(r0, 0x0, 0x9c) 05:36:47 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7001, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1956.344215] binder_alloc: binder_alloc_mmap_handler: 20692 20001000-20004000 already mapped failed -16 [ 1956.425793] binder: BINDER_SET_CONTEXT_MGR already set 05:36:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1000080, 0x0, 0x0, 0x0) [ 1956.451593] binder: 20692:20694 ioctl 40046207 0 returned -16 [ 1956.484606] binder_alloc: 20692: binder_alloc_buf, no vma [ 1956.527094] binder: 20692:20699 BC_FREE_BUFFER u54dfe1aa9e4e7994 no match [ 1956.555427] binder: release 20692:20694 transaction 1023 out, still active [ 1956.566611] binder: 20692:20702 transaction failed 29189/-3, size 0-0 line 3035 05:36:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4eedd7ffff000000000000000000000000", 0x48}], 0x1) [ 1956.569529] binder: undelivered TRANSACTION_COMPLETE [ 1956.608582] binder: send failed reply for transaction 1023, target dead 05:36:48 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000004080)=""/4096, 0x10ef) getdents64(r1, 0x0, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x29}, 0x9}, @in6={0xa, 0x4e22, 0xc0, @empty, 0x35}, @in6={0xa, 0x4e24, 0x5d, @mcast2, 0x1f}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0xd257}, @in6={0xa, 0x4e21, 0x1, @local, 0xbc5}, @in6={0xa, 0x4e21, 0xffffffffffff7fff, @mcast2, 0x5}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @multicast1}], 0xf4) 05:36:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x200000007fff, 0xb2) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000010c0)=0x4) getdents64(r0, 0x0, 0x267) 05:36:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000000000, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1956.743941] binder: undelivered TRANSACTION_ERROR: 29189 [ 1956.903506] binder: 20723:20726 ioctl c0306201 20007000 returned -14 05:36:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fcntl$getflags(r0, 0x40b) getdents64(r0, &(0x7f0000002180)=""/4096, 0x1262) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) getdents64(r0, 0x0, 0x9c) 05:36:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x10000c0, 0x0, 0x0, 0x0) [ 1956.960253] binder: 20723:20726 BC_FREE_BUFFER u0000000020001000 no match 05:36:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x200000007fff, 0xb2) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000010c0)=0x4) getdents64(r0, 0x0, 0x267) 05:36:48 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7100, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1957.036283] binder_alloc: binder_alloc_mmap_handler: 20723 20002000-20006000 already mapped failed -16 [ 1957.061861] binder: BINDER_SET_CONTEXT_MGR already set [ 1957.115344] binder: 20723:20726 ioctl 40046207 0 returned -16 [ 1957.125433] binder: 20723:20727 ioctl c0306201 20007000 returned -14 05:36:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) sendto$netrom(r1, &(0x7f0000000340)="9c853068c82180496eaa9aed01a8376df1a5b4d76976657436e8c4e4468438310093e9d8c553d24f5cb830267a8546c9d44ba5b88dff02e2216a5470585447d038595330522f3e811f492233c95e4289c706a2166bcb95585b2d6f29cfe9264a5420997944ae695da685c415dc5ada21decdcec65a4dad2289e953b1ce9d5a20a469c431bf414b889da992644186a4b909fe62", 0x93, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r3 = accept(r1, &(0x7f0000000240)=@isdn, &(0x7f0000001100)=0xffffffffffffffa4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0x6}], 0x1c) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000010c0)) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x7f, 0x0) r5 = dup(r4) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getresuid(0x0, &(0x7f0000000e80), 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x6, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001080)=r9) getdents64(r0, 0x0, 0x9c) 05:36:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xfffffffffffffe4d) r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001280)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000001380)=0xe8) getgroups(0x5, &(0x7f00000013c0)=[0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xee01]) r4 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001400)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000001500)=0xe8) r6 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000001b40)=0xe8) getresgid(&(0x7f0000001b80)=0x0, &(0x7f0000001bc0), &(0x7f0000001c00)) r13 = getpid() lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0)={0x0}, &(0x7f0000001e00)=0xc) fstat(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000001ec0)=[0x0]) r19 = gettid() r20 = getuid() fstat(r0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002580)=[{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001100)="775edf3f50c4e6a5b5402f9dbfcb64f76b3f9edb7c8953b5173cae3ed42cefb6a8b7ea63a48f91cd8235ac61fac7e31b2685a2a046250d4bcbba48fd9ca0e9d1dead6f4c121cb4519819cb3e157cbc25883dfc75b67b0578ef7233e3a16de3fb32e9980888e41425a4c293b79b3ebc793c7e196644a16b89790da06567008088af490da9622570ae37499ec8ae27fac1f923b08987660a425b03919e2501e4bb00f18704", 0xa4}, {&(0x7f00000011c0)="e5b8b35687996bb9a48b8326e1e7cb9ac5f1b405d3bac134d4e90d92f43dfa23fa4f366233e1627c0d65616343108e6572af63a9f6c2dfe70836a00d8cf1383c6ea1ddd4d239904931289c31b49ed90b6a36559fb810191e436d7a8abc4b31ca70e234bab7daf1b5", 0x68}], 0x2, &(0x7f00000016c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r0]}], 0xc8, 0x40000}, {&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001840)="6b756ec880df4520659ad37f8dfaa4d537c3eb326eab6e474002ddb12d58122ae77acac3ba717fc3e0a5ed64c0ef1ab1bb5732b72603f0a8165387190fde9c5051fb1d3558656fc00ef2979174fdb239f4f5623ad9412502cf2ac3f4566eb172c967897f1425cefcb5c8446e87d5201148587f9848952aec78d97b37eada129357f3479410d880c2fdcd4cc1fc9d5c65284760bf2d1f1667aa32669a7b397e290b0040cb271fda0d2d3930efc3db665e701a2f2de79528181ff415c1202e31254e8308a40481c42dddd6a78b406c6dedb4b45eb6d1d1eb73b76e", 0xda}, {&(0x7f0000001940)="a751d4075e66037f81efeecc57c2edf7539f1f884ec93ddad40a98ade4ee5c3d5aa1aeb58af51612bc18", 0x2a}, {&(0x7f0000001980)="76422a2a77d50e4f16dbab7c112fb86d23b794b39f6768ef5e2aeee8e7ec61a6477f1cb6d11fca4de2ca444320c8d18a0813d56e26634f840659b2e7fd1358a0dbed2452399fe2f0211f", 0x4a}], 0x3, &(0x7f0000001f00)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x88, 0x800}, {&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="8414e846cf4ce73fe462a9517b178524ad2f9abcc8715bca83d43143b7fa2a9270358091484312d9617f69d180cf2d0372acc472baef9414bf5daa1e77d8227987f78e2a806e00fb144351372d98db30ed5f", 0x52}, {&(0x7f00000020c0)="1d67491ba87906fd86330e9cd2a48bc4f257119f6928904f5382f6234c683de4f62f81b8a41112101c6b587344e8da9ee9", 0x31}], 0x2, 0x0, 0x0, 0x4000040}, {&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000021c0)="99a29f2fee287badfd7962c50dab06623fe7a14647e04160ddbc33adf0807c0fc62eac33e0afa63360e505fe11dfd6d6f9e839aedb725a820f8cecd91e14671c3383afa4332f9c355a322d6117dd5d5428ae5758393b5243257fb867421ddc580b37da4506f498c03db60c7891cf5a6c3c2b418ea9775b7c56a8cdaa3db2af6b4e1874eb4cf59059eae788c275b53bccbff079", 0x93}, {&(0x7f0000002280)="764cb9671d20069aaf58945c368c748cdcf25a4f17ac33b4726c3ea60a47c70b00322e01322dd9ebeadd789905c9e5a1be4e020208da0189c7c931a5d70815fa39a70b46e146def72c1688a3f2a27f7216a617b901c82f9d926d4f6abd1a0efe3affed5b02a7881c4a62efb7ec5c3bf42c", 0x71}, {&(0x7f0000002300)="108fec391fd3284c420698de87a69ce5614f27b4f2857ff5b8c11094c30c", 0x1e}, {&(0x7f0000002340)="fb7e7a8890e435550f8264b500e548e21957b1bac4fa4b21d891cc93799c23f24e22311f0e168e391534aebe6a29d800d68ac9f0ece3440ebed0d55d9df70e8f93f6ed231bea8d5b32ba822e7bd693b198c84eb864089ab6b7cbf62e82f970b8ef7ac8713468b857ae2547768062492f3b5cd5877b72a5614c1d6081d03623f473b7f01e1212c91bd1a59d81fdd5e6680d8c6806c39a39f88e5caf51cf7f16411790833d65f5fdbeb3f97f5e87c05ecc8caf32cd7ec35b37473d958b81eb1e1f42c547c8ace5b5a7654f43e4d095accec125d9bc094671e345119c28", 0xdc}], 0x4, &(0x7f0000002500)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}], 0x58, 0x4000000}], 0x4, 0x0) r22 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x80000) getdents64(r22, 0x0, 0x2d6) 05:36:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="82000000", @ANYRES64=0x0, @ANYBLOB="0004000000000000"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e208c612", @ANYRES64=r2], 0x0, 0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2102, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x3f, &(0x7f0000001000/0x3000)=nil, 0x5) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) 05:36:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1010000, 0x0, 0x0, 0x0) [ 1957.484210] binder: 20752:20754 unknown command 130 [ 1957.558406] binder: 20752:20754 ioctl c0306201 20007000 returned -22 05:36:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00f0ffff000000000000000000000000", 0x48}], 0x1) 05:36:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001140)={&(0x7f0000000040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r1, 0x7ccf75737a685c54, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000) [ 1957.647065] binder: 20752:20754 unknown command 314968290 [ 1957.701535] binder: 20752:20754 ioctl c0306201 20000200 returned -22 [ 1957.756704] binder_alloc: binder_alloc_mmap_handler: 20752 20001000-20004000 already mapped failed -16 [ 1957.836103] binder: 20752:20771 unknown command 130 [ 1957.854633] binder: BINDER_SET_CONTEXT_MGR already set [ 1957.872630] binder: 20752:20771 ioctl c0306201 20007000 returned -22 05:36:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9c7ab7a01a6be75fa1110c51d63fb3842e015d826605269e8f5b1b894a719576145a0827faf58f323ec82c8a19e8f8924e1637f9e73ad9b183ca7667f6e46546091cc3470b9f6b47e96779b8b32bb40ad6d6c1762e3816b82b784f22ed27f6e1bf51b7", @ANYRES64=r2], 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) 05:36:49 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7101, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1957.889516] binder: 20752:20758 unknown command 314968290 [ 1957.899210] binder: 20752:20758 ioctl c0306201 20000200 returned -22 [ 1957.909854] binder: 20752:20770 ioctl 40046207 0 returned -16 05:36:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x2000000, 0x0, 0x0, 0x0) 05:36:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000001140)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000001080)=""/159, &(0x7f0000000040)=0x9f) [ 1958.084014] binder: 20776:20777 ioctl c0306201 20007000 returned -14 [ 1958.094399] binder: 20776:20777 unknown command -1598588260 [ 1958.115394] binder: 20776:20777 ioctl c0306201 20000200 returned -22 [ 1958.203132] binder_alloc: binder_alloc_mmap_handler: 20776 20001000-20004000 already mapped failed -16 [ 1958.245076] binder: BINDER_SET_CONTEXT_MGR already set 05:36:49 executing program 0 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1958.270238] binder_alloc: 20776: binder_alloc_buf, no vma [ 1958.314767] binder: 20776:20777 ioctl 40046207 0 returned -16 [ 1958.321857] binder: 20776:20784 transaction failed 29189/-3, size 0-0 line 3035 [ 1958.348463] binder: 20776:20784 ioctl c0306201 20007000 returned -14 05:36:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x4000000, 0x0, 0x0, 0x0) 05:36:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xfffffffffffffebb) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000001080)=',\x00', 0x2, 0x1) getdents64(r0, 0x0, 0x9c) [ 1958.365594] binder: 20776:20792 unknown command -1598588260 [ 1958.385495] binder: 20776:20792 ioctl c0306201 20000200 returned -22 [ 1958.482697] binder: release 20776:20777 transaction 1028 out, still active [ 1958.497081] FAULT_INJECTION: forcing a failure. [ 1958.497081] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.504989] binder: undelivered TRANSACTION_COMPLETE [ 1958.544377] binder: send failed reply for transaction 1028, target dead [ 1958.576724] CPU: 1 PID: 20791 Comm: syz-executor.0 Not tainted 5.0.0+ #7 [ 1958.583596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.592951] Call Trace: [ 1958.595558] dump_stack+0x172/0x1f0 [ 1958.599204] should_fail.cold+0xa/0x1b [ 1958.603106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1958.608215] ? lock_downgrade+0x810/0x810 [ 1958.612370] ? ___might_sleep+0x163/0x280 [ 1958.616528] __should_failslab+0x121/0x190 [ 1958.620767] should_failslab+0x9/0x14 [ 1958.624592] kmem_cache_alloc+0x2b2/0x6f0 [ 1958.628741] ? __lock_acquire+0x53b/0x4700 [ 1958.632995] ? vmx_vcpu_load+0xb3e/0xed0 [ 1958.637069] mmu_topup_memory_caches+0x97/0x490 [ 1958.641740] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1958.647288] kvm_mmu_load+0x21/0x1300 [ 1958.651095] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 1958.656026] ? mark_held_locks+0x100/0x100 [ 1958.660260] ? handle_ept_misconfig+0x3e0/0x3e0 [ 1958.664931] ? debug_smp_processor_id+0x1c/0x20 [ 1958.669608] vcpu_enter_guest+0x3d72/0x6290 [ 1958.673932] ? zap_class+0x460/0x460 [ 1958.677647] ? perf_trace_lock+0xeb/0x510 [ 1958.681798] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 1958.685957] ? emulator_read_emulated+0x50/0x50 [ 1958.690631] ? lock_acquire+0x16f/0x3f0 [ 1958.694630] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1958.699658] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1958.704505] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1958.709543] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 1958.713528] ? kvm_vcpu_block+0xcd0/0xcd0 [ 1958.717679] ? debug_smp_processor_id+0x1c/0x20 [ 1958.722356] ? perf_trace_lock+0xeb/0x510 [ 1958.726510] ? mark_held_locks+0x100/0x100 [ 1958.730748] ? zap_class+0x460/0x460 [ 1958.734466] ? find_held_lock+0x35/0x130 [ 1958.738528] ? __fget+0x340/0x540 [ 1958.741981] ? find_held_lock+0x35/0x130 [ 1958.746047] ? __fget+0x340/0x540 [ 1958.749511] ? kvm_vcpu_block+0xcd0/0xcd0 [ 1958.753663] do_vfs_ioctl+0xd6e/0x1390 [ 1958.757560] ? ioctl_preallocate+0x210/0x210 [ 1958.761973] ? smack_file_ioctl+0x196/0x300 [ 1958.766299] ? smack_file_lock+0x240/0x240 [ 1958.770538] ? __fget+0x367/0x540 [ 1958.773999] ? iterate_fd+0x360/0x360 [ 1958.777837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1958.783383] ? fput+0x128/0x1a0 [ 1958.786671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1958.792214] ? security_file_ioctl+0x93/0xc0 [ 1958.796627] ksys_ioctl+0xab/0xd0 [ 1958.800089] __x64_sys_ioctl+0x73/0xb0 [ 1958.803984] do_syscall_64+0x103/0x610 [ 1958.807882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1958.813070] RIP: 0033:0x457f29 [ 1958.816261] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1958.835169] RSP: 002b:00007f8d3fd86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00009f691020000000000000"], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1958.842887] RAX: ffffffffffffffda RBX: 00007f8d3fd86c90 RCX: 0000000000457f29 [ 1958.850159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1958.857431] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1958.864703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d3fd876d4 [ 1958.871976] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 05:36:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x4ff) 05:36:50 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7200, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1958.898809] binder: undelivered TRANSACTION_ERROR: 29189 05:36:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e9effffff000000000000000000000000", 0x48}], 0x1) 05:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x5000000, 0x0, 0x0, 0x0) 05:36:50 executing program 0 (fault-call:6 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1959.101119] binder: 20806:20808 ioctl c0306201 20007000 returned -14 [ 1959.158431] binder: 20806:20808 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) write$sndseq(r0, &(0x7f0000001080)=[{0x7ff, 0x9, 0x3, 0x0, @time={0x77359400}, {0x100000000, 0x2}, {0x9, 0x9}, @time=@time={0x77359400}}, {0xf76a, 0x7, 0x80000000, 0x1, @time={0x77359400}, {0x8000, 0x9}, {0x3, 0xfffffffffffffffc}, @raw8={"da65ff26ddb3bb190fe85488"}}, {0x4, 0x100000001, 0x80000001, 0x0, @tick=0x4, {0xe80, 0x2}, {0x10001, 0x6}, @queue={0x3, {0x2, 0xffffffffffffffcb}}}, {0x101, 0xffffffffffffffc1, 0x81, 0x937, @tick=0x3, {0x1}, {0x7ff, 0x40}, @control={0x5d75, 0x3, 0x8a}}, {0x81, 0x2, 0x101, 0x65, @tick, {0x7, 0x2}, {0x1, 0x6f}, @addr={0x4, 0x111}}, {0x40f, 0x2, 0x0, 0x100000000, @tick, {0x3, 0x7}, {0x8000, 0x1}, @note={0x3, 0x5, 0x8, 0xffff}}, {0x200, 0x401, 0xdc, 0x1, @tick=0x7c, {0x480000, 0xff}, {0x4, 0x101}, @control={0xfff, 0x9, 0x4c46}}], 0x150) getdents64(r0, 0x0, 0x9c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001480)=0xe8) write$P9_RSTATu(r0, &(0x7f00000014c0)={0x7a, 0x7d, 0x2, {{0x0, 0x5b, 0x7, 0x6c4, {0x40, 0x4}, 0x1000000, 0x0, 0x4, 0x7f, 0xa, 'map_files\x00', 0xa, 'map_files\x00', 0xa, 'map_files\x00', 0xa, 'map_files\x00'}, 0xa, 'map_files\x00', r1, r2, r3}}, 0x7a) [ 1959.205793] binder_alloc: binder_alloc_mmap_handler: 20806 20001000-20004000 already mapped failed -16 [ 1959.278678] binder: BINDER_SET_CONTEXT_MGR already set [ 1959.302604] binder_alloc: 20806: binder_alloc_buf, no vma [ 1959.338417] binder: 20806:20812 ioctl 40046207 0 returned -16 [ 1959.395214] binder: release 20806:20808 transaction 1031 out, still active [ 1959.407042] binder: 20806:20823 transaction failed 29189/-3, size 0-0 line 3035 [ 1959.431746] binder: undelivered TRANSACTION_COMPLETE 05:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x6000000, 0x0, 0x0, 0x0) [ 1959.462912] binder: send failed reply for transaction 1031, target dead [ 1959.465540] binder: 20806:20823 ioctl c0306201 20007000 returned -14 05:36:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:50 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7201, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vga_arbiter\x00', 0x400002, 0x0) 05:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x80000) write$input_event(r3, &(0x7f0000000080)={{0x0, 0x7530}, 0x12, 0x8001, 0x10000}, 0x18) [ 1959.690310] binder: undelivered TRANSACTION_ERROR: 29189 05:36:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 1959.829870] binder: 20842:20845 got transaction to context manager from process owning it 05:36:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000001080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 1959.899682] binder: 20842:20845 transaction failed 29201/-22, size 0-0 line 2887 [ 1959.922478] binder: 20842:20845 ioctl c0306201 20007000 returned -14 [ 1959.934482] binder_thread_write: 1 callbacks suppressed [ 1959.934493] binder: 20842:20848 BC_FREE_BUFFER u0000000020001000 no match 05:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7000000, 0x0, 0x0, 0x0) 05:36:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4ef0ffffff000000000000000000000000", 0x48}], 0x1) [ 1960.028605] binder_alloc: binder_alloc_mmap_handler: 20842 20001000-20004000 already mapped failed -16 [ 1960.107917] binder: BINDER_SET_CONTEXT_MGR already set [ 1960.138127] binder_alloc: 20842: binder_alloc_buf, no vma [ 1960.168359] binder: 20842:20845 ioctl 40046207 0 returned -16 [ 1960.185038] binder: 20842:20851 transaction failed 29189/-3, size 0-0 line 3035 [ 1960.229170] binder: undelivered TRANSACTION_ERROR: 29201 [ 1960.255038] binder: 20842:20851 ioctl c0306201 20007000 returned -14 05:36:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000001080)=0x4) 05:36:51 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7300, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1960.296571] binder: undelivered TRANSACTION_ERROR: 29189 05:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000005e6fe72ab335fb71880f550da8d5b7f6de9ba66b868bcbb1fcdc387d7498498827082a", @ANYRES64=r2], 0x0, 0x0, 0x0}) 05:36:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 05:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7000080, 0x0, 0x0, 0x0) [ 1960.639308] binder: 20874:20879 unknown command 0 [ 1960.676563] binder: 20874:20879 ioctl c0306201 20000200 returned -22 [ 1960.723943] binder_alloc: binder_alloc_mmap_handler: 20874 20001000-20004000 already mapped failed -16 [ 1960.802366] binder: BINDER_SET_CONTEXT_MGR already set 05:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x8000080, 0x0, 0x0, 0x0) 05:36:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) sendto$unix(r0, &(0x7f0000001080)="e1956d492031978ef9550f0c835adee85d05d8197a89fe807c9becac5832f904bd986fbb82988cf45b5e05ce9d262b8d44083900957a5a26d14940d10e620c27131d9c319994fd789a703074f6a7dc4e6cc8c3fedbf8497498b387753bc23792dd77bdffeba7e04b844368accb2d181c9bf15091e11907ae658ad768c3bb61f70e8f2fbf2d7e2162b40eb12486eaa50b43bbb94b026cdaff115a55c6ef95fc6e44c056ac639648f1989f1ed49cb8b7d12093721eeea37054b3", 0xb9, 0x40, &(0x7f0000001140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x83da457f4ad39d97) alarm(0x3ff) setsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f00000011c0)="fc0ac7582aec442ceb6eea3f9bec0e78ef3409b321cb18801ed4f028a13f2d48edc8118260c319afd299267e03565fa5f0732402426602dd9042867a919aa4218a11ce956f6e2c2e38931f2f7966b276e068ab3669006a696383d902b556e83089a0c92eb93e42bd786d72378908c07bda3eaed8063707722eed0dace131173c33e056e0ea57eadd81", 0x89) [ 1960.855397] binder: 20874:20879 ioctl 40046207 0 returned -16 [ 1960.893223] binder: 20874:20884 unknown command 0 05:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) [ 1960.910765] binder: 20874:20884 ioctl c0306201 20000200 returned -22 05:36:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4efeffffff000000000000000000000000", 0x48}], 0x1) 05:36:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="cb53dccb400000000000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='m\xddX\xecv\xef\xcaX>\x03\x06\xd0\x8b\x12\xcf_a\x01*\xfb\xf5\x12F\xa3\xc0') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001140)=""/177) getdents64(r0, 0x0, 0xffffffffffffff2f) 05:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x9000000, 0x0, 0x0, 0x0) 05:36:52 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7301, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1961.285750] binder: 20908:20912 unknown command -874753077 [ 1961.311697] binder: 20908:20912 ioctl c0306201 20007000 returned -22 [ 1961.352483] binder: 20908:20912 BC_FREE_BUFFER u0000000020001000 no match 05:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 05:36:52 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000580)) getpgrp(0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000005c0)='mountinfo\x00') getdents64(r1, &(0x7f00000010c0)=""/4096, 0xffffffffffffffac) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) getdents64(r1, 0x0, 0x9c) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000300)=""/137) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4869}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x483ae8d0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xd4}}, 0x4000) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x3, &(0x7f00000003c0)=@raw=[@ldst={0x2, 0x0, 0x2, 0xd, 0xb, 0xed388ee47e2b4a5d, 0x8}, @ldst={0x3, 0x3, 0x0, 0x0, 0x7, 0x18, 0xfffffffffffffff0}, @ldst={0x3, 0x2, 0x3, 0x7, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x100, 0xa1, &(0x7f0000000440)=""/161, 0x40f00, 0x1, [], 0x0, 0xd}, 0x48) io_setup(0x0, &(0x7f00000002c0)=0x0) io_destroy(r3) memfd_create(&(0x7f0000001080)='smaps_rollup\x00', 0x0) [ 1961.402292] binder_alloc: binder_alloc_mmap_handler: 20908 20001000-20004000 already mapped failed -16 [ 1961.434133] binder: BINDER_SET_CONTEXT_MGR already set [ 1961.472373] binder: 20908:20915 unknown command -874753077 [ 1961.526708] binder: 20908:20912 ioctl 40046207 0 returned -16 [ 1961.562860] binder: 20908:20924 BC_FREE_BUFFER u0000000020001000 no match [ 1961.601413] binder: 20908:20915 ioctl c0306201 20007000 returned -22 05:36:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x193001, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000001c0), 0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000140)={0x3, 0x9e, 0x81}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:36:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000001080)=""/24) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) 05:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa000000, 0x0, 0x0, 0x0) [ 1961.886984] binder: 20938:20940 ioctl c0306201 20007000 returned -14 05:36:53 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7400, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 1961.945264] binder: 20938:20940 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000340000000000000000000", 0x48}], 0x1) 05:36:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) acct(&(0x7f0000000040)='./file0\x00') ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001080)={0x3, 0x6, 0x4, 0x0, {0x0, 0x7530}, {0x1, 0x0, 0x0, 0x3, 0x3, 0x7fff, "01e3b477"}, 0x2, 0x1, @fd=r0, 0x4}) [ 1962.028265] binder_alloc: binder_alloc_mmap_handler: 20938 20001000-20004000 already mapped failed -16 [ 1962.112526] binder_alloc: 20938: binder_alloc_buf, no vma [ 1962.140283] binder: BINDER_SET_CONTEXT_MGR already set 05:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xb000000, 0x0, 0x0, 0x0) [ 1962.191772] binder: 20938:20954 ioctl 40046207 0 returned -16 [ 1962.229666] binder: 20938:20955 transaction failed 29189/-3, size 0-0 line 3035 05:36:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) [ 1962.261316] binder: 20938:20943 BC_FREE_BUFFER u0000000020001000 no match [ 1962.299192] binder: release 20938:20940 transaction 1039 out, still active [ 1962.311180] binder: 20938:20955 ioctl c0306201 20007000 returned -14 [ 1962.318865] binder: undelivered TRANSACTION_COMPLETE [ 1962.335058] binder: send failed reply for transaction 1039, target dead 05:36:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0xd0000006}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xa32e, 0x101}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1962.435922] binder: undelivered TRANSACTION_ERROR: 29189 05:36:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') getdents64(r0, &(0x7f0000006080)=""/4096, 0xfffffd68) getdents64(r0, 0x0, 0x9c) [ 1962.565486] binder: 20973:20975 ioctl c0306201 20007000 returned -14 [ 1962.631723] binder: 20973:20975 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:54 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7401, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xd000000, 0x0, 0x0, 0x0) [ 1962.716995] binder_alloc: binder_alloc_mmap_handler: 20973 20001000-20004000 already mapped failed -16 05:36:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001280)={@loopback, 0x0}, &(0x7f00000012c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001300)={@dev={0xfe, 0x80, [], 0x1e}, @remote, @local, 0x800, 0xda, 0x9, 0x100, 0x2, 0x0, r1}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100)='SEG6\x00') r3 = semget$private(0x0, 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001400)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) fstat(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001840)=0xe8) stat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000017c0)={{0x4, r4, r5, r6, r7, 0x100, 0x807}, 0x5, 0x10001, 0x3ff}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40402010}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="719549ab3a087fa6df250403379441a1b345cfc24c1c2d13c592000100000008000600080000008f000200ff0000000800030007000000040004000800020027050000"], 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x4000001) fsetxattr(r0, &(0x7f0000001080)=@random={'osx.', 'em0em1$vboxnet1][/em1security\\\x00'}, &(0x7f00000010c0)='\x00', 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001380)={0x7, 0x3, {0xffffffffffffffff, 0x2, 0xb5a, 0x0, 0x6}}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000001240)={@bcast, @null}) msgget(0x0, 0x40) getuid() [ 1962.760723] binder: BINDER_SET_CONTEXT_MGR already set [ 1962.780462] binder: 20973:20975 ioctl 40046207 0 returned -16 [ 1962.799934] binder: release 20973:20975 transaction 1042 out, still active [ 1962.807969] binder_alloc: 20973: binder_alloc_buf, no vma [ 1962.818610] binder: undelivered TRANSACTION_COMPLETE [ 1962.849841] binder: 20973:20980 transaction failed 29189/-3, size 0-0 line 3035 [ 1962.863744] binder: send failed reply for transaction 1042, target dead [ 1962.896859] binder: 20973:20980 ioctl c0306201 20007000 returned -14 05:36:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 05:36:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x404000, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000140)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r4, 0xf, 0x1}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1963.027316] binder: undelivered TRANSACTION_ERROR: 29189 05:36:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4efffffffffffff0000000000000000000", 0x48}], 0x1) 05:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "6e7485395f02abdf0aa87070e4cda264"}, 0x11, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r2 = accept4$unix(r1, &(0x7f0000001080)=@abs, &(0x7f0000000000)=0x6e, 0x80000) getdents64(r1, &(0x7f0000003140)=""/4096, 0xffffffffffffffa7) getdents64(r1, 0x0, 0x9c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, r2, 0x0) syz_open_dev$swradio(&(0x7f0000001100)='/dev/swradio#\x00', 0x0, 0x2) [ 1963.167798] binder: 21000:21004 ioctl c0306201 20007000 returned -14 [ 1963.231618] binder: 21000:21004 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x14000000, 0x0, 0x0, 0x0) 05:36:54 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7500, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 1963.326992] binder_alloc: binder_alloc_mmap_handler: 21000 20001000-20004000 already mapped failed -16 [ 1963.344426] binder: BINDER_SET_CONTEXT_MGR already set [ 1963.358891] binder_alloc: 21000: binder_alloc_buf, no vma [ 1963.370478] binder: 21000:21004 ioctl 40046207 0 returned -16 05:36:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x410000, 0x10) getdents64(r0, 0x0, 0x9c) [ 1963.381045] binder: 21000:21006 transaction failed 29189/-3, size 0-0 line 3035 [ 1963.396019] binder: 21000:21015 BC_FREE_BUFFER u0000000020001000 no match [ 1963.406948] binder: 21000:21006 ioctl c0306201 20007000 returned -14 [ 1963.414336] binder: release 21000:21004 transaction 1045 out, still active [ 1963.435062] binder: undelivered TRANSACTION_COMPLETE [ 1963.486481] binder: send failed reply for transaction 1045, target dead 05:36:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x10000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x6d12, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000080)=0x4, 0x4) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'bond_slave_0\x00', {0x2, 0x4e20, @multicast1}}) r5 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00002056044e0000a6a115fe9b47217d902d76f33cef61db1bb7b9971d7790969eaefe5b1d271a4d1263cca66a87d36f001882cbf14f070000639ec9b1c912432d700200000000000a001ae9225008182eef77090a1fc49cf877b5e91febb9b774b0148003b2fbdb142c6c43f2fa5de58796bd239f728fffa2b56ff42284de39ba6b97952df1e3c158c92b1ea3ece501474b0000000000000000", @ANYRES64=r5], 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000300)) syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x1, 0x2) [ 1963.542926] binder: undelivered TRANSACTION_ERROR: 29189 05:36:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0xfffffffffffffd54) 05:36:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 1963.711865] binder: 21032:21034 ioctl c0306201 20007000 returned -14 [ 1963.801358] binder: 21032:21037 unknown command 1444937728 05:36:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x19000080, 0x0, 0x0, 0x0) [ 1963.863019] binder: 21032:21037 ioctl c0306201 20000200 returned -22 05:36:55 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7501, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1963.991575] binder_alloc: binder_alloc_mmap_handler: 21032 20001000-20004000 already mapped failed -16 05:36:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 1964.052394] binder: BINDER_SET_CONTEXT_MGR already set [ 1964.071213] binder: 21032:21037 ioctl 40046207 0 returned -16 05:36:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 05:36:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000010000000000000000", 0x48}], 0x1) [ 1964.136752] binder_alloc: 21032: binder_alloc_buf, no vma [ 1964.170510] binder: 21032:21037 unknown command 1444937728 [ 1964.266599] binder: 21032:21046 transaction failed 29189/-3, size 0-0 line 3035 [ 1964.272531] binder: release 21032:21034 transaction 1048 out, still active [ 1964.274110] binder: 21032:21046 ioctl c0306201 20007000 returned -14 [ 1964.340114] binder: undelivered TRANSACTION_COMPLETE [ 1964.364280] binder: send failed reply for transaction 1048, target dead [ 1964.375769] binder: 21032:21037 ioctl c0306201 20000200 returned -22 05:36:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, &(0x7f0000001080)=""/205, 0xcd) getdents64(r0, 0x0, 0x4fd) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 05:36:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1a000080, 0x0, 0x0, 0x0) 05:36:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 05:36:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r2], 0x0, 0x0, 0x0}) [ 1964.549025] binder: undelivered TRANSACTION_ERROR: 29189 05:36:56 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7600, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1964.648841] binder: 21075:21078 ioctl c0306201 20007000 returned -14 [ 1964.711383] binder: 21075:21078 unknown command 0 [ 1964.718637] binder: 21075:21078 ioctl c0306201 20000200 returned -22 [ 1964.734213] binder_alloc: binder_alloc_mmap_handler: 21075 20001000-20004000 already mapped failed -16 05:36:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1d000080, 0x0, 0x0, 0x0) 05:36:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xffffff2b) getdents64(r0, 0x0, 0x9c) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001080)={0x0, 0x0, 0x4, 0x0, [], [{0x470a7755, 0x5, 0x4, 0x2, 0x8, 0x7}, {0x1, 0x0, 0x5, 0x7, 0x3c4d, 0x9}], [[], [], [], []]}) 05:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) [ 1964.835796] binder_alloc: 21075: binder_alloc_buf, no vma [ 1964.850816] binder: BINDER_SET_CONTEXT_MGR already set [ 1964.880987] binder: 21075:21083 unknown command 0 [ 1964.918850] binder: 21075:21083 ioctl c0306201 20000200 returned -22 [ 1964.960829] binder: 21075:21087 transaction failed 29189/-3, size 0-0 line 3035 [ 1965.000253] binder: release 21075:21078 transaction 1051 out, still active [ 1965.000286] binder: 21075:21086 ioctl 40046207 0 returned -16 [ 1965.014762] binder: undelivered TRANSACTION_COMPLETE [ 1965.025178] binder: 21075:21087 ioctl c0306201 20007000 returned -14 05:36:56 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000040)='ns\x00', 0x7) fcntl$getown(r0, 0x9) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='ns\x00') getdents64(r2, &(0x7f0000001080)=""/4096, 0xfffb) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x8e1, 0x2, 0x1000, 0xac1f}, 'syz0\x00', 0x38}) getdents64(r2, 0x0, 0x9c) [ 1965.058639] binder: send failed reply for transaction 1051, target dead 05:36:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) r3 = socket(0x5, 0x5, 0x3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000180), 0x4) 05:36:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x20000000, 0x0, 0x0, 0x0) [ 1965.163115] binder: undelivered TRANSACTION_ERROR: 29189 05:36:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000020000000000000000", 0x48}], 0x1) 05:36:56 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7601, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_open_dev$amidi(&(0x7f0000001080)='/dev/amidi#\x00', 0x8, 0x1) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1965.308789] binder: 21111:21112 ioctl c0306201 20007000 returned -14 [ 1965.345980] binder: 21111:21112 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 1965.520439] binder_alloc: binder_alloc_mmap_handler: 21111 20001000-20004000 already mapped failed -16 [ 1965.554450] binder: BINDER_SET_CONTEXT_MGR already set [ 1965.573937] binder: 21111:21112 ioctl 40046207 0 returned -16 [ 1965.586360] binder_alloc: 21111: binder_alloc_buf, no vma [ 1965.607944] binder: 21111:21132 BC_FREE_BUFFER u0000000020001000 no match 05:36:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ma\x83j\x00\x00les\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1965.627606] binder: 21111:21119 transaction failed 29189/-3, size 0-0 line 3035 [ 1965.650740] binder: release 21111:21112 transaction 1054 out, still active [ 1965.661824] binder: undelivered TRANSACTION_COMPLETE 05:36:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x3f000000, 0x0, 0x0, 0x0) [ 1965.682786] binder: send failed reply for transaction 1054, target dead [ 1965.695466] binder: 21111:21119 ioctl c0306201 20007000 returned -14 05:36:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/117, 0x75) r3 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x3ff, 0x80100) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1965.800146] binder: undelivered TRANSACTION_ERROR: 29189 05:36:57 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7700, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 05:36:57 executing program 5: syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1965.957446] binder: 21143:21146 ioctl c0306201 20007000 returned -14 [ 1965.968575] binder: 21143:21146 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1965.989003] binder_alloc: binder_alloc_mmap_handler: 21143 20001000-20004000 already mapped failed -16 05:36:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x40000000, 0x0, 0x0, 0x0) [ 1966.010012] binder: BINDER_SET_CONTEXT_MGR already set [ 1966.017604] binder: 21143:21146 ioctl 40046207 0 returned -16 [ 1966.026826] binder_alloc: 21143: binder_alloc_buf, no vma [ 1966.035572] binder: 21143:21147 transaction failed 29189/-3, size 0-0 line 3035 [ 1966.050241] binder: 21143:21147 ioctl c0306201 20007000 returned -14 [ 1966.102558] binder: release 21143:21146 transaction 1057 out, still active [ 1966.113453] binder: 21143:21146 BC_FREE_BUFFER u0000000020001000 no match [ 1966.132753] binder: undelivered TRANSACTION_COMPLETE [ 1966.176542] binder: send failed reply for transaction 1057, target dead 05:36:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) [ 1966.395311] binder: undelivered TRANSACTION_ERROR: 29189 05:36:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000040000000000000000", 0x48}], 0x1) 05:36:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x1000000000400000, 0x0) bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x3}, 0x10) getsockname(r2, &(0x7f0000000500)=@in={0x2, 0x0, @remote}, &(0x7f0000000040)=0x80) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000300)={0xfffffffffffffffd, 0x0, {0x200, 0x4000000000000163, 0x100000000, 0x200000002}}) mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000007, 0x10, r0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xfffffffffffffc60, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@fda={0x66646185, 0x0, 0x4, 0x37}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f00000003c0)=[0x28, 0x38, 0x48, 0x48, 0x0, 0x78, 0x48]}, 0xdcf5}}, @decrefs={0x40046307, 0x3}, @acquire_done={0x40106309, r4, 0x3}, @increfs_done={0x40106308, r4, 0x4}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) fcntl$setlease(r3, 0x400, 0x3) r5 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000df00050045540900eb72122c4b3389ee91b98e6d0bc4d6d841a80000000000000000000000000000000000000000000000000000000000", @ANYRES64=r5], 0x0, 0x0, 0x0}) r6 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast1}, 0x400}, @in6={0xa, 0x4e24, 0xfffffffffffffffb, @rand_addr="1acf35d2e615e58fb81fd2a5cf06902e", 0x80}, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @remote}, 0x2}, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x3233}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x7, @local}, @in6={0xa, 0x4e23, 0x40, @rand_addr="99e5dc75bc536f6a874fe52db7030ba3", 0xb16}], 0xd8) ioctl$KDMKTONE(r6, 0x4b30, 0xfffffffffffffff7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x103000, 0x0) 05:36:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x40000001, 0x0, 0x0, 0x0) 05:36:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) [ 1966.572859] binder: 21171:21173 unknown command 14614528 05:36:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000011c0)) read(r0, &(0x7f0000001080)=""/231, 0xe7) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1966.625155] binder: 21171:21173 ioctl c0306201 20000200 returned -22 05:36:58 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7701, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1966.697716] binder: BINDER_SET_CONTEXT_MGR already set [ 1966.717112] binder: 21171:21176 ioctl 40046207 0 returned -16 [ 1966.737314] binder: 21171:21173 unknown command 14614528 [ 1966.768675] binder: 21171:21173 ioctl c0306201 20000200 returned -22 05:36:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001080)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x1d, r1}, 0x10, &(0x7f0000001280)={&(0x7f0000001200)={0x5, 0x4, 0x2, {0x0, 0x7530}, {r2, r3/1000+10000}, {0x3, 0x5, 0x80, 0xa9b}, 0x1, @can={{0x1, 0x9, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "ddbaa08f8fc12e47"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0xc841) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:36:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0x5, 0x3ff}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:36:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x50000000, 0x0, 0x0, 0x0) 05:36:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 1967.089988] binder: 21198:21201 ioctl c0306201 20007000 returned -14 [ 1967.185596] binder: 21198:21201 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1967.248954] binder_alloc: binder_alloc_mmap_handler: 21198 20001000-20004000 already mapped failed -16 [ 1967.303401] binder: BINDER_SET_CONTEXT_MGR already set 05:36:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mip_files\x00') getdents64(r0, 0x0, 0xffffffffffffffc7) [ 1967.345861] binder: 21198:21201 ioctl 40046207 0 returned -16 05:36:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80000007, 0x0, 0x0, 0x0) [ 1967.415538] binder_alloc: 21198: binder_alloc_buf, no vma 05:36:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000080000000000000000", 0x48}], 0x1) 05:36:58 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7800, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:36:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 1967.461610] binder: 21198:21214 transaction failed 29189/-3, size 0-0 line 3035 [ 1967.464177] binder: 21198:21215 BC_FREE_BUFFER u0000000020001000 no match [ 1967.533700] binder: release 21198:21201 transaction 1061 out, still active [ 1967.543270] binder: 21198:21214 ioctl c0306201 20007000 returned -14 [ 1967.557021] binder: undelivered TRANSACTION_COMPLETE [ 1967.562248] binder: send failed reply for transaction 1061, target dead 05:36:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0xf980004, 0x100000000, 0x8, [], &(0x7f0000000180)={0x9d0902, 0x6, [], @ptr=0x63f}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) r4 = msgget(0x2, 0xfffffffffbfffffd) msgsnd(r4, &(0x7f0000000240)={0x3, "e0fabc7a1146a28e5f0ae44823adea9b6c0496b03807435ba268c7282d117798800751632fa16a573225c13bf9a2449541d4db208bb60bbcb9290004e1b87d5774c64789099f757ef7a253898fc0fa29d6320c5df0b58f49fa124b55081142609ba8341f47d90ab7753d7a5a77aa5989c3fd9471c381d07b67476e8f81bdd8793ab00c6e2db899074078e74b2c13a9d8324f1665345e45aaff8918806b732198347420e3beda652a48062f69ce899482dc51852aaed2a4b595d817c8dbebb3cd76b590383eced23850ef34d20a461f5dd4fc5471a9ce9ddd3cac"}, 0xe2, 0x800) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1967.658627] binder: undelivered TRANSACTION_ERROR: 29189 05:36:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000001080)="aa19fe1d39569be41a8673eb64c118c6947babc0cd948dfaa01dcb9f13d5bf5bafd054910a9cbfdabd3157ef26a5ff80115f03071ef8f4eb6c2f03bdffd566fd19526eeb4abb3b02ee6f64de9322695ec4d26c53ee3ec48a3490c5eeabc00f2837c0e3fca631f9d5b654ba2c69cf601fa285d764e122bc1313cae0f592a518e393e09231885c95cd539acd9e2265fee903b191b98fe57ff59ab6692d0d3a5ee682b4fce6cbf1afc0cd318b47726f741494b75f6246c703880ab088de2f29dd14c62a078f", 0xc4, 0x4, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0xec62f9be542c311f) [ 1967.815650] binder: 21231:21236 ioctl c0306201 20007000 returned -14 05:36:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80000008, 0x0, 0x0, 0x0) [ 1967.886721] binder: 21231:21236 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 1967.963499] binder_alloc: binder_alloc_mmap_handler: 21231 20001000-20004000 already mapped failed -16 05:36:59 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7801, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1968.008780] binder: BINDER_SET_CONTEXT_MGR already set [ 1968.030752] binder: 21231:21236 ioctl 40046207 0 returned -16 05:36:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r1 = semget$private(0x0, 0x3, 0x81) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f0000001080)=""/248) [ 1968.074355] binder_alloc: 21231: binder_alloc_buf, no vma [ 1968.106012] binder: 21231:21244 transaction failed 29189/-3, size 0-0 line 3035 [ 1968.154519] binder: 21231:21244 ioctl c0306201 20007000 returned -14 [ 1968.202534] binder: 21231:21239 BC_FREE_BUFFER u0000000020001000 no match [ 1968.247515] binder: release 21231:21236 transaction 1064 out, still active [ 1968.268404] binder: undelivered TRANSACTION_COMPLETE [ 1968.307989] binder: send failed reply for transaction 1064, target dead 05:36:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80000019, 0x0, 0x0, 0x0) 05:36:59 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001180)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000011c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000001140)='net/udp6\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0x7f, 0x1, 0xff, 0x4, 0x10000, 0xffffffff}, 0x20) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0xf, 0x103, 0x0, {0x9, 0x8, 0x7, 0x4}}) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0xfffffd4b) 05:36:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x81, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000080), 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) ioctl$void(r3, 0x5451) r4 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000140)) [ 1968.419799] binder: undelivered TRANSACTION_ERROR: 29189 05:36:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000000000000000a0000000000000000", 0x48}], 0x1) 05:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 05:36:59 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7900, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1968.618518] binder: 21265:21267 got transaction to invalid handle [ 1968.669084] binder: 21265:21267 transaction failed 29201/-22, size -4138943663590296245-5255853744999479597 line 2896 05:37:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) fcntl$getown(r0, 0x9) getdents64(r0, 0x0, 0x9c) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000001080)='./file0\x00') [ 1968.732086] binder: 21265:21271 BC_FREE_BUFFER u0000000020001000 no match [ 1968.754503] binder: 21265:21267 ioctl c0306201 20007000 returned -14 [ 1968.801087] binder_alloc: binder_alloc_mmap_handler: 21265 20001000-20004000 already mapped failed -16 05:37:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) [ 1968.898603] binder: BINDER_SET_CONTEXT_MGR already set [ 1968.939809] binder: 21265:21276 got transaction to invalid handle [ 1968.985159] binder: 21265:21267 ioctl 40046207 0 returned -16 [ 1969.014472] binder: 21265:21276 transaction failed 29201/-22, size -4138943663590296245-5255853744999479597 line 2896 05:37:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1969.062390] binder: 21265:21271 BC_FREE_BUFFER u0000000020001000 no match 05:37:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001080)={{0x3, 0x1, 0x3, 0x0, 0x9}, 0x7f, 0xfff}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001180)=@known='trusted.overlay.upper\x00', &(0x7f00000011c0)=""/23, 0x17) read$alg(r0, &(0x7f0000001100)=""/80, 0x50) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) socket$kcm(0x29, 0x7, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getdents64(r0, 0x0, 0x9c) [ 1969.150142] binder: undelivered TRANSACTION_ERROR: 29201 [ 1969.157882] binder: 21265:21276 ioctl c0306201 20007000 returned -14 05:37:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x8000001d, 0x0, 0x0, 0x0) 05:37:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "4eb7805ea219491f0639e795d272a5e16431f0c9d2f4e7ec83c963d268dde25dd13c627e731b2f8ea9ed13fbb6762f9378af4b1315a060103fc68fa69faa3f51834cf3c09dbb1ba3713b0e655d668e7af8bd2f9592c3f87b6eb64f2ddac169d4c9a617b9ba7c0b9ab6d8840f139b6014790bf6d5f118f4c428faa4f2936b9f23f962d42e38a18ed5e32f7f1570da02ad390db880c93881ccb62e2eb4d99eb31ef7da6ec42ed0152d1f59cc76b72ae9dec8d13098"}, 0xb8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1969.327855] binder: undelivered TRANSACTION_ERROR: 29201 05:37:00 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7901, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) [ 1969.469865] binder: 21308:21311 ioctl c0306201 20007000 returned -14 [ 1969.506410] binder: 21308:21311 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:37:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) listen(r0, 0x8) [ 1969.570563] binder: BINDER_SET_CONTEXT_MGR already set 05:37:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000000000000000e0000000000000000", 0x48}], 0x1) [ 1969.592176] binder: 21308:21314 ioctl 40046207 0 returned -16 [ 1969.602865] binder_alloc: 21308: binder_alloc_buf, no vma [ 1969.618052] binder: 21308:21311 transaction failed 29189/-3, size 0-0 line 3035 [ 1969.718959] binder: release 21308:21311 transaction 1070 out, still active [ 1969.729254] binder: 21308:21311 ioctl c0306201 20007000 returned -14 [ 1969.754099] binder: undelivered TRANSACTION_COMPLETE 05:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xc0000000, 0x0, 0x0, 0x0) [ 1969.779245] binder: undelivered TRANSACTION_ERROR: 29189 [ 1969.806151] binder: send failed reply for transaction 1070, target dead 05:37:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', '^}$\x00'}, &(0x7f0000000100)=""/116, 0x74) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffff, 0x101000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000180)) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03670840", @ANYRES64=r3], 0x0, 0x0, 0x0}) 05:37:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000001080)=@v1={0x2, "ef10dadf4ae87778f7ee50219f2b11"}, 0x10, 0x1) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) 05:37:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) [ 1969.968216] binder: 21330:21333 got transaction to context manager from process owning it [ 1970.115413] binder: 21330:21333 transaction failed 29201/-22, size 0-0 line 2887 [ 1970.147957] binder: 21330:21333 ioctl c0306201 20007000 returned -14 05:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xc0000001, 0x0, 0x0, 0x0) [ 1970.181252] binder: 21330:21338 unknown command 1074292483 05:37:01 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7a00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1970.257958] binder: 21330:21338 ioctl c0306201 20000200 returned -22 [ 1970.277067] binder_alloc: binder_alloc_mmap_handler: 21330 20001000-20004000 already mapped failed -16 [ 1970.312293] binder: BINDER_SET_CONTEXT_MGR already set [ 1970.349306] binder: 21330:21338 ioctl 40046207 0 returned -16 05:37:01 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001080)='/(\x00'}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000001100)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getpeername(r1, &(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000040)=0x80) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000001140)={0x1, 0x0, {0x788, 0x4, 0x2011, 0x7, 0xf, 0x3, 0x2, 0x4}}) getdents64(r1, 0x0, 0x9c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) [ 1970.391547] binder_alloc: 21330: binder_alloc_buf, no vma [ 1970.427408] binder: 21330:21333 transaction failed 29189/-3, size 0-0 line 3035 05:37:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) [ 1970.475418] binder: 21330:21333 ioctl c0306201 20007000 returned -14 [ 1970.487176] binder: 21330:21338 unknown command 1074292483 [ 1970.547216] binder: undelivered TRANSACTION_ERROR: 29201 [ 1970.561414] binder: 21330:21338 ioctl c0306201 20000200 returned -22 [ 1970.571984] binder: undelivered TRANSACTION_ERROR: 29189 