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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 06:09:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="c87468651a80e904b2bf4300000000000000000000e6d2ee1864582ccb1156ec85146f3bb0114d72674ef1df9850c4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x1, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="94c2b8650930cbd1b034706dbfd85fab04584fb619cbc37d87cf5bc0262d304926ffee82f5726cccd2c2e82913a2a282de2971f8e8b0da257e65aca737d3d86b86fc01bf00fc7867b09838e5987b8f1861288dfc600f8ebd44000000000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x4400, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:20 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xc8400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x240400, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x17a]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 06:09:21 executing program 3: r0 = socket$tipc(0x1e, 0x7, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xfffd}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000001c0)=0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) r6 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0xc, 0x4c000) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r7, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001800)={r7, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002a80)={0x8, "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", 0xffffffffffffffce}, 0x1006) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 06:09:21 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:21 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000}, 0x40000000) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x84, @rand_addr=0x1, 0x4e21, 0x4, 'none\x00', 0x19, 0x400, 0x12}, {@broadcast, 0x4e22, 0x5, 0x3}}, 0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:21 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x90e6d8ca, 0x400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:21 executing program 1 (fault-call:7 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:21 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 509.583402] binder_set_nice: 2 callbacks suppressed [ 509.583418] binder: 19746 RLIMIT_NICE not set [ 509.593280] binder: 19746 RLIMIT_NICE not set 06:09:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000180)={r4, 0x4, &(0x7f0000000040)=[0x3, 0x2, 0x7, 0x37c4], &(0x7f0000000080)=[0x800, 0x8000, 0x2, 0xffff, 0x4, 0x100000000, 0x9, 0x7], 0x4, 0x0, 0xf96f, &(0x7f00000000c0), &(0x7f0000000140)=[0x400, 0x5]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000001c0)) [ 509.656685] FAULT_INJECTION: forcing a failure. [ 509.656685] name failslab, interval 1, probability 0, space 0, times 0 [ 509.668168] CPU: 0 PID: 19750 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #2 [ 509.675403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.684801] Call Trace: [ 509.687459] dump_stack+0x173/0x1d0 [ 509.691144] ? __should_failslab+0x278/0x2a0 [ 509.695621] should_fail+0xa19/0xb20 [ 509.699387] __should_failslab+0x278/0x2a0 [ 509.703723] should_failslab+0x29/0x70 [ 509.707689] kmem_cache_alloc_trace+0x125/0xb90 [ 509.712437] ? binder_get_thread+0x406/0xf60 [ 509.716925] binder_get_thread+0x406/0xf60 [ 509.721234] ? __msan_poison_alloca+0x1f0/0x2a0 [ 509.725958] ? do_vfs_ioctl+0xebd/0x2bf0 [ 509.730088] ? binder_poll+0xbd0/0xbd0 [ 509.734039] binder_ioctl+0x56d/0x2d20 [ 509.738012] ? fsnotify+0x2092/0x20a0 [ 509.741880] ? do_vfs_ioctl+0x187/0x2bf0 [ 509.745997] ? binder_poll+0xbd0/0xbd0 [ 509.749931] do_vfs_ioctl+0xebd/0x2bf0 [ 509.753887] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 509.759328] ? security_file_ioctl+0x92/0x200 [ 509.763880] __se_sys_ioctl+0x1da/0x270 [ 509.767909] __x64_sys_ioctl+0x4a/0x70 [ 509.771882] do_syscall_64+0xbc/0xf0 [ 509.775672] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 509.780914] RIP: 0033:0x457ec9 [ 509.784158] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:09:21 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000007c0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0x103003, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000001c0)=0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0xfffffffffffffffd, 0x100, 0x279d, 0x0, 0x0, r0}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x1, 0x20, 0xb3e, 0x1000}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={r7, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000600)={r8, @in6={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x1f}, 0x4}}, 0x2, 0xb32, 0x1, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002b40)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2bfeef550a726f329159c7a2617091e9de1fa3e7c888f7706be57854007847082fb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cdee4904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f585c646bdc8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d63818d4c50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd5e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af4a8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b41201f00b1a5600000000003ab1b1742b36417d92891fc669ba3f55332c1baf79232b84c2437f1d059015dd41b44d6f21d8341fded8bd68c9fd718ae195e881b3a13f41c236a849b60d0709ec645da2ebc476de9299c0f3e6d60dfc37acec2c0b0680ff2ef5d4ea7ebb050bb0b81ee8785e5ca55503e088b01f823bd7b5cf6c61843ca37134a1342d5f7dd6bbfc51aa37ed1609040331c3e6260a12a5bf23923c"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001800)={r8, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x3, 0xdc]}, &(0x7f0000000200)=0x100) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 509.803124] RSP: 002b:00007f666c45ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.810950] RAX: ffffffffffffffda RBX: 00007f666c45ac90 RCX: 0000000000457ec9 [ 509.818344] RDX: 0000000020000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 509.825737] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 509.833064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f666c45b6d4 [ 509.840396] R13: 00000000004bf216 