05:37:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000000000000000f0000000000000000", 0x48}], 0x1) 05:37:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10001e, r0, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:37:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xebffffff, 0x0, 0x0, 0x0) 05:37:02 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7a01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:02 executing program 5: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000fe8)) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r1) getsockopt$inet6_tcp_int(r5, 0x6, 0xa, 0x0, &(0x7f0000012ffc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) 05:37:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) [ 1970.913880] binder: 21371:21374 ioctl c0306201 20007000 returned -14 [ 1970.978007] binder: 21371:21382 BC_FREE_BUFFER u0000000000000000 no match [ 1971.056300] binder_alloc: binder_alloc_mmap_handler: 21371 20001000-20004000 already mapped failed -16 [ 1971.131704] binder_alloc: 21371: binder_alloc_buf, no vma [ 1971.132194] binder: BINDER_SET_CONTEXT_MGR already set 05:37:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000001080)=0x8) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x9c) [ 1971.184654] binder: 21371:21382 transaction failed 29189/-3, size 0-0 line 3035 [ 1971.240243] binder: 21371:21391 BC_FREE_BUFFER u0000000000000000 no match [ 1971.248957] binder: 21371:21382 ioctl c0306201 20007000 returned -14 05:37:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfcfdffff, 0x0, 0x0, 0x0) [ 1971.303974] binder: 21371:21390 ioctl 40046207 0 returned -16 [ 1971.338753] binder: release 21371:21374 transaction 1076 out, still active [ 1971.370873] binder: undelivered TRANSACTION_COMPLETE [ 1971.408493] binder: undelivered TRANSACTION_ERROR: 29189 05:37:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484044065f5804fb09f32dae517c476fe68ec7c173a7a9c201e7441ac2907b843a8d9b695a504be0ee0061bb0b3d169f31fb64070f3f24b6a1470ca0138b614f35eafc12b1e439ca514dc6c1016966e7ac1171a6ea5c2a80e80ddeb24131da042d59d7ad3b26a2ae4eeaf7460e78b5b419be6def65b874445a551f767e577206bce336fed3", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1971.455978] binder: send failed reply for transaction 1076, target dead 05:37:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 05:37:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xfffffffffffffe5e) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x1b, 0x8, 0x1}) getdents64(r0, 0x0, 0xffffffffffffffb7) rt_sigtimedwait(&(0x7f0000001080)={0x1000}, &(0x7f00000010c0), &(0x7f0000001140)={0x77359400}, 0x8) 05:37:02 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7b00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1971.608592] binder: 21403:21404 got transaction to invalid handle 05:37:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000100000000000000000", 0x48}], 0x1) 05:37:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0) [ 1971.661831] binder: 21403:21404 transaction failed 29201/-22, size 67237658532407707--346320778468541599 line 2896 [ 1971.722747] binder: 21403:21404 ioctl c0306201 20007000 returned -14 [ 1971.790703] binder: 21403:21410 BC_FREE_BUFFER u0000000020001000 no match 05:37:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1971.884714] binder_alloc: binder_alloc_mmap_handler: 21403 20001000-20004000 already mapped failed -16 [ 1971.930356] binder: BINDER_SET_CONTEXT_MGR already set [ 1971.941298] binder: 21403:21424 got transaction to invalid handle [ 1971.953403] binder: 21403:21424 transaction failed 29201/-22, size 67237658532407707--346320778468541599 line 2896 [ 1971.981090] binder: 21403:21424 ioctl c0306201 20007000 returned -14 [ 1972.030111] binder: 21403:21404 ioctl 40046207 0 returned -16 [ 1972.062579] binder: 21403:21428 BC_FREE_BUFFER u0000000020001000 no match 05:37:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xff600000, 0x0, 0x0, 0x0) [ 1972.093451] binder: undelivered TRANSACTION_ERROR: 29201 05:37:03 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7b01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840a2c83cb2504d677d0038967754e22f174fd8fa8c64ebfbf8752ac0cdc74956e620a7f9b5a350764537dd41c9438cb8b147e1f650632963b6db7989c3d4b4ead087f118bec3ad1f30a704df441b2c54f735c63437424a29b60fcb5df728317eecc171c342de8a068293fe647f00000000000000cacb8dbffe5641bccea0bdb6ac41bd36ebd2c521963eff11d2b8f7a4a4d178e5247f5a604a513a689836441298eec9fb2c0216011b1c7cdd", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) [ 1972.236783] binder: undelivered TRANSACTION_ERROR: 29201 [ 1972.315736] binder: 21436:21437 got transaction to invalid handle [ 1972.332206] binder: 21436:21437 transaction failed 29201/-22, size 5005276699931813664--5640604310514311881 line 2896 [ 1972.350723] binder: 21436:21437 ioctl c0306201 20007000 returned -14 [ 1972.360666] binder: 21436:21437 BC_FREE_BUFFER u0000000020001000 no match 05:37:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 1972.439095] binder_alloc: binder_alloc_mmap_handler: 21436 20001000-20004000 already mapped failed -16 [ 1972.459557] binder: BINDER_SET_CONTEXT_MGR already set [ 1972.477221] binder: 21436:21437 ioctl 40046207 0 returned -16 [ 1972.508591] binder: 21436:21441 got transaction to invalid handle [ 1972.509569] binder: 21436:21446 BC_FREE_BUFFER u0000000020001000 no match [ 1972.531931] binder: 21436:21441 transaction failed 29201/-22, size 5005276699931813664--5640604310514311881 line 2896 [ 1972.595349] binder: undelivered TRANSACTION_ERROR: 29201 [ 1972.603243] binder: 21436:21441 ioctl c0306201 20007000 returned -14 05:37:04 executing program 5: getdents64(0xffffffffffffffff, &(0x7f0000001480)=""/4096, 0x1000) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = accept(r0, &(0x7f0000001300), &(0x7f0000001380)=0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001400)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000001440)={r2, 0x1, 0x6, @remote}, 0x10) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) getpeername(r3, &(0x7f00000011c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001240)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x8, 0x9, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x5, 0x81, 0x8000, 0x6, 0x2}, @jmp={0x5, 0xfffffffffffff8a1, 0x0, 0x5, 0x9, 0x34}, @generic={0x4, 0x1, 0x8, 0x5, 0xcd}, @jmp={0x5, 0x2, 0x0, 0x7, 0x3, 0xffffffffffffffe1, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x89, &(0x7f0000001100)=""/137, 0x41f00, 0x1, [], r4, 0xa}, 0x48) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000700)=""/124, 0x7c}], 0xa, &(0x7f0000002480)=""/4096, 0x1000}, 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000)={0x3, 0x0, 0x10001}, 0x6) 05:37:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xffff8000, 0x0, 0x0, 0x0) 05:37:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000600000000000000000", 0x48}], 0x1) 05:37:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 05:37:04 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7c00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x480a00, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1972.820772] binder: undelivered TRANSACTION_ERROR: 29201 05:37:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0xfffffd81) ftruncate(r0, 0x6ba) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="e400", @ANYRES16=r1, @ANYBLOB="00022cbd7000ffdbdf25080000001800030014000600ff020000000000000000000000000001080006000500000048000300080001000100000008000100000000000800030004000000080007004e2300000800050000000000080001000300000014000600ff0200000000000000000000000000011c000300080004000d840000080008000500000008000400050000002800020008000300040000001400010006719ccec1d2dee091d805aed24ec5820800040001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) getdents64(r0, 0x0, 0x9c) open(&(0x7f0000001200)='./file0\x00', 0x40, 0x2) [ 1973.006305] binder_alloc: 21468: binder_alloc_buf, no vma [ 1973.058125] binder: 21468:21473 transaction failed 29189/-3, size 0-0 line 3035 [ 1973.082042] binder: 21468:21477 BC_FREE_BUFFER u0000000020001000 no match [ 1973.097916] binder: 21468:21473 ioctl c0306201 20007000 returned -14 05:37:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000002080)=""/4096, 0x10dc) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017020007002e2f66696c0aca"], 0x10) getdents64(r0, 0x0, 0x9c) 05:37:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) [ 1973.207953] binder: BINDER_SET_CONTEXT_MGR already set [ 1973.213858] binder: 21468:21477 ioctl 40046207 0 returned -16 [ 1973.222920] binder_alloc: 21468: binder_alloc_buf, no vma [ 1973.232318] binder: 21468:21473 transaction failed 29189/-3, size 0-0 line 3035 [ 1973.249046] binder: 21468:21481 BC_FREE_BUFFER u0000000020001000 no match 05:37:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffdfc, 0x0, 0x0, 0x0) [ 1973.263662] binder: 21468:21473 ioctl c0306201 20007000 returned -14 [ 1973.300176] binder: undelivered TRANSACTION_ERROR: 29189 05:37:04 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffffffffff08, 0x101002) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x107, "aa2a246ab802bdf4186ca197cf9510662c9a293c0cd5d55c9b04a8fc7852d81b", 0x7, 0x9, 0x40, 0xfffffffffffffffb, 0x6, 0x7, 0x7, 0x9, [0x0, 0x8, 0x3f, 0x94d]}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x8000, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) syslog(0xd, &(0x7f0000000100)=""/137, 0x89) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) [ 1973.417005] binder: undelivered TRANSACTION_ERROR: 29189 05:37:04 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2, 0x0) write$P9_RLCREATE(r0, &(0x7f0000001080)={0x18, 0xf, 0x2, {{0x96, 0x1, 0x1}, 0x7}}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r1, 0x0, 0x9c) 05:37:04 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7c01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1973.512823] binder: 21492:21497 ioctl c0306201 20007000 returned -14 [ 1973.587893] binder: 21492:21497 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1973.651421] binder_alloc: binder_alloc_mmap_handler: 21492 20001000-20004000 already mapped failed -16 05:37:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 05:37:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000ffffff9e0000000000000000", 0x48}], 0x1) 05:37:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0) 05:37:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$lock(r0, 0x27, &(0x7f0000000540)={0x0, 0x3, 0x7, 0x100000001, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000580)='\x00', 0x0) ftruncate(r2, 0xfffffd) sendfile(r2, r3, 0x0, 0xfffffdef) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fallocate(r2, 0x20, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000400)={0x2, 'netdevsim0\x00', 0x2}, 0x18) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x104, 0x100) syz_open_dev$loop(0x0, 0x40, 0x149481) recvmsg(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000000240)=""/133, 0x85}], 0x4, &(0x7f0000000340)=""/77, 0x4d}, 0x41) fallocate(r0, 0x20, 0xffffffffffffff00, 0x3) [ 1973.777825] binder: BINDER_SET_CONTEXT_MGR already set [ 1973.783507] binder: 21492:21497 ioctl 40046207 0 returned -16 [ 1973.817129] binder: send failed reply for transaction 1088 to 21492:21497 [ 1973.832316] binder: undelivered TRANSACTION_COMPLETE 05:37:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x1, 0x4) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x9, 0x3, 0xb, 0x8, 0x8, 0x81}) ioctl$KDADDIO(r4, 0x4b34, 0x6) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000240)=0x9) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000340)={0xffffff4f, &(0x7f0000000280)=""/155}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9c000000000000000840", @ANYRES64=r3], 0x0, 0x0, 0x0}) [ 1973.978151] IPVS: Unknown mcast interface: netdevsim0 05:37:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xffffffeb, 0x0, 0x0, 0x0) [ 1974.091609] IPVS: Unknown mcast interface: netdevsim0 05:37:05 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:05 executing program 5: [ 1974.173776] binder_alloc: 21527: binder_alloc_buf, no vma [ 1974.245181] binder: 21527:21529 transaction failed 29189/-3, size 0-0 line 3035 05:37:05 executing program 5: [ 1974.288528] binder: 21527:21529 ioctl c0306201 20007000 returned -14 [ 1974.320989] binder_alloc: binder_alloc_mmap_handler: 21527 20001000-20002000 already mapped failed -16 [ 1974.377780] binder: 21527:21529 unknown command 156 05:37:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) [ 1974.398196] binder: 21527:21529 ioctl c0306201 20000200 returned -22 [ 1974.440777] binder: BINDER_SET_CONTEXT_MGR already set 05:37:05 executing program 5: [ 1974.496523] binder_alloc: 21527: binder_alloc_buf, no vma 05:37:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x4000000000, 0x0, 0x0, 0x0) [ 1974.546605] binder_alloc: binder_alloc_mmap_handler: 21527 20001000-20002000 already mapped failed -16 [ 1974.546616] binder: 21527:21532 ioctl 40046207 0 returned -16 [ 1974.618977] binder: 21527:21538 transaction failed 29189/-3, size 0-0 line 3035 05:37:06 executing program 5: [ 1974.696707] binder: 21527:21538 ioctl c0306201 20007000 returned -14 [ 1974.753608] binder: 21527:21529 unknown command 156 05:37:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000018b70000000000000000", 0x48}], 0x1) [ 1974.786842] binder_release_work: 1 callbacks suppressed [ 1974.786849] binder: undelivered TRANSACTION_ERROR: 29189 [ 1974.800171] binder: 21527:21529 ioctl c0306201 20000200 returned -22 05:37:06 executing program 5: 05:37:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1974.906680] binder: undelivered TRANSACTION_ERROR: 29189 05:37:06 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7d01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:06 executing program 5: 05:37:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x8000000000, 0x0, 0x0, 0x0) [ 1975.054204] binder: 21566:21568 BC_FREE_BUFFER u0000000020001000 no match 05:37:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) [ 1975.135851] binder_alloc: binder_alloc_mmap_handler: 21566 20001000-20004000 already mapped failed -16 [ 1975.156117] binder: BINDER_SET_CONTEXT_MGR already set [ 1975.162317] binder: 21566:21568 ioctl 40046207 0 returned -16 05:37:06 executing program 5: [ 1975.179843] binder: 21566:21579 BC_FREE_BUFFER u0000000020001000 no match 05:37:06 executing program 5: 05:37:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xc000000000, 0x0, 0x0, 0x0) 05:37:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x7, 0x1}, {0x200, 0x7ff}, {0x8, 0x7}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 05:37:06 executing program 5: [ 1975.586773] binder: 21597:21598 ioctl c0306201 20007000 returned -14 [ 1975.622737] binder: 21597:21598 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 1975.713823] binder_alloc: binder_alloc_mmap_handler: 21597 20001000-20004000 already mapped failed -16 [ 1975.781293] binder_alloc: 21597: binder_alloc_buf, no vma [ 1975.803573] binder: release 21597:21598 transaction 1094 out, still active [ 1975.815779] binder: undelivered TRANSACTION_COMPLETE [ 1975.822042] binder: 21597:21603 transaction failed 29189/-3, size 0-0 line 3035 [ 1975.833918] binder: send failed reply for transaction 1094, target dead [ 1975.843731] binder: 21597:21603 ioctl c0306201 20007000 returned -14 05:37:07 executing program 5: 05:37:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 05:37:07 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7e00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0000000000000ec00000000000000000", 0x48}], 0x1) 05:37:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x400000000000, 0x0, 0x0, 0x0) 05:37:07 executing program 4: [ 1975.941773] binder: undelivered TRANSACTION_ERROR: 29189 05:37:07 executing program 5: 05:37:07 executing program 4: 05:37:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 05:37:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x60ffffffffff, 0x0, 0x0, 0x0) 05:37:07 executing program 4: 05:37:07 executing program 5: 05:37:07 executing program 4: 05:37:07 executing program 5: 05:37:07 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7e01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000ffffd7ed0000000000000000", 0x48}], 0x1) 05:37:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 05:37:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x740000000000, 0x0, 0x0, 0x0) 05:37:08 executing program 4: 05:37:08 executing program 5: 05:37:08 executing program 4: 05:37:08 executing program 5: 05:37:08 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7f00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:08 executing program 5: 05:37:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 05:37:08 executing program 4: 05:37:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7f7bb1dc8000, 0x0, 0x0, 0x0) 05:37:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000fffffff00000000000000000", 0x48}], 0x1) 05:37:09 executing program 5: 05:37:09 executing program 4: 05:37:09 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x7f01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803) 05:37:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7fffffffefff, 0x0, 0x0, 0x0) 05:37:09 executing program 4: 05:37:09 executing program 5: 05:37:09 executing program 4: 05:37:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x940000000000, 0x0, 0x0, 0x0) 05:37:09 executing program 5: 05:37:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 05:37:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000fffffffe0000000000000000", 0x48}], 0x1) 05:37:10 executing program 4: 05:37:10 executing program 5: 05:37:10 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8100, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 05:37:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1000000000000, 0x0, 0x0, 0x0) 05:37:10 executing program 4: 05:37:10 executing program 5: 05:37:10 executing program 4: 05:37:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x20000000000000, 0x0, 0x0, 0x0) 05:37:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 05:37:10 executing program 5: 05:37:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000ffffffff0000000000000000", 0x48}], 0x1) 05:37:11 executing program 5: 05:37:11 executing program 4: 05:37:11 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8101, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 05:37:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x30710000000000, 0x0, 0x0, 0x0) 05:37:11 executing program 4: 05:37:11 executing program 5: 05:37:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80dcb17b7f0000, 0x0, 0x0, 0x0) 05:37:11 executing program 4: 05:37:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x80000000000802, 0x0) write(r1, &(0x7f0000000840)="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", 0xfc) 05:37:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) [ 1980.386041] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1980.511244] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00f0ffffffffffff0000000000000000", 0x48}], 0x1) 05:37:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x800000000000002, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:37:12 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8200, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0) 05:37:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x2, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe80d, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 05:37:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 05:37:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa0500000000000, 0x0, 0x0, 0x0) 05:37:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 05:37:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 05:37:12 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8201, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa0700000000000, 0x0, 0x0, 0x0) 05:37:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 05:37:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00020000000000000000000000000000", 0x48}], 0x1) 05:37:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x3) 05:37:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 05:37:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 05:37:13 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8300, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000000000000020000000000000000", 0x48}], 0x1) 05:37:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 05:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 05:37:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/117, 0x75) r3 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x3ff, 0x80100) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 05:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x100004000000000, 0x0, 0x0, 0x0) 05:37:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00040000000000000000000000000000", 0x48}], 0x1) 05:37:14 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8301, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1983.189515] binder: 21906:21913 ioctl c0306201 20007000 returned -14 [ 1983.222286] binder: 21906:21913 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer 05:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x100008000000000, 0x0, 0x0, 0x0) 05:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) 05:37:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x7000000, 0x0, 0x0, 0x0) 05:37:14 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) [ 1983.404430] binder: send failed reply for transaction 1097 to 21906:21913 [ 1983.434470] binder: undelivered TRANSACTION_COMPLETE [ 1983.478587] binder: undelivered TRANSACTION_ERROR: 29189 05:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x10000c000000000, 0x0, 0x0, 0x0) 05:37:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) 05:37:15 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8400, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:15 executing program 4: r0 = memfd_create(&(0x7f0000000380)='fdin\x1f\xa2/3\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="0de076c40ed8c85e6ae59b5c04ec09532228695186ac9b394578008833d761b9dad791283a657f472d22e2") preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x1) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x5e5, 0x141) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x100) mkdirat(r2, &(0x7f0000000140)='./bus\x00', 0x80) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x4002, &(0x7f0000000040)=ANY=[@ANYBLOB="2c61636365730000000069656e742c66736e6100658cfeffffffffffffff002c003517c8572f3b17000000008c2f4ae4ecd9668b2bf25e600eae4a772177ffe591c507f9037ea379ed679310b70700b1ffffff3064a40796ba26bfac0200ef1a4086ad260fc7aed82b540808926d58d36e51fe086d3ac59b56847240e956a4b2fa7b13d6d446dc20fcbe87c74352634370d82035db44dd925663e66d3e181108b06941c59f0d25c3038d4cd8f62761bdac660a5c9129b1a8e6e8ad"]) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x80) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1) prctl$PR_GET_KEEPCAPS(0x7) r4 = socket(0x0, 0x804, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x701001, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) 05:37:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 05:37:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00080000000000000000000000000000", 0x48}], 0x1) 05:37:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x2, &(0x7f00000001c0)) 05:37:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x101000000000000, 0x0, 0x0, 0x0) 05:37:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) 05:37:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x5421, &(0x7f00000001c0)) 05:37:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 05:37:15 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8401, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) setuid(0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="62d43822a850821ab4f666061b3a28", 0xf}, {&(0x7f0000000180)="e79d370b398b57ada996d3694a897030a64ad166ca1828b31f853ae16e4a107ca60e9ee862ead24da750eaad2915d6810feac72dd979182294b98266b22c5cb984f574edf58c104810d8284c55ff38a245a97ff6e8174e25c067278a806b049fabb69b0c2106a3426a05dff2951f2f46dd04f691477fd1602dd01eceec6a48235c4bf4ff3a8e714b03f93b2dcce1aa1cba340c9456fbbdd66d2f986aff40789ffe3b5a0c2ba5c5e508cb7cf42502e737ee43658a5eb4dcd9a9d2f432fd2dd9d4932ff1926fa449599fda93c75b84696614f40c49a731afd00c39528a62c16df5b282af", 0xe3}, {&(0x7f00000004c0)="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", 0x11c}, {&(0x7f0000000280)="618be1c9b93f3396dee8f1dc52f53267fa2cccb95a6ff5c33541ba2bcdace0096749e292321e61f7d0fbfa621b066c71cbb6d204e04dcddd9c20f54623bf2ee9043fe9e1f5c3f6b5d29571d3fc5723f3dd58615c47275e4d5854844aa9f6af4502815a091210b11a47cb54081512e1219248cc9efa95b822ab94366633", 0x7d}], 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) [ 1984.564362] sg_read: process 11199 (syz-executor.4) changed security contexts after opening file descriptor, this is not allowed. 05:37:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x5450, &(0x7f00000001c0)) 05:37:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 05:37:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f00000001c0)=""/182, 0x100000, 0x800, 0x6}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x488, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000fc0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0) r5 = socket(0x1f, 0x5, 0x400) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r7, 0x210, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x7ff, 0x2, 0x3}, &(0x7f0000000100)=0x10) 05:37:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000003) 05:37:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000a0000000000000000000000000000", 0x48}], 0x1) 05:37:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x5451, &(0x7f00000001c0)) 05:37:16 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8500, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:16 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x80ea, 0x20000000008014, 0x0, 0x0}, 0x2c) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000a40)={0x1f, {{0xa, 0x4e21, 0x1f, @dev={0xfe, 0x80, [], 0x11}, 0xfffffffffffffffb}}}, 0xfffffffffffffd75) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="00a47edb0648e8d2c2d5b23e609f2c3c3c01f71ebc5799b8765b42184c4e20610f63f3f6a58f4c89ae42a01c57056de77ef68906cf2c0493394d2e7be73cc0c50f74e3b586cd8ed45b68fedd7aaecd22c53b9c623d16e8dcad0de7cc19f387f8d9e60c27693ca1be9acc3689e31916b34f0a3fbca7a91764e362c483551b371c0a1e11ea85ae361600000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="9298cb6582c18cd09f750cb7ed99ba18a37f528a08d7115521284bfc7d602c2579a9b0c183a0fe4d6c5ef432153ce30c78cd9525b74e47ef16da8c71c881724b8806165e45a40a585564afddce1268b04c9b3ef5c2c1e9d7105ef157f93145c1b5ed00000000000000005028ff6777f3b195cdc94e3a36a0cdee9d0e43df31b59a5178b27b691aab6119762d17f48f79d68968ca9b4d9b207610eb6324199de07331cfb2990cd565238fd5b6a8749b48d0e5bc07fd7dc5132e256b84afce2981a4062fcfcfb27fd6f46d840000000000000000"], 0x1, 0x0, &(0x7f0000000140)="14"}) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800004, 0xc1010, r2, 0x2) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000b00)="2cad7e04486c3861aa13d3f081e52b685cb55c5b43e57fb238a762d152f533b6a22c07d76dc98e0da1bfbcbb281ad7221a1824146ff222058be566e69b8a697a5329e7c0caffa08730998d2b35be26ddc559984355674d22364eef868a38779a60cc1a90587bc3effb4ff8e8d57b007d211464f5fdb59e913d14fdd1ff73412d13acacb54f393e247807687c3d34330d1d21d54910567ef4a059edb4102e8c655302852995aa0dd97f96c0dc32f4b3a39c60596d4fc2238885ce3ffa03992b03537a3d2e58cd0689161c602eb7f678e323ae") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000980)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x8, &(0x7f00000007c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000780), 0x1, 0x1, 0x3c}], &(0x7f0000000800)=[0x40]}, 0x6}}], 0x0, 0x0, &(0x7f0000000300)}) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) ioctl$KDDELIO(r3, 0x4b35, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01000000004c0000006400000005000000464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b75a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae300915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f200"], 0x0, 0xde}, 0x20) 05:37:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 05:37:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x500000000000000, 0x0, 0x0, 0x0) [ 1985.361346] binder: 22006:22011 unknown command 1707841682 [ 1985.373748] binder: 22006:22011 ioctl c0306201 200000c0 returned -22 [ 1985.404268] binder: 22006:22011 got transaction to invalid handle [ 1985.411140] binder: 22006:22011 transaction failed 29201/-22, size 40-8 line 2896 05:37:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x5452, &(0x7f00000001c0)) [ 1985.487490] binder: BINDER_SET_CONTEXT_MGR already set [ 1985.516168] binder: 22006:22011 ioctl 40046207 0 returned -16 [ 1985.517300] binder: 22006:22018 unknown command 1707841682 [ 1985.633844] binder: 22006:22016 got transaction to invalid handle [ 1985.683488] binder: 22006:22016 transaction failed 29201/-22, size 40-8 line 2896 05:37:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x600000000000000, 0x0, 0x0, 0x0) [ 1985.725181] binder: undelivered TRANSACTION_ERROR: 29201 [ 1985.739362] binder: 22006:22018 ioctl c0306201 200000c0 returned -22 05:37:17 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) futex(&(0x7f0000000880), 0x9, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000900)=0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x80ea, 0x20000000008014, 0x0, 0x0}, 0x2c) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000a40)={0x1f, {{0xa, 0x4e21, 0x1f, @dev={0xfe, 0x80, [], 0x11}, 0xfffffffffffffffb}}}, 0xfffffffffffffd75) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="00a47edb0648e8d2c2d5b23e609f2c3c3c01f71ebc5799b8765b42184c4e20610f63f3f6a58f4c89ae42a01c57056de77ef68906cf2c0493394d2e7be73cc0c50f74e3b586cd8ed45b68fedd7aaecd22c53b9c623d16e8dcad0de7cc19f387f8d9e60c27693ca1be9acc3689e31916b34f0a3fbca7a91764e362c483551b371c0a1e11ea85ae361600000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) poll(&(0x7f0000000440)=[{r5}, {r8, 0x4208}, {r0, 0x401}, {r3, 0x2}, {r6, 0x109}], 0x5, 0x3ff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="9298cb6582c18cd09f750cb7ed99ba18a37f528a08d7115521284bfc7d602c2579a9b0c183a0fe4d6c5ef432153ce30c78cd9525b74e47ef16da8c71c881724b8806165e45a40a585564afddce1268b04c9b3ef5c2c1e9d7105ef157f93145c1b5ed00000000000000005028ff6777f3b195cdc94e3a36a0cdee9d0e43df31b59a5178b27b691aab6119762d17f48f79d68968ca9b4d9b207610eb6324199de07331cfb2990cd565238fd5b6a8749b48d0e5bc07fd7dc5132e256b84afce2981a4062fcfcfb27fd6f46d840000000000000000"], 0x1, 0x0, &(0x7f0000000140)="14"}) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800004, 0xc1010, r2, 0x2) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000b00)="2cad7e04486c3861aa13d3f081e52b685cb55c5b43e57fb238a762d152f533b6a22c07d76dc98e0da1bfbcbb281ad7221a1824146ff222058be566e69b8a697a5329e7c0caffa08730998d2b35be26ddc559984355674d22364eef868a38779a60cc1a90587bc3effb4ff8e8d57b007d211464f5fdb59e913d14fdd1ff73412d13acacb54f393e247807687c3d34330d1d21d54910567ef4a059edb4102e8c655302852995aa0dd97f96c0dc32f4b3a39c60596d4fc2238885ce3ffa03992b03537a3d2e58cd0689161c602eb7f678e323ae") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000980)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x8, &(0x7f00000007c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000780), 0x1, 0x1, 0x3c}], &(0x7f0000000800)=[0x40]}, 0x6}}], 0x0, 0x0, &(0x7f0000000300)}) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) ioctl$KDDELIO(r3, 0x4b35, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01000000004c0000006400000005000000464202afd9d101064e49a9d038291249e2bdea44c5265c3ac4534bded4885e6f23330b75a81642e844e6aa771303f8b80ddbcf21ad3ebb8e359d5baeb10640bac53b1214ba385024b81efae300915d192e4015f668ca23e7bb6fb68df4b9879bd65b062e5750f8a6170476bf16dd7dd925c5643a9c54ad847f6c6084941c6506e87e9c746a4e65b2654cb70a01343e77c3b119540090781fd610b17d47c3092aad866d2ea01356e08a06641c580e6e364f39844f689faad1e829e75d488fad9eccbeae25f200"], 0x0, 0xde}, 0x20) [ 1985.769152] binder: undelivered TRANSACTION_ERROR: 29201 05:37:17 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8501, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x5460, &(0x7f00000001c0)) 05:37:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f8d3fd87700) [ 1986.054697] binder: 22036:22037 unknown command 1707841682 [ 1986.093137] binder: 22036:22037 ioctl c0306201 200000c0 returned -22 05:37:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000e0000000000000000000000000000", 0x48}], 0x1) [ 1986.212425] binder: 22036:22037 got transaction to invalid handle 05:37:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8901, &(0x7f00000001c0)) [ 1986.273726] binder: 22036:22037 transaction failed 29201/-22, size 40-8 line 2896 05:37:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) [ 1986.468279] binder: undelivered TRANSACTION_ERROR: 29201 05:37:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x77d83f8d7f0000) 05:37:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80800, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @mcast1, 0x101}, 0x1c) connect$inet6(r1, &(0x7f00000000c0), 0x1c) fsetxattr(r2, &(0x7f0000000080)=@random={'btrfs.', '[\x00'}, &(0x7f0000000100)='#,+\x00', 0x4, 0x1) 05:37:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8902, &(0x7f00000001c0)) 05:37:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x700008000000000, 0x0, 0x0, 0x0) 05:37:18 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8600, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 05:37:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8903, &(0x7f00000001c0)) 05:37:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x5, 0x10000000000001, 0x1}, 0x14}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 05:37:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000f0000000000000000000000000000", 0x48}], 0x1) 05:37:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x800008000000000, 0x0, 0x0, 0x0) 05:37:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8904, &(0x7f00000001c0)) 05:37:19 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) epoll_create(0x200) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 05:37:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 05:37:19 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8601, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x900000000000000, 0x0, 0x0, 0x0) 05:37:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8940, &(0x7f00000001c0)) 05:37:19 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)=""/206, 0xce) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000440)=""/212) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '\x00'}, 0x0, 0x0) 05:37:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 05:37:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0) 