R14: 00000000004d0808 R15: 0000000000000005 [ 509.847902] binder: 19741:19750 ioctl c0306201 20000600 returned -12 06:09:22 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r5, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r5, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:22 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0xfffffffffffffffb) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x20000040, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffef0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2bfeef550a726f329159c7a2617091e9de1fa3e7c888f7706be5785400784743cdb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cdee4904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f5c8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d63818d4e50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd5e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af47c26f7cf8da8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b412faf00b1a56"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:22 executing program 1 (fault-call:7 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 510.255505] binder: release 19741:19746 transaction 268 out, still active [ 510.262621] binder: undelivered TRANSACTION_COMPLETE [ 510.294015] binder: release 19741:19746 transaction 268 in, still active 06:09:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xeb57f3bc6f015008) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 510.301531] binder: send failed reply for transaction 268, target dead 06:09:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4001, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 510.386994] binder: 19783 RLIMIT_NICE not set [ 510.391610] binder: 19783 RLIMIT_NICE not set 06:09:22 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000004c0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000001c0)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r3, 0x51353f8d18f1af9c, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x200, 0xfffffffffffffffd) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x26}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 510.601486] binder: 19783 RLIMIT_NICE not set [ 510.606314] FAULT_INJECTION: forcing a failure. [ 510.606314] name failslab, interval 1, probability 0, space 0, times 0 [ 510.617757] CPU: 1 PID: 19783 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #2 [ 510.625011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.634416] Call Trace: [ 510.637096] dump_stack+0x173/0x1d0 [ 510.640797] should_fail+0xa19/0xb20 [ 510.644584] __should_failslab+0x278/0x2a0 [ 510.648884] should_failslab+0x29/0x70 [ 510.652845] kmem_cache_alloc_trace+0x125/0xb90 [ 510.657577] ? binder_transaction+0x4261/0x13e00 [ 510.662392] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 510.667827] binder_transaction+0x4261/0x13e00 [ 510.672481] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 510.678009] binder_ioctl_write_read+0x163a/0x1a0e0 [ 510.683087] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 510.688701] ? __msan_poison_alloca+0x1f0/0x2a0 [ 510.693472] ? do_vfs_ioctl+0xebd/0x2bf0 [ 510.697596] binder_ioctl+0x759/0x2d20 [ 510.701544] ? fsnotify+0x2092/0x20a0 [ 510.705389] ? do_vfs_ioctl+0x187/0x2bf0 [ 510.709490] ? binder_poll+0xbd0/0xbd0 [ 510.713412] do_vfs_ioctl+0xebd/0x2bf0 [ 510.717366] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 510.722814] ? security_file_ioctl+0x92/0x200 [ 510.727366] __se_sys_ioctl+0x1da/0x270 [ 510.731446] __x64_sys_ioctl+0x4a/0x70 [ 510.735493] do_syscall_64+0xbc/0xf0 [ 510.739278] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 510.744501] RIP: 0033:0x457ec9 [ 510.747741] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.766673] RSP: 002b:00007f666c47bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.774444] RAX: ffffffffffffffda RBX: 00007f666c47bc90 RCX: 0000000000457ec9 [ 510.781741] RDX: 0000000020000600 RSI: 00000000c0306201 RDI: 0000000000000004 [ 510.789040] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 510.796389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f666c47c6d4 [ 510.803700] R13: 00000000004bf216 R14: 00000000004d0808 R15: 0000000000000005 [ 510.811515] binder: 19781:19783 transaction failed 29201/-12, size 0-0 line 2924 [ 510.819260] binder: send failed reply for transaction 270 to 19781:19783 06:09:22 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80, 0xc00) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101140, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(r2, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000005) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000001c0)=0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x80000003, 0x9}, 0x4, 0x2, 0x75fe}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r7, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000040000, 0x8007, &(0x7f0000000540)=0x4000002}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 06:09:23 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:23 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1aef14e221e1b4f2523c75b509bcab7a784d32bc15d88e8ced1d90fc1eb5a61ea19be44dc5bd0e853b38045a8b65a2253654ad0ab0cd27874d24859a24e05deeb9a77322b226aec71f191a8643a10da350d6f3c0ceabefcd1bc69b4bc36f12cc0db13407275c026cef1e4a7e7cec4119231807d7c656be7e3dd64c216e6a"]) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000040), 0x2, r3, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:23 executing program 1 (fault-call:7 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 511.409996] binder: undelivered TRANSACTION_COMPLETE [ 511.415358] binder_release_work: 4 callbacks suppressed [ 511.415370] binder: undelivered TRANSACTION_ERROR: 29201 [ 511.456940] binder: undelivered TRANSACTION_ERROR: 29190 06:09:23 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x401, 0x9}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:23 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002ac0)={0x0, 0x1c, &(0x7f0000002a80)=[@in6={0xa, 0x4e22, 0xffffffff, @local, 