05:37:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8941, &(0x7f00000001c0)) 05:37:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00100000000000000000000000000000", 0x48}], 0x1) 05:37:19 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8700, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x894c, &(0x7f00000001c0)) 05:37:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 05:37:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8980, &(0x7f00000001c0)) 05:37:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 05:37:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8981, &(0x7f00000001c0)) 05:37:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000002000000) 05:37:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2001, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x2f, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e24, 0x0, 'sed\x00', 0x20, 0x9, 0x6a}, {@empty, 0x4e22, 0x5, 0x4, 0x3, 0x9}}, 0x44) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 05:37:20 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8701, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0) 05:37:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8982, &(0x7f00000001c0)) 05:37:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00600000000000000000000000000000", 0x48}], 0x1) 05:37:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 05:37:21 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x200000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(0x0, 0x0, 0x383) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x0, 0x8, 0x6, 0x8, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[@ANYBLOB="2c6163636573733d636c694ea1436cf3966ffdecd405000001656e742c66736e6100653d6600006e1fa22f54a8aaaeb72f26366d3b730e00003a8c2f4ae408d966042bf2ee600eae4a772177639e234d3164a40796ba26"]) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x80) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x2, {0x1, 0x10000}, {0x2, 0x2}, @ramp={0x1, 0x0, {0x0, 0x7fffffff, 0x3, 0x7}}}) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) bind$inet6(r2, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x1, 0x7}) 05:37:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0) 05:37:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x8983, &(0x7f00000001c0)) 05:37:21 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8800, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x89a0, &(0x7f00000001c0)) [ 1990.076407] audit: type=1804 audit(1551850641.393:170): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir913076593/syzkaller.xkrLnf/3822/bus" dev="sda1" ino=17201 res=1 05:37:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 05:37:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1900008000000000, 0x0, 0x0, 0x0) 05:37:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x89a1, &(0x7f00000001c0)) 05:37:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) [ 1990.700846] audit: type=1804 audit(1551850642.013:171): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir913076593/syzkaller.xkrLnf/3822/bus" dev="sda1" ino=17201 res=1 05:37:22 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8801, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00f00000000000000000000000000000", 0x48}], 0x1) 05:37:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1a00008000000000, 0x0, 0x0, 0x0) [ 1990.821764] audit: type=1804 audit(1551850642.013:172): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir913076593/syzkaller.xkrLnf/3822/bus" dev="sda1" ino=17201 res=1 [ 1990.969093] audit: type=1804 audit(1551850642.013:173): pid=22258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir913076593/syzkaller.xkrLnf/3822/bus" dev="sda1" ino=17201 res=1 05:37:22 executing program 4: exit(0x9) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000080)) 05:37:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)) 05:37:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c9, &(0x7f00000001c0)) 05:37:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 05:37:22 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8900, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1d00008000000000, 0x0, 0x0, 0x0) 05:37:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x40049409, &(0x7f00000001c0)) 05:37:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x4020940d, &(0x7f00000001c0)) 05:37:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) 05:37:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 05:37:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000a00000000000000000000000000", 0x48}], 0x1) 05:37:23 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x51) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0xcf6}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d2, &(0x7f00000001c0)) [ 1992.349809] INFO: trying to register non-static key. [ 1992.354949] the code is fine but needs lockdep annotation. [ 1992.360606] turning off the locking correctness validator. [ 1992.366239] CPU: 0 PID: 22336 Comm: syz-executor.4 Not tainted 5.0.0+ #7 [ 1992.373108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.382457] Call Trace: [ 1992.385053] dump_stack+0x172/0x1f0 [ 1992.388691] register_lock_class+0x1bdc/0x1bf0 [ 1992.393275] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1992.398361] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 1992.403123] ? check_noncircular+0x20/0x20 [ 1992.407368] ? is_bpf_text_address+0xd3/0x170 [ 1992.411078] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1992.411862] ? kernel_text_address+0x73/0xf0 [ 1992.411877] __lock_acquire+0x11f/0x4700 [ 1992.411894] ? check_noncircular+0x20/0x20 [ 1992.411908] ? mark_held_locks+0x100/0x100 [ 1992.422566] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1992.426585] ? __lock_acquire+0x53b/0x4700 [ 1992.426597] ? __lock_acquire+0x53b/0x4700 [ 1992.426610] ? __lock_acquire+0x53b/0x4700 [ 1992.426623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.426638] ? check_preemption_disabled+0x48/0x290 [ 1992.426651] ? check_preemption_disabled+0x48/0x290 [ 1992.426667] lock_acquire+0x16f/0x3f0 [ 1992.426684] ? __flush_work+0x61a/0x840 [ 1992.480127] __flush_work+0x640/0x840 [ 1992.483925] ? __flush_work+0x61a/0x840 [ 1992.487904] ? try_wait_for_completion+0x9a/0xd0 [ 1992.492658] ? insert_work+0x3a0/0x3a0 [ 1992.496544] ? mark_held_locks+0xb1/0x100 [ 1992.500696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.506234] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 1992.511688] ? refcount_inc_checked+0x70/0x70 [ 1992.516185] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1992.521744] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 1992.527897] flush_work+0x18/0x20 [ 1992.531421] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 1992.536657] drm_atomic_state_default_clear+0x37c/0xd60 [ 1992.542029] drm_atomic_state_clear+0x9d/0xc0 [ 1992.546523] __drm_atomic_state_free+0x3c/0xf0 [ 1992.551107] drm_atomic_helper_set_config+0xe5/0x160 [ 1992.556215] drm_mode_setcrtc+0x613/0x1490 [ 1992.560473] ? drm_mode_getcrtc+0x870/0x870 [ 1992.564796] ? drm_unbind_agp+0x20/0x20 [ 1992.568765] ? find_held_lock+0x35/0x130 [ 1992.572846] ? drm_unbind_agp+0x20/0x20 [ 1992.576886] ? drm_lease_owner+0x45/0x60 [ 1992.580956] ? drm_is_current_master+0x5c/0x140 [ 1992.585624] drm_ioctl_kernel+0x23b/0x2e0 [ 1992.589774] ? drm_mode_getcrtc+0x870/0x870 [ 1992.594096] ? drm_setversion+0x8c0/0x8c0 [ 1992.598246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1992.603785] ? _copy_from_user+0xdd/0x150 [ 1992.607935] drm_ioctl+0x545/0xa50 [ 1992.611473] ? drm_mode_getcrtc+0x870/0x870 [ 1992.615792] ? drm_version+0x3d0/0x3d0 [ 1992.619673] ? smack_log+0x415/0x540 [ 1992.623394] ? smk_tskacc+0x2ba/0x390 [ 1992.627188] ? drm_version+0x3d0/0x3d0 [ 1992.631072] do_vfs_ioctl+0xd6e/0x1390 [ 1992.634956] ? smk_curacc+0x7f/0xa0 [ 1992.638579] ? ioctl_preallocate+0x210/0x210 [ 1992.642982] ? smack_file_ioctl+0x196/0x300 [ 1992.647302] ? smack_file_lock+0x240/0x240 [ 1992.651538] ? __fget+0x367/0x540 [ 1992.654994] ? nsecs_to_jiffies+0x30/0x30 [ 1992.659146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.664683] ? security_file_ioctl+0x93/0xc0 [ 1992.669086] ksys_ioctl+0xab/0xd0 [ 1992.672536] __x64_sys_ioctl+0x73/0xb0 [ 1992.676427] do_syscall_64+0x103/0x610 [ 1992.680317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.685511] RIP: 0033:0x457f29 05:37:24 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8901, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1992.688700] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.707596] RSP: 002b:00007eff2a726c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1992.715299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1992.722569] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 1992.729829] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.737096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff2a7276d4 [ 1992.744368] R13: 00000000004bfc39 R14: 00000000004d16f8 R15: 00000000ffffffff [ 1992.784028] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1992.791620] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 05:37:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d4, &(0x7f00000001c0)) 05:37:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) [ 1992.871302] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1992.886759] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1992.921459] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1992.934824] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1992.945260] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1992.970048] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1992.996144] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.004448] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:24 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x51) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0xcf6}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000e00000000000000000000000000", 0x48}], 0x1) 05:37:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0xc0045878, &(0x7f00000001c0)) [ 1993.053475] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.083499] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.086842] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.098076] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.115318] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1993.121785] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1993.139023] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.164219] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.173375] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1993.186463] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.200191] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.212475] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1993.233554] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.238252] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:24 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x51) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0xcf6}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1993.264071] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.279364] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0xc0045878, &(0x7f00000001c0)) [ 1993.319486] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.329669] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1993.335119] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.346407] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1993.410172] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1993.419312] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.428897] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.433378] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:37:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0) 05:37:24 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x51) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0xcf6}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0xc0189436, &(0x7f00000001c0)) [ 1993.538253] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.556662] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1993.571576] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:37:24 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8a00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) [ 1993.589071] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.602737] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.628552] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0xc020660b, &(0x7f00000001c0)) 05:37:25 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x51) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1993.704203] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.708085] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.722446] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.724402] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.749381] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.756054] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1993.762498] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1993.775621] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.784764] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.805245] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.808691] kobject: 'loop4' (0000000049120a48): kobject_uevent_env 05:37:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="3538e6c566000063e4c00baad0e8a2f5678e9d673220fd4cd06668db49af981ad541f01feabda3d7b1acb64ebd4295f23b2a2ebca47e0efb77958e1b2d3c6541de70a1c04a28ee166cac5416b8ddb1effac7aedfa02a43eabebe9a7cc581a08bab8fa88fbf7e6f90fe4bb8d4cfa6ded505a616274ede"]) [ 1993.875307] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.879638] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.888708] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1993.892019] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.914464] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.928987] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.947323] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1993.956684] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1993.963927] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1993.980571] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1993.993666] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00c00e00000000000000000000000000", 0x48}], 0x1) [ 1994.029816] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.033890] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:25 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0) [ 1994.135764] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.156458] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1994.164111] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1994.181530] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.183028] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.211799] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.221758] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000008c383348c4f4ca9089becff52f289c9dd209bdd819ff07a783faf195fcbc5ab2fa088aa2f35d7b02239812ecb06562f8409806489555a9809e0b17a960d267b5658ad77f0b53ff2449020000"]) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xbd}, &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@newtaction={0x2d8, 0x30, 0x28, 0x70bd25, 0x25dfdbfe, {}, [{0xe8, 0x1, @m_ipt={0xe4, 0x20, {{0x8, 0x1, 'ipt\x00'}, {0x18, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'nat\x00'}]}, {0xbc, 0x6, "89150acb43dcb6bd8fbacefa453c23365f0c6bc9d8ac0787d26d338cc40878900cf9080eb4f6d16caa8e53a2099b5d02c7044e5c215755b923a578b2a7620d3c2f85286341955e1bbef95ac7fb976404a0ba7125c74a5ee0e099b86148c4f777aaf59a986e6c16ad998f71f5eae29bbb46ff5c887020fd032d6523c487bf7f6b195a2d634f8e3a51a44d53e7a0e7860b7a94078ea5bf75d4703d49f034dc6942e159c599693f31d1f3b187bcd735d63f1df475cf5ae4"}}}}, {0x138, 0x1, @m_nat={0x134, 0x18, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffffffffffe, 0x20, 0x1000000f, 0xaf, 0x4}, @empty, @multicast2}}}, {0xf8, 0x6, "63d1fdb30d3de2555b9e3d67bb02ebf8c4410185fd0d3d97bd4edf148d6fd05e57faeb2e99599540668449037fb8289b379a867d2b15834902c1a8f244ded1eb69a9cffe1ebf83163aa8b8c1790f02c1cbfc3bc28299a3e263132e6ce4adc7db15d0f20014ceabbd45139ccb3d42daa661884c1628d3768a9d8fb3704efe1c8f80d2cbb6310a78291930c5e012c45847f7fa5a7addd51c5b71cb4781b01468d6b5e05d5719dc4401c9550b39fa73bbe0f700ce3ec6b569c6e6ca8f3ff31fa8543045a4bc3f551bf68c5868c87dc80af2986478beb74fcc76881b835222bafb9f498d789586d4b2a00e84cf82af38a245e5f2"}}}}, {0xa4, 0x1, @m_connmark={0xa0, 0xe, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x10000000, 0x3, 0xffffffffffff7701}, 0x7}}}, {0x68, 0x6, "26ccd0ec2eb97558986f29bada4b3b02984c3641b6bd825e6de5dd39880728081476355e5185c30e4f28c9257c877d5473ad595a6bd65c9b9502e48f5a16aad17a18b70945a65a1ed94bb249f08ae62ef104226dc2d1a658ada8bea3887ab88a50"}}}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1f}, &(0x7f0000000140)=0x8) [ 1994.243657] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.291999] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1994.302187] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.331733] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:37:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 05:37:25 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8a01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:25 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000340)={r6, 0x3, &(0x7f0000000240)=[0x4, 0x6, 0x9], &(0x7f0000000280)=[0x1], 0x1, 0x4, 0x5, &(0x7f00000002c0)=[0x7, 0x1, 0x43, 0x7], &(0x7f0000000300)=[0xffff, 0x4]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="127164c1d5a4acf1d2e96b6c5cb5be5716dd27e6ddf88212fa8a7ce1bdbeaee5b301b3808a7c615ff05ba21d9c871ead23c52defec6c6903a76e5ba3cddea3e5cd57a9be067ed23abc719809b861bf8d5dac445b3af1568ae5a682c8742d17daffc20861174cdc4c3e65ee25180caec5f4b99811be9c6c391099ddc76c2128315bf797d450d2b435a9de6efe200d30f73dc2a3ed29a503cd8209c47f4e7df77f23754abeb3415b531a8b3d3fde9ecd6519608a96699e6c8421e4e59f9cdeabb6840a1d9e7f09c2261cfdeb0d0386"]) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x1, 0xba5, 0x0, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x5}, 0x8) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000200)={"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"}) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000700)=@ng={0x4, 0x1, "fbb51e361ab9275fdafbbd7245c281cfc37f64"}, 0x15, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0xffff}, 0xc) [ 1994.338083] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.359993] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.369912] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.437151] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1994.445914] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1994.460145] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.463517] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.489652] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.494303] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1994.505939] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.513910] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.515062] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xebffffff00000000, 0x0, 0x0, 0x0) 05:37:25 executing program 5: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r2 = dup2(r1, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x200, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x800442d3, &(0x7f00000001c0)) [ 1994.533628] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1994.567428] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.583924] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.641220] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:26 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1994.681835] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.684887] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.710417] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000007, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) [ 1994.736978] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1994.746475] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1994.764027] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.773674] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.789202] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.796389] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.808895] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.823327] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.842750] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1994.859705] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.861687] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1994.882418] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.914176] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1994.941385] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000f00000000000000000000000000", 0x48}], 0x1) 05:37:26 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) r4 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r5, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48040}, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1994.967324] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1994.977793] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.003821] kobject: 'loop4' (0000000049120a48): kobject_uevent_env 05:37:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 05:37:26 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8b00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="9aa900000000"]) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1995.025422] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1995.062272] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.085721] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:26 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfcfdffff00000000, 0x0, 0x0, 0x0) [ 1995.142596] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.171556] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x2) [ 1995.199687] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1995.208110] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.219691] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.234705] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1995.252430] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.263819] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.289250] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1995.299421] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.316562] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1995.330838] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.335250] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.360809] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.372434] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.390936] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.441964] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.455683] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.463220] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.474769] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.484751] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) getitimer(0x0, &(0x7f0000000000)) 05:37:26 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x2000020001, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1995.495001] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.504708] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x2) [ 1995.541047] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.543764] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1995.582726] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1995.588224] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.611622] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1995.619453] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1995.635297] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.686904] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.693502] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) dup(r0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1995.731689] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.750134] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.788650] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1995.792578] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.809799] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.816560] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.829782] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.854291] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1995.864288] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1995.879737] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1995.892721] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1995.915749] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:37:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00b71800000000000000000000000000", 0x48}], 0x1) 05:37:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\a']) 05:37:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0) 05:37:27 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8b01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:27 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffe99) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1996.053902] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.062034] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.073754] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.081234] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.094690] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.104534] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.129172] kobject: 'loop4' (0000000049120a48): kobject_uevent_env 05:37:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x0, r2}) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1e) [ 1996.155011] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1996.160450] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.171131] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.190328] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.218910] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1996.230368] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1996.238482] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.248041] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.261737] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.278788] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.306273] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:27 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x68, "ad164878a69510dcccc5890377c799551857798a39b8390736c0af928eaa60247dd9ae3381c16cdd62c87491f0cd2348eb08c093c7b3d07daef1bb5f1e22a9ab0c221c4f14ca697f9fe52e53cc9dd1ffb667c8b24234a4e134bb6fd4f3574ec1df1414759380778c"}, &(0x7f0000000480)=0x70) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1996.322269] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.351373] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.358433] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.371384] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.385914] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1996.392416] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:37:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x781b, 0xc00) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xffffff6a, r1, 0x100, 0x70bd28, 0x25dfdbfd}, 0x36c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r3 = dup2(r2, r2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x800442d3, &(0x7f00000001c0)) 05:37:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x11, 0x7, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x80000000, 0x4) [ 1996.487914] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.510468] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1996.520503] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:37:27 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x1, 0x1, 0x1}, &(0x7f00000003c0)=0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1996.520951] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0) [ 1996.560977] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.595210] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.629910] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1996.651023] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.657593] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.666754] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.680704] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.682036] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1996.692504] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.711907] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.765469] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.779868] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.788547] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.795806] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.805127] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.810275] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.815234] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.830530] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00006000000000000000000000000000", 0x48}], 0x1) 05:37:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="000010000000"]) 05:37:28 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8c00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:28 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x7) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1996.857426] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.863781] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:37:28 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r3 = dup2(r2, r2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x800442d3, &(0x7f00000001c0)) [ 1996.959639] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.974510] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1996.980467] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1996.995329] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x1000000000, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:28 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1997.021616] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.037626] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1997.047452] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1997.098199] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.118476] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.131253] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.152024] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1997.165004] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1997.189542] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.223059] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.235766] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.236749] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) socketpair(0xa, 0x8000f, 0x7, &(0x7f0000000000)) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) [ 1997.266542] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.271789] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.273667] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.286769] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:28 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1997.320980] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.330755] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1997.343687] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.344635] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1997.376516] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:28 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8c01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1997.422253] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.434758] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1997.460440] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) timerfd_create(0x2, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) [ 1997.472206] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1997.490456] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.505262] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.549834] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.580591] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.592430] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.633991] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1997.647639] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1997.701815] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1997.710678] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1997.716967] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.730434] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.733965] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.751676] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.752169] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.780843] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1997.806022] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.812319] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0018b700000000000000000000000000", 0x48}], 0x1) 05:37:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xffffffffff600000, 0x0, 0x0, 0x0) 05:37:29 executing program 4: socket$kcm(0x29, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000000)) 05:37:29 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_extract_tcp_res(0x0, 0x5, 0x3ff) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xa559446) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:29 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8d00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 1997.939996] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.946450] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1997.951565] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:29 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7c9, 0x80000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/234) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r2 = dup2(r1, r1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x800442d3, &(0x7f00000001c0)) 05:37:29 executing program 4: socket$kcm(0x29, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8080400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fgetxattr(r1, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/54, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1997.998286] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.020485] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.035383] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.042451] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.057648] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.073926] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1998.089659] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.090985] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.115492] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.125444] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1998.145058] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:29 