0x1000}]}, &(0x7f0000002b00)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002b40)={0x0}, &(0x7f0000002b80)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000005c0)={r6, 0x43, 0x0, 0x2}, &(0x7f0000000400)=0x36a4d5c481769e20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r7, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000700)={0x0, 0x8000000085b, 0x8001, &(0x7f0000000540)=0x10001}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r7, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r3, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) write$P9_RFSYNC(r3, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x222, 0x9) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:24 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000540)=0x20000000000003) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x1, &(0x7f0000000780)=0x20}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2bfeef550a726f329159c7a2617091e9de1fa3e7c888f7706be5785400784743cdb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cdee4904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f5c8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d63818d4e50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd5e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af47c26f7cf8da8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b412faf00b1a56"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:24 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 512.174658] binder: 19863 RLIMIT_NICE not set [ 512.179366] binder: 19863 RLIMIT_NICE not set [ 512.227631] binder: 19863 RLIMIT_NICE not set [ 512.248551] binder_alloc: binder_alloc_mmap_handler: 19862 20001000-20004000 already mapped failed -16 [ 512.310292] binder: BINDER_SET_CONTEXT_MGR already set [ 512.315824] binder: 19862:19863 ioctl 40046207 0 returned -16 [ 512.370276] binder_alloc: 19862: binder_alloc_buf, no vma [ 512.370287] binder: 19868 RLIMIT_NICE not set [ 512.380552] binder: 19862:19863 transaction failed 29189/-3, size 0-0 line 2973 [ 512.393033] binder: undelivered TRANSACTION_COMPLETE [ 512.398324] binder: undelivered transaction 274, process died. [ 512.412150] binder: undelivered TRANSACTION_COMPLETE 06:09:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:24 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:24 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2ba2617091e9de1fa3e7c888f7706be5785400784743cdb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cdee4904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f5c8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d638189808e9ecd4e50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd5e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af47c26f7cf8da8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b412fa"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x239, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x701840, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x48, 0x0, &(0x7f0000000240)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01634040000000000002000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff00000000000067163961c6d273556e601a444af3d80000000000"], 0x0, 0x0, 0x0}) [ 512.648765] binder: undelivered TRANSACTION_ERROR: 29189 06:09:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:crack_exec_t:s0\x00', 0x22, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x2801, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x8000) write$P9_RREADDIR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="68000000290100000000008002000000056700000000000003000000000000000907002e2f66696c67300801000000020000ecffffff008bc10000000000000007002e2f66696c65308002000000000000000000000002000000000000000207002e2f66696c6530"], 0x68) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x9abfb5576f6f4c75) [ 512.889633] binder: 19893:19902 ioctl c0306201 20000080 returned -14 06:09:25 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 513.015159] binder: 19893:19902 got reply transaction with no transaction stack [ 513.022977] binder: 19893:19902 transaction failed 29201/-71, size -34359738368-4294967295 line 2741 06:09:25 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x10000000000000, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 513.130371] binder_alloc: binder_alloc_mmap_handler: 19893 20001000-20004000 already mapped failed -16 [ 513.164030] binder: BINDER_SET_CONTEXT_MGR already set [ 513.169496] binder: 19893:19894 ioctl 40046207 0 returned -16 [ 513.223802] binder_alloc: 19893: binder_alloc_buf, no vma [ 513.229571] binder: 19893:19902 transaction failed 29189/-3, size 0-0 line 2973 [ 513.237353] binder: 19893:19902 ioctl c0306201 20000080 returned -14 06:09:25 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x10005) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000001900)=""/4096, 0x110000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 06:09:25 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x261, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="67e6d7181cc6117cb729dd94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 513.318433] binder: release 19893:19902 transaction 277 out, still active [ 513.318885] binder: 19893:19894 got reply transaction with no transaction stack [ 513.325591] binder: undelivered TRANSACTION_COMPLETE [ 513.333126] binder: 19893:19894 transaction failed 29201/-71, size -34359738368-4294967295 line 2741 06:09:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 513.503269] binder: undelivered TRANSACTION_ERROR: 29201 [ 513.509025] binder: undelivered TRANSACTION_ERROR: 29201 [ 513.514683] binder: send failed reply for transaction 277, target dead 06:09:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 513.575891] binder: undelivered TRANSACTION_ERROR: 29189 06:09:25 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000400)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r5, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x25) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r5, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:25 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/net/tun\x00', 0xffffffffffffffff}, 0x279) r2 = syz_open_procfs(r1, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3803, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000400)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000001c0)=0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x2) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r7, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000002a80)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2bfeef550a726f329559c7a2657091e9de1fa3e7c888f7706be5785400784743cdb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cde00904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f5c8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d63818d4e50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd51e1615b1e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af47c26f7cf8da8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b412faf00b1a56"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001800)={r7, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 513.773083] binder: 19940:19942 unknown command 808464432 [ 513.778794] binder: 19940:19942 ioctl c0306201 20000180 returned -22 06:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) fanotify_init(0x38, 0x1001) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xb0200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x2b4, 0xe7, 0x400, 0x10}, &(0x7f0000000200)=0x98) [ 513.952360] binder: 19940:19945 unknown command 808464432 [ 513.958092] binder: 19940:19945 ioctl c0306201 20000180 returned -22 [ 513.984218] binder: 19942 RLIMIT_NICE not set 06:09:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x10, r0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x100000001, 0x2) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="90"]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:26 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000002ac0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="030000000200b141f1f3e2d961d4b046000600841a932bd605f82c1f51aa6628a4d38e9ce6fb4fc45acac438040a4408eb4bb825e9ec73f6134892d7bdcc43e5569b2c3a0683bb6e981c2bfeef550a726f329159c7a2617091e9de1fa3e7c888f7706be5785400784743cdb28d90b85712cd5fdabe80002d36cee4a55d904dcb2cdee4904091b022b1b804717a4a7ec5a7bce1380a1c22b21d728288e6ad4c4184d2e0234b62c6f5c8658ffea634e563fde2265848d5176abd2164f71796e88aae5e799a56da18a38d3ecb93adf80ab42466cb19cd94166a2dd7d63818d4e50b87d80c54cd97830decef9f92106a22c25f5537df36f92fc1eeb86235e2d0522c0bd22d5dd5e16dffc8c1fb3d4eb8af9bd3942f80006d479e35e087b5566a06a9897c7d51fb35ebe20ee48ca5743c9af47c26f7cf8da8d73cbc3f4465c7a73d86deb2c18aca38062b2014e535182b3c8c6707e3a5b61ecb3eeac87a7c1f75e7577843b2de917c82b412faf00b1a56"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x300d00000, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:26 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 514.465920] binder: 19973:19974 transaction failed 29189/-22, size 0-0 line 2834 [ 514.480834] binder: 19973:19974 got reply transaction with no transaction stack [ 514.488533] binder: 19973:19974 transaction failed 29201/-71, size 0-0 line 2741 [ 514.539530] binder_alloc: binder_alloc_mmap_handler: 19973 20001000-20004000 already mapped failed -16 06:09:26 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:26 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r1, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000001c0)=0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000240)=0x3) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r10, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000002f00)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r6, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES16=r8, @ANYRES32=r3], 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000001800)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 514.644941] binder_set_nice: 1 callbacks suppressed [ 514.644957] binder: 19986 RLIMIT_NICE not set [ 514.645785] binder: 19973:19974 transaction failed 29189/-22, size 0-0 line 2834 06:09:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 514.692143] binder: 19973:19990 got reply transaction with no transaction stack [ 514.699738] binder: 19973:19990 transaction failed 29201/-71, size 0-0 line 2741 06:09:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x2000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 514.808685] binder: undelivered TRANSACTION_ERROR: 29201 [ 514.862080] binder: undelivered TRANSACTION_ERROR: 29201 [ 514.867673] binder: undelivered TRANSACTION_ERROR: 29189 06:09:27 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(r2, &(0x7f0000003ac0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4100, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="37040000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) msgget(0x2, 0x10) [ 514.968869] binder: undelivered TRANSACTION_ERROR: 29189 06:09:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x11, 0x0, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) move_pages(r3, 0x2, &(0x7f0000000140)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000180)=[0x0, 0x1, 0x2, 0x2, 0x4, 0x4], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000080)={0x8001006, 0x800, 0x2}) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0xffffffff, 0x4) 06:09:27 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 515.227467] binder: 20013:20018 unknown command 1079 [ 515.232850] binder: 20013:20018 ioctl c0306201 20000140 returned -22 [ 515.359807] binder: 20013:20026 got reply transaction with no transaction stack [ 515.367649] binder: 20013:20026 transaction failed 29201/-71, size 0-0 line 2741 06:09:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair(0x9, 0x2, 0xc5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000100)=0xff) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:27 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x8, 0x400, 0x100000000, 0x3, 0x81, 0xd9, 0x3, 0x2ae8, 0x80000001, 0x0, 0x100000001, 0x54, 0x100000001, 0x5, 0xd4], 0x5000, 0x202}) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:27 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/net/tun\x00', 0x8003, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 06:09:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 515.610683] binder: BINDER_SET_CONTEXT_MGR already set [ 515.616352] binder: 20013:20018 ioctl 40046207 0 returned -16 06:09:27 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000400)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 515.671971] binder: 20013:20031 unknown command 1079 [ 515.672702] binder_alloc: 20013: binder_alloc_buf, no vma [ 515.677175] binder: 20013:20031 ioctl c0306201 20000140 returned -22 [ 515.735832] binder: 20013:20018 got reply transaction with no transaction stack [ 515.800101] binder: release 20013:20018 transaction 287 out, still active [ 515.807303] binder: undelivered TRANSACTION_COMPLETE [ 515.832222] binder: send failed reply for transaction 287, target dead 06:09:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 06:09:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000180)=""/156, 0x9c) [ 516.031626] binder: 20056 RLIMIT_NICE not set [ 516.036853] binder: 20056 RLIMIT_NICE not set 06:09:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x9, &(0x7f00000000c0)='/dev/kvm\x00'}, 0x30) rt_tgsigqueueinfo(r4, r5, 0x32, &(0x7f0000000140)={0x28, 0x1, 0xe6}) [ 516.097883] binder: 20056 RLIMIT_NICE not set 06:09:28 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 516.180094] binder_alloc: binder_alloc_mmap_handler: 20055 20001000-20004000 already mapped failed -16 [ 516.233855] binder_alloc: 20055: binder_alloc_buf, no vma [ 516.234424] binder: BINDER_SET_CONTEXT_MGR already set [ 516.239522] binder_transaction: 2 callbacks suppressed [ 516.239555] binder: 20055:20056 transaction failed 29189/-3, size 0-0 line 2973 [ 516.244855] binder: 20055:20066 ioctl 40046207 0 returned -16 06:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x7, 0xffffffff, 0x4, 0x1}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 516.361132] binder: 20055:20062 got reply transaction with no transaction stack [ 516.368935] binder: 20055:20062 transaction failed 29201/-71, size 0-0 line 2741 06:09:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000180)=""/156, 0x9c) 06:09:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/201) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x80000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCNXCL(r0, 0x540d) [ 516.516921] binder: undelivered TRANSACTION_COMPLETE [ 516.522235] binder: undelivered transaction 293, process died. 06:09:28 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 516.599314] binder_release_work: 3 callbacks suppressed [ 516.599331] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.610434] binder: undelivered TRANSACTION_COMPLETE 06:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x111000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="d142f4f36c66b9800000c00f326635000400000f30f0193d650f011866b9800000c066b8634261a766ba56b3b5500f30ba4300ed66b9da09000066b80a00000066ba008000000f300fc78b26000fc7ac86fb", 0x52}], 0x1, 0x6, &(0x7f0000000180)=[@cr0={0x0, 0xa0000001}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfc0, 0x800) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x6, 0x10001}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200006e4533baa5e198d6aa00"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7fffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x9, 0x8, 0x1, 0x3, 0xfffffffffffffaf8, 0x1, 0x0, 0x1ff, 0x7, 0xb, 0x3, 0x8000, 0x6}, {0x0, 0x3, 0x6, 0xa467, 0x80000001, 0x400, 0x4, 0x1, 0x7, 0x3, 0x1, 0x8, 0x3ff}, {0x7ff, 0x79, 0xfffffffffffffff7, 0xffff, 0x7fff, 0xa254, 0xa, 0x0, 0x3f, 0x1, 0x5694, 0x0, 0x1}], 0x1}) [ 516.769602] binder: undelivered TRANSACTION_ERROR: 29189 06:09:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x2, 0x1751}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 06:09:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="84e30bc3fa00356eb7f88cc272fff2a2f24f51439c88a2a4b54d32811098d29724b6d2c5fdb9e719de3be06dd21b7ad5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x5, 0x101) [ 516.928271] binder: 20097:20100 got transaction to context manager from process owning it [ 516.936964] binder: 20097:20100 transaction failed 29201/-22, size 0-0 line 2825 06:09:29 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x00\x00\x00') ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x9, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) unshare(0x4000000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) epoll_create(0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0xffffffff, 0x4}, {0x7fffffff, 0x9}, 0x80000001, 0x2, 0x75fe}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000001900)=""/4096, 0x1001000, 0x800, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x40, 0x6, 0x2}, &(0x7f0000000580)=0xfffffffffffffeb8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xb32, 0x7, 0x100000000, 0x8}, &(0x7f0000000300)=0x98) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000700)={0x0, 0x40000000000000, 0x8001, &(0x7f0000000540)=0x4000000}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001800)={r6, @in={{0x2, 0x4e21, @loopback}}, [0x52, 0x93b, 0x3ff, 0x4b3528fc, 0x0, 0x800, 0x7, 0x8, 0x5, 0x400, 0x6ea, 0x101, 0x4, 0x0, 0xdc]}, &(0x7f0000000200)=0x100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, "6b6edb3e2e18e45e07cf6423069a4c2795cdecd8a50f71790bc40ae95ff99a45218492cd271bbefd03440d095b830fb975057a8ca54dc623fa00292c4af68fed0787ea1249e85580ffdd22fe733da4c39380abf74870d0ca377354b95d19606c25f36fdeb53ea892be20855b3e967cf9dc386751fa2e9d79cfa91f73b97ddc01ef3d011def9220120c6ece7597790bbe2d6df5462982fc82a0faef835c5aa181bf45e83db77c97c3c73801fba0a131b540c8bedc91e3d986c4f2e52fcdcaa469f50d492328dc59ecc7716a2510bbdefe244708369a8eeb09810427c855e354eb757b5b51eb3749c2ea3891e5e89319bb4ec68b3c8515251a23c1851c8e2a845cee6f06a1a2cdb430dc0fa17c633ff1adbafe3b923eec954cfa8b34c948339d7d461422442e5e3cb6810cb4830c6ce70ab7f3d8117537981b234be0289ed0f51c39057ffc8e54b068750b8e9348e1e783546ff92f3b4f71af30571a139219084ff3010f0ead4daf009f67aa1a37657ac7da5795ce69ac547fa9dea09a9a6970724767c7c21961e5daf968de91d3c1dcc7edb8dd8373b1c79373ae511fd1f423322e4b0b87df9c73c79aa33c84b94f075b4a2fe3ee199261b41e1ea1107392eceb41f4df75fd6a86b5706fccfc20c80357b04ab1601531fa4616b7e40af822eaac2ab8eb1927ea8749647243aca3601a5f9237437ef47d7bfb4ae194fc4109a1ea07f60f8e38df49a86b5512d628f63f0e18dfe8585fb85b211eeab5256e5aa7dd4a1e3e13f0b42b9370615ed7907b19548e60a257e1b368632bfeb2c2bab409c15260991e418e950954956c7c5340cf49a9fe14a7a9167dafeef68305bee9f552f22fad27481fae797e947a21addf409e1ce0dab51d1fc6bac5aa510913d1ab9c4b6c24bcea28a958c3b6e7fc1eaa22e678c2f36c0fe085e0db2395288862afe44fd8ca266cc932c77095adc45c75b8b6b2d94253f8b067aa3aee5d9a9e1abb2d4fb90d982dc1251fd4a37adfa7f08bc923a845d9a49ae4565e90e2857afcc9f294b167a0f2364407b5e42d7b8303e1181a1fff149c236d284354f69f0745e2daa47b74fafb8c4043344cdc359d73bfe2b3c6d3a07111660e9b5185dfa0cd5f341c62031135b9a42293890fc5e14c59cc245255d8a2dbbdac979729b3bbe5668ed0eab28e8e2a75529cbde49a56d3705888de9d1e3467a8b9cad9b1fba6d89cbeb8b0a0b6745e465abf8f72e645af96af512dc2ec14de6ca905b35dc2554a5d86b23f25081459d547c7792d5d75fadc6390247e99f48243cda4a3df85cc13c75bebf7be82c1c049fbec6ab6de096fe5035349070576de79621e8aa840dd65c5abb8c2e8f0a0a8b10712e408940019e19584e48877458240cefd753e14481863d330ea6b5f3b8975ddbe3d21b54756c4b7ab7135db52bac9b7b60603ff70a7360f6325a7deb00feb07cc80d9b0ee0ea12c09886a8e8c5c405f62d55c50c88a5f00d6923cd00bf8c6d67d684da5a8a4240f7fcec3184330ffbbda779307e8ccf983850f6c7dc32925211fda44cd14d644f8c61368a70c0a26c03331b926a4f8be784f976dd6fe7e10140fdcb0daf1e5e7b59ea109ff6fcf7f654475b5e141ec8de1ce8f41b2a04071dc0a638bee3e6e9febe7559606bc7cbd0146793ce7117fbc2ec42943c028898b9862101f33c69c5d715aff9f68993e6f37f16f6f75c7ffc2d732017150252458f8f698ac561f1e03e28c9278050f676376b164ee1c66abb52d02a8a172a0eedb0485e4725dbf6bfedc9524577a3fc16950005465aa18f63a138f7598a2a48581394c63cb6075285ee9e9a6799f8f18ba26f5291a77caa93cf0e51620974fb27c1503dcb40440545483a91c6ce06aef4e25675fedc8a27296b8c1e76fb54e8737b49f07f2170bc9e414a3842308a13052687515794b13f6b0e9743a0d63334d4e5a0c0f66579a63da713f2238dfe7648cac6594bc51a7511a0418a1b33eb914f112ee533b972e9ab9b1342468e38e5eed0974341746d3a4fd6fd599e3253132ce5abe2b1492bb82d7440c61487728d1435672140cc60b635a1621fab613c6df992fc76455b4255eaf1305f4ed852e91ce5dab545b01a17da4b521b19b8c5fe5af2af0dec16317430f4551814195f5e4bc7fa8656a3e7186c6e9d454a6183b88bc55bab7336f19fef98e5c977b0f801ee8a0c4f5a4a9c53ad316acd1971a47401fcd0bfebe1a90ab3fc0d56d8e66199080798b41f1fd1ca327856e147ba76adfcd0d628815351e6729412af7c3c270173fedbba30762be41d8483a4a63d4178d371ee84ec5685ab422ba71dec89ac074acb02f695f2fe1f964b1037bf344d7ae3b0a15b33a64f5cc609ad2dbb9f76fb8cfcb8a815b2363281e3fc1a0a12c0db37f0ce4b9022b1d189dc3833e41ef3057f2018c7852b88b79fa27dc7a3846f539e5523323eefdabf319f8b82afa25e24644dda47d4697a1b23f7da346a68ec5a06ed8c13642996f41688b0ab7b858081de6f5a42cc6d3e3d371d36e94426a1f817c1e90c89831dbcef721e973bc3f57abc0aec4292cfa6fdbd62b8fcde7a133d816df39704cc4c7c81c60a924d7a681aab7d031f91a25c645d9426977e02e55f595065efd9eb0681b80bda9c58fba69d430ce62c8322e2b597bb9b7c2996847f2518c5186037c8b1d2ac2efb3eaf2ecd2b32d4802c68f1196a408d19276184c3c8aaf8ce36da083357c0ecd705b5d3426d3a26a037cddd68c8522814291087ea66d6ed37d9866ec483cc1c3e5a9435d601bf5225d041522cd0211fd90a1753c7eb1ff11f2cfec1c65eb394a15591faa81e64be7f074964fc6f831996b69b339d4593331df1474325b6374a20c2a35ecb2a9e20dd87d163e6cb03e25eedde98ad678a521b9bf8255bb177e34b70b6b3b63d7ef329c8ea49435e5181b9f86831ff0da88131ade51591eefdb207d5316330136c1339471ee416c7e3e1145b0378c30d5a7aff25d3168d58b2ac4ab0dd51211743d6bc93c10372e05541150deca432629ea8595384c2c24e7d85033d11a862f921582f630c8b65f34d79486cd31330b9fbf2c071d563b51577a765ff890a9cdb515f17de08a44abbaea234917c63d0234352b7f389a4400ceaf1944040120be942812dae057a8c591760c26b9c0d0947e0443e7c65fc9458874f0c62a61e9e92ee0687021b0e58017efb53d5930cde58cfbff21556a62b060cb0d5362d86c09a0e3b48c02789c509a2514443838e86cbf8d9b0f049a2fdb2f337c66de0d407dd8041d73724bfb50e2f3f86cfd01a521b50a12219a3a97ad2e9d4316c569c964ce7f0559b18004989c9322c70b19b6a1daf7f8762ee02faaf788f6c99db855732679d476c64005daa8fabf07152c568f30040504fa17de2e50eec7ce90357604d4ee14b290a728035077a638d405f39c0fcc85cebbf891d3bfddfb6b2d4edceadcd0b8472de39c1494c0f1568d4d853ed31413902e49a5c46864afb304809a6dd097fe5dae63f4c0b98672b3ac4cf4714ae6af15566b74d3878029f619a69384c2c7070a77d8f66e4e590666de779d7499bbc4d611a5e6628ee55f119b8e57a088f6fe7bff2bf7e7d2e10d9e5ce17fda7874604cf3efc1d8125d0abd8796980461e1eba024276831ed2dc41ddb1b8bf27ce9f7ed608eb0e78a2c08518ca8838b6c9cfa87b7e90090dfc708accaff3e2397ff5e19cde3dc680c3ea04dfcf8cc6084e7d0758d6c4de0e81c77d3b3278fcd18473294f81cfc1c59ddb1cb7250902d7e63a094a88f4cc3476c8e4e51af26508ce709f304e9c518df70f4f94f0707295d4260f7bcfc640f11d022aba3b97fb2928cc3167996b8273f586bfe2ba05ff97b3fde4fa06578aa187ab48e7d47a7c458562c36aada88dc980ab944cd327c8787ccdce0de0dcaa8aa1b07f7284db23243eecf2460b2294de8c4b8fff78844538a8a38a5605550a14cb12e76d7d9908cd6b3753616432cc597ec2612a07c9f13028a4f40a39bb4524f1e84c37e582a1709a5c9b100ed6cf0a5def3ef7fc504b9d3e55a199d460fc8d63f696282598e0f876cbe4ff21999615bec1b6b843708df064c8b61926a34768d2182d985e5648bed20f7d510bc487d14648255e0f3a568d136bba5dff46cde10524aaecc1771453891843ace403c7b608a8253b71b14f4cf9141ba73088261ab0138001206a9e22156b98fd8eca65c98079abf64f82da52b670289577e706121fe5f802b822f8ffe8143d8667f94c898e04844c4f34b7bb26c08bdddd2ded8533e438e4ac0ce8b530d9b97d86fe08985a587344505388e03fc36fc07fdc7be0dda1b464d7cc618689d1b67ee0519b805fc6433f771466023d511249a0b03e64b099fd35e94eeeafab2a0a5ab186f3bd278159e6a11dcedde10af4089f65cbb49ac45d2661c399e7497bb6bbe84a89dad355104f0dafa160585e7bd7be9016b43688a774d0311805367987e50534346d497df0a6f1deac66dd9c11bfd78ed36aad8825d706ce62152c8231c3390dbf70a18a4d6574fa3dee232183c23ced01c4369364d52f63eacf32eab0e9e4f708fa04c4f34f8de662ecaf2cb46fc25cc8f780fdb4de7f4c645ed5efbfba5539aca3ed3c9d2d1bcafadf29e15ec67b343dc34262e9af4ea44d863bb5f0da6a3ebbd494737939652ea2cceb40458943c7ff25aa8512beec4b7ca1bc713af92c025061679d947e7ac76425846ecbccc67b03233b98ae27b9f359fb7500bbbfe22e79cf0054e6c05db1c76b7d7927eb376c01957da6f3deb1c4420dcae3410f2b343448002ac3c5baa70c328ad3d1bc00e25f44fdcac28de8067d1c97bbcfe01a8af9857697a2bf4ed17140aa2a83c1a05a59265595b5d639a34f36b368bc1096a6893149ec701227525b907ace2c1624258b237747b2730e55f2a4aa0820a56bd2f2b085ed5bb845ad545f87f903d79d3c6feb02325d41a5d6a544ec1c7db0345a3e1f3fb65bc418c5d987ca903dbf01232ab1c888195ea4201e83e76d9e32ca42ea366b67ae6b608df1469a476d315280597bf81484a993f340b828844dc443b9917faf568b6231b6ae2321e506a2d0321460476f905c9163c74c39c1f533b612f49127cfe4ed6c61ae80bc00de98eddfa3bda3493982dd4666f83526f6aee93ff46bfdf0eb54223ab481d12aa3b0db971511f9b49f9b821c3d86044142c21dac72af1b40fa49a24e18ba6da9f5609058efba2f73cd9c0e3d712c6aa4854558940780b7bf7c56f408713031a7614b76525b2405a712e1e5c139a51c218a0460ae006e788796b022bfb64af325dfef45729729493d622bf96da29ac91fee190bc1a9b958f2d94f10424d72d0fddc453f17b4db97559d52827aeaf60a0c5376bcb093cc4c15fd8e58d21e31a57b2fdb2fcc0720d9d04ccdcf4b4d34314b3152386b7a5e30eb64129ff6efefd4ece400211ca1127d5424faaea6157412d19f6bec8ce6019cd49cac179c42e12d98887067e3d63704116f2391b9f7ea46acdb48c799a448312c729ea1700352387aa04a76d865aee100afd7afaeec60f30c13dfc32c088caf9e330a62e641b1e4d00e193d10cfae47c978a43cfc498dbb2959e78f1a17f00f06342b4dc598ee95929fbca15a398527ab8e3e1b46064c1372a69c8fbaaa5b4ec96ccd98e203c488eded9ae6bff30e394b157eb69fcc4df6b315fa6a3f080dc0fbecb0fd6aae5cb54ce19e6364e80f4f1ed912f26f88f0eb8d1e62ebc8490ec81777c4a4ee0b55c42622779c47d41b13f", 0x1000}, 0x1006) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) [ 517.104102] binder: 20097:20100 ioctl 40046205 7fffffff returned -22 06:09:29 executing program 5: getpid() r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffff904d, 0x101000) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000000000000000000010000008100000000000000070000000000000000800000000000400002000000000000ff070000003227c454e386a18300000000000000000000000800000000000000383d5a0c3041d44c97430a71c958bd12498699a827d86527f55630be96f653f371ba722d2c42f4dad0e8f5411453527d0fd0ce1f05161170ffc2e8e17775b16f250bd94db9fa991fff"]) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000040)='wireless\x00\x00\x00\x00\x00') fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x1) [ 517.166738] binder: BINDER_SET_CONTEXT_MGR already set [ 517.172268] binder: 20097:20100 ioctl 40046207 0 returned -16 [ 517.204799] binder: 20097:20106 ioctl 40046205 7fffffff returned -22 [ 517.229986] binder: undelivered TRANSACTION_ERROR: 29201 [ 517.235638] binder: send failed reply for transaction 298 to 20097:20106 06:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) fchdir(r1) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 517.360534] binder: undelivered TRANSACTION_COMPLETE [ 517.365885] binder: undelivered TRANSACTION_ERROR: 29189 06:09:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:09:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000002e40)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) sysfs$1(0x1, &(0x7f0000000000)='nodev$ppp1\x00') chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="2f6465762f739ce775"], &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x802080, &(0x7f0000000200)=')\xc7 \x1e\xe8\xb3-\xef\xff\xef\xba\xb3T\xb2\x1b}\xe5U\x97p\xa0\xd3\xaa%T|cK\xcd') r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xc000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 06:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1}, &(0x7f0000000340)=0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={r6, @in={{0x2, 0x4e23, @empty}}, 0x65c, 0x9, 0x401, 0xfffffffffffff231, 0x1}, 0x98) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 517.643083] binder: 20127 RLIMIT_NICE not set [ 517.647688] binder: 20127 RLIMIT_NICE not set [ 517.670241] binder: 20127 RLIMIT_NICE not set 06:09:29 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xfffffffffffffffe}, 0x2ac) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x2b, &(0x7f0000000000)='#securitynodev(\\[)eth1ppp0.ppp1-bdev:wlan0\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f0000000080)=""/21) socket$caif_seqpacket(0x25, 0x5, 0x4) 06:09:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="94c2aacf3b6dcc4c7d01b5640a39ec2d6948af8e4666b334a6f818fcd91f2fc2b8a0d4e2af4032d4e1257105b593080058440fcd3bf760f670b1bb4b4807671bb2603e8b9f97e136650f830b4740b152e1516e93936ec12649a26bd3528bb8e435f9ff42b14ace480abdcf35040e89aba4d883d18ce8bc27e37abd5ef6b768154fd0698f4f57d095732ff5fda21cdd948f509ebdb876ae38f969c5589ed38262e883a951cc9ad77b216fa2057979b2b6fce8366bb3fcb5a3aba907adb347402b7f27a2194556385e76acac34aead8e567d8480"]) fcntl$setpipe(r2, 0x407, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="319abe2be300ce770f89412d552e9d0f05d817d752fc996bfd7a939ddf483cb7e326bc65384ceb6292ddf6ee0195d723a6dbdf2d55ca1c6d2c80b5cbbe0d92b2e7010d6e5a0996568db203131a53f75b94ce285bcbd7c140609a09ba5f84cdc9541aa1d81fcf8835439bae03ce194f975d53ad741c55d77cffa3eebf9abf4726f8", 0x81, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="68b6cbff02ad895088c6f67b4db23ecd474ed69cc6ea5e15fc67c0c12edf509381f3900d0aba4bc09c0e7ba6d05492faba1bcd079e5fd434098980405ae785d176bdde101398b9f8498a87568b3bb5bc39d8b42ea03f6e9d2fbc53bbcac119d9ba3eda7bffbe6c7e8424400529118d198a281f5ec4ff0cdcdbe81edfc9bd8a2be2e65f374496a363597dd892d021d2c6923166983f061116718eddfb2e3431eafe68682dafc5653daf19aa3d378afd912fe9b98e826a", 0xb6, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="4ced553f584adef9c32d6e2778effdc34bfe61f6262195a896c1a19e238ca02fbfccbfc422ce07fde293465ca6efee5b9e28b2030a3c53dd23ad2bd07534a3f6f932f51fb0c636f1c25ff91e3a0cd40ffde269659f0cd3ed6d7dfd4f6d9907af007281c0a1021486ffcf3003ee2b6f60065eb5898bfafccc17d6e76a92033e8e8fc9058b5e554849c6cd3a7c34b6a8813fbea18b8526c9270bff35b39d932c5e70985e516a7877f6512937b8d644dcc313888cf910c3dbf5b93640217c7ee162979280b972624e995bece8414c6b07311fd2", 0xd2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/124, 0x7c, &(0x7f0000001680)={&(0x7f0000000640)={'sm3-generic\x00'}, &(0x7f0000000680)="b66a2a825ab4b7e75c365eace04acd8a2690dc860b80ea92614a781a9d7c2fbdcb1880d46d9d2da3b6dfec45e9234052d8c347598c610cb6642fd2237fb037ade189b4739e84c3377647337b0fed228ae18ffb88b2ae5253ef58d7f0680d83bb9a60ca05e037c77fc8d1c9711f55fecde0f126d0fb7cbf7dec0460eeb1d60239edd44f6e9c714b179f05f75b5c758ed7981e01b775be69f04a1423a0fa0d8ed1ada6640923069cdbda4bca734a5536bcf41420474c73568b05fbad24cff2fd6ed2d3fd65eef65e4baf0553ed8d4fe9f2d25d0985000b74f755e4c08293681a86b42c90e393190b742a05ff21bd7f1752302f405facf3a6e18bd7f25ebc5a88b9dbd21dda17fd3e3bac7a1661074da35e6cf445a5821921366c807763d6f1d7e6154eaf3b4b0a8cc76e4a6958e45b065b9fb277b719034091fd33b77f160bf607e5092ae09992722328f30dce51b4e222ac4af2e12263ea00e790f171b399eab3bacb488a0b1cdd1b9a6e38273b240a242ce58c39dd5650976635a3155f74945617bfeae9fd69a4376de9c7aced12cc295a837ce5303d106fa33f34b6271c39b0a69f1be44bbb1b10df386fc2c8ad11990e018388b64fd6120f7d41c3a53f75e7822a05e3a645929198d90aaa0638579d7aa6c16be3ec45cbe4b7b554600f108bf4e6e40854310e6323c545c6e149f1a681b1f9a8ba7b839d7769938febc30b75a77879062ce770da983359321c5de50ddfa4fa29da4cb0dcced8d886fa659e0dd7e4eb96ceb9d2f77b48448aeb62ebe8a9f04469718b2c084650ac00ea641579bded4bd2a401448dfc0464d65113acf0709080e8b0360f2fe6ce309958d666988cd6cc4c96da4b4637453cd1bc802410449651540af5af3f661388d6a46be1d63cacb9f9d60af90677527a8c399fc66c1a5f19774a0a200967400c475c25c0aeb20ff61b6af37586b7d7bb44a44aa71b40a128ce939d0f0a69b629d8cf4b68acfad80664bf7ece9fe3d8ef6018a30c55d8a8fb015f65c37e95f8c8bc8008714572c9145ddc2f03e4d0dc1211caefe6a8a9f69e59c7be215977476540d3701b9f4de5bb1dae56565de841dcdde4217fff89c7bfc57a827375d6455728241acbb8e1dd0ae92038985fe122c666d6e458706ae069eca243b127dc3bcad7f206e99f153ad4d8827c00560e45716a8002b646a9fd4df8c64be3cf65ef622131d9cc87c38e6b97e5ef72bbaafd3037e6fb35d28cd27c4f66b811b7c7aea813c29467395ff3d29d5e97bd1e89cf6c6d32abc68188b364d2fc179bf73a2ed191972fa6ab75453fb209bc2e48fc750e5efc3f476df8a4f1197e54f45c16a9496edd8ffe61e6892b34eb70b9aa79a1de64fcda7094918611e3ba0f1634d486ee4fd5adfa2414c392f86b049d30685da4b5ce4d31ccc8efaf459bed9fa72405923a2e04a08c48c5dbea14e2cf0192e70a2eede50929a0d16e726c856966db2a05811d5a08012a8faa660b0c130b4fe0f05e607cb8465fa348edd565037d1696772675e66f4c574ee8be1db1a6d5ed2102ac20e4ad6a510ee38e53051a77c0a1d45d2d8b775dbf220379e036257b03be217f7e17e7ac2bbdb845e495cb409483842a9d85080db778694b0838b08c000b399476ae7d112aa35d43298aa0036e36d057d14724836fd48609d441a497fb9f0523a4431f173cf62ef0e819ec15162c0f663562d7d444c5f188f3ca9b2ca1537b05ef02a042f838dd362a9baf1fbd027882cfdeb0ac414a7fe8eeb4168d874f1327ef9c1915832d3adc038b0d057075a401db8ffce4dcbf0a1a391174577fdf493784d51fe02e70936e8824ec38b7bbc0d97a55910301a7362df03a244c3ecb8b1d2529afe1aa25910accce8ba904179d7067d2c12a107300251dd94ad45929a841155c8e1842f6a8af7d3f0a1e1d5361d61c3b83fa500c2b92e5a96303b89c7eb97eac8a01257fe87dfb54acfbc15be6469a4ad0c98935a6d87e7cf5ad635ae95a0ef5f572ed20640b8eba608cc8cbe22c9b604d924cfe7bdfc029e1ae48e0a05059878ecd81bccc4c54b8110a865ec037fd71cbe2a5a88d13df5ad596124764f5616b3564a6c0145740058262db4a673e9a573bff36cad63ccde7b939ee2a6faa2d96603860a51d7cff8aac51bc58e0ab5696488f5bc2e0449931d40a7b7ed4a14022fcf489cdd8896f2e6d8b00c84d27c68336066959a57fdf41ce66da9620bcb4eaea2289138bf13d076ff9d32c1a61ca1f4dc4a43c1dfc0f6afef406a9cd6bbe999f8a1ac0b99c12bd806edaec63d645b5e9d6de1ee0bd924c409d0627814ebb256524cbbe7e97184e0f3f2dbd1e9b1486aeb590cfe5f38a0f5ffcdcb1ba47c352912f6cd2237c3d81f90c43da815f407e414dc1d6df81bc35904daeca77031048ca9fa0308dcee5daa0a14f1d3dcddbd0e54df08435ad83793314c8a8dd3f4ee51ef6a05dee71a9ab9b69199671017a6a78eddc100b1d90f192836d14dfddec176965a3930e00c66dea286fbe8140f1521ad00ce6aef2bda421a7f0c27c85ef76ad858589b3c95d8546ea368ae50a0418f740ba7b55cc540a5a0fdf7bce3d2966c52f3e4790cf1a8f608c685218f09b64972c6d09fc79a65395f648e7530afde435d1f2df1921881d706e69abaaa9fbba7d7b4925daf2ad8614ff4d2323e8ac64951747728c69e17e84f758c601fca44c2867cc01ec6fd23c9b4e0ab9db43c5c36758da21dab2c115b864137922221a847da1a36df7405587565235ec1b96bccf9684436a855cc0c754ada110a1933f94431babcbc2737849de593eced7bb7a66d10accd80231012f75f570afef778a1faea82b47356cee9f58ffc403f080f670dd660e401b9ad8f07e5a4e50407b3d39a9b6641f72ce29a81c3309100fdac880209b8cd93203aacfaea806b1fa79f7ba59532d139c9324331c59319a804776397c9e01ced296d2d76c355a46b968946566fbf915835eb6d4c84fb6d7fc4686fc9cf7d28b86fc0352a5514f2992aaa046749094d223b2525c27ebed3d4cebccf7af074922ae49201b1214c89b4be96be36bff71edf16baaafe55f8e7983b5e68f6fb27a57f3297641366f7b251aa66313880c95f81ee91cc009bf0de1e5e0bbb90e98615c0909fed6f5303e99c3614ca5a675a2242717a801655bd4225f5cb9a5b80fd92a63dac188880b175c6aeb42281b62dab2cb8c41612c52a62af6b2ca1b4e1b7a4fc373eee7ab9cd9456330fe38be9f3cedc2d8d0683e2c25c65451c308d949e6f2ee58a9ca496c5146ddeaabadce111fc286b67ddee37750e3f1485f16b0f9b01c85463ebf9c36efa39cfbb1ee2759ae0cec6387645ada4a3924a580fecb098e081549cba0fd380e3818ee99a0cca9de817d44a025fa9614cbaf82204dcbf919479b813799465e76d3485004c33869829fef02547b2bf18f97d875503112a94601bc0cfa0b3b4db1a7691f1a7dbbdcbc77d1997d0b377e56cf2f188b98e47aebae19a6078c2f736ab88ae09b393558bd3c4fb79012d6435461826fc6e2bcede72f8d08962df9be22d61f04a9e10c8411c59a35175cd793c5f3a030afaa80f684b5648da2fac53fccc84d103648bcf188719019fb453ae089f5dc1f0095bd0109c14a83a02415df3dc65993e506238515a86566a18724873a280257517db89be921f388e6f2d354263f5b7b680dbedc40e68873e597be6139df24936b8f55359ac9a7c45305bea92a8bb561df29b42f2801d63ef2e8d306481d12e06eba3b5882108427134fcd00480e45a63c7aa0f90db6dabfb454f278f9f61abe8a81613a385535c1dac1b1853749006ddab62c0cbec95f72e0c35af224adeeef1bb6758e674373d5eb225d86a8e97ad05eff28784d0e606b022e781db1b6a456d84a407e7b6b8570d3a3269fdea04bed5231e12edbd99a38b87b8c8737a68c0593189486dc04ef10764dcc52b8df9a034337b715eea29f814eacb9d321b2a908ca45e01e4e927b8eeff175787a4c5728c4a60a602630d9f2840580ea029d2312389e15fdaf788227ef29933ce3a51445806de0934db5ae35e91245797f1cf22696b628382b0459775a913498a69d1023cc2a2e91225da2772c9232e46f7edc786ab8739a2216597f093b54244c2608be8e3ccb5b1b09c70105f7c61ee43957a4bded73511692fc197f508ae11c95f2ccadb1da0f4624b8bd25349bfbbf5bee806ba5c0bb14d4132b13ddfb682a3c9b8790e860530fe48814fae5b87252576b9a1e2af942c0e9909805498ceef0f906a81a11b3c31e6a6edaecfe94b636b6159b1f65db282f97e59543f4c93e2ea0c6a6834ff551fead9d