executing program 4: socket$kcm(0x29, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1998.173408] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1998.187083] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.193642] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1998.213761] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.225132] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.235757] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.242822] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1998.270395] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1998.280633] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1998.293151] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.307435] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) [ 1998.325793] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.410013] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.427676] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.434709] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.448947] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.487096] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.517484] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.528390] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.531718] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.536985] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.542103] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.589476] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.597031] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.614094] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1998.635479] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:37:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e000ec000000000000000000000000000", 0x48}], 0x1) 05:37:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:30 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8d01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000010003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x1f, 0x5}, {0x401, 0x8}], r2}, 0x18, 0x3) 05:37:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) [ 1998.863811] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.870487] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.880547] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1998.889906] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:30 executing program 4: r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1998.919227] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000a30700"]) [ 1998.964074] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1998.974233] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1998.989249] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1998.993713] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:30 executing program 4: r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1999.035269] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1999.046163] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.053784] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1999.112187] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.120702] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.126753] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.143015] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.161085] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.186360] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.193542] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8010000008007, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="6e4a5c935f83216f1fc1b146db681498075bbcbbf84b1973501f71974f34fbf23344ccf0baab42bc13585beab3d460edc896037b9c3fbdd33457e98c527d8fb2", @ANYRES64=r1], @ANYBLOB='\x00\x00\x00O\x00\x00']) 05:37:30 executing program 4: r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1999.220572] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.237744] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.249750] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.259560] kobject: 'loop5' (000000007c88515a): kobject_uevent_env 05:37:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 1999.282832] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1999.343270] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1999.366195] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.385262] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1999.405467] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.408001] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.467528] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1999.470686] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.482847] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1999.518057] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 1999.525548] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1999.554050] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.554700] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.564416] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.590148] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.629035] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.635625] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e0000f000000000000000000000000000", 0x48}], 0x1) 05:37:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x17, &(0x7f0000000100)='vboxnet1eth1vmnet1user\x00', 0xffffffffffffffff}, 0x30) ptrace$getenv(0x4201, r4, 0x0, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="eed105ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="020000002000"]) 05:37:31 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8e00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) [ 1999.814589] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.827062] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.847513] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 1999.855160] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.860373] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.901682] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1999.913506] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 1999.922621] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1999.942555] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 1999.981997] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2000.015387] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.020678] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.023968] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.040965] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2000.046845] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 2000.077105] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.106533] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.121095] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.127932] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2000.134509] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2000.146040] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x84002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) [ 2000.151212] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.157778] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.198920] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2000.206736] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.223758] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2000.268293] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:31 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8e01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 2000.311491] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.322025] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.332866] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:31 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 2000.413060] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2000.426579] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2000.456606] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2000.463074] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2000.490468] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.504223] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.509919] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.521066] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.592369] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2000.602999] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.609461] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2000.615826] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.637247] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.644535] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.681896] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00004003000000000000000000000000", 0x48}], 0x1) 05:37:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) 05:37:32 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0xdf, 0x11, 0x1, 0xffffffffffffff9c}) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="f2b8b06d6a5a8df5c1124af7212f91cb555b62c6ddd239254f65d5b4868045a6609221f4c897cfd0ae98eaa163f9a0437b223e0174274410aff24927948679250e35b5af3879005838ff77f228db152562c5570a24e4a0ceaaa5fb0c77eca7ab68b2f0861d5d162caf7c68e5fe383513748b2b03c4a3bd6289c847804db9d9f65be389051e683cffa0898d64acfd75085a3651e3d1e4ba48115cfdca2fc237ef5d170f85217bc5458899a4a5031c245d9498e96c8914bf47fb1d049f3d2ebabb0d0b54223a38a0da"]) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 05:37:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x322, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) [ 2000.697283] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.770731] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.774097] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.789903] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:32 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8f00, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 2000.815483] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.871142] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2000.889190] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.902787] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:32 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x100000001, [], &(0x7f0000000040)=0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r2 = dup2(r1, r1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x800442d3, &(0x7f00000001c0)) [ 2000.907167] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2000.937484] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.937533] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2000.943847] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) [ 2000.969765] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2000.987283] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2000.993398] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.002933] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.020607] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.032561] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2001.044726] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.069705] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.083519] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.097479] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.109520] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.148519] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.149010] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.166068] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.185674] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 05:37:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)={r0}) 05:37:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2001.259013] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.277908] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.308069] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2001.314827] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2001.361493] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2001.369791] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2001.401895] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.420209] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.470000] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2001.476128] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.479927] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2001.483108] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.510103] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2001.517506] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.523868] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.536826] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2001.574652] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.583394] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c56028400000080000000000000000000a2bc5603ca00000f7f89000000000309ff5bffff00c7e5ed4e00000340000000000000000000000000", 0x48}], 0x1) 05:37:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) 05:37:32 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x8f01, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 05:37:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 05:37:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000008006fc3d52f8c8d43c8a7ca26b4b171188730e7f462e49c4d4e8b6fa155edc2189d40c63907f14d9b3bcc27f1087cbe23f42333d49027e719b20f84e5a07e864b702daec1674cce1bcf47e6fb10bc31b3a93adfd082b4cb29a0af79bfc9aaf812f8e57718815e62d0f03acc7f11a18e7d6946891dad52e96bf654b33d3204059aacec2a323e3b485dd2f4ae5f1c8ed40b9993655f7b4c62cc12eaa3001ede4d8c3d7943724ddb89f2a2c47907bb2e19564479dea6dbe766e2b78d5e409c60ebf41d0f0021a8d2e3c323"]) 05:37:33 executing program 0: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x800, 0x100) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fa559ef"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2001.680287] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.695973] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.703199] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.710443] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 05:37:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x9, 0x3000000000000000}) r2 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x800442d3, &(0x7f00000001c0)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x88082) [ 2001.780115] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.790920] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.805059] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.811117] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.828874] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.836312] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.849136] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.858950] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.869417] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2001.891457] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2001.905142] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.931399] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.944267] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2001.948524] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2001.950822] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.972441] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2001.982807] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' 05:37:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 2001.987602] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2002.010074] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2002.044004] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2002.065910] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) 05:37:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000003, 0x4) r1 = dup2(r0, r0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x23) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d3, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0x2}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) [ 2002.090217] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2002.105263] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2002.117910] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2002.173738] kobject: 'loop5' (000000007c88515a): kobject_uevent_env [ 2002.190704] kobject: 'kvm' (000000003465871a): kobject_uevent_env 05:37:33 executing program 1: clock_adjtime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x9000, 0x0, &(0x7f0000c00000/0x400000)=nil}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) [ 2002.214227] kobject: 'loop5' (000000007c88515a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2002.229670] kobject: 'kvm' (000000003465871a): kobject_uevent_env [ 2002.240811] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2002.268873] kobject: 'kvm' (000000003465871a): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2002.317624] kobject: 'loop4' (0000000049120a48): kobject_uevent_env [ 2002.327392] kobject: 'loop4' (0000000049120a48): fill_kobj_path: path = '/devices/virtual/block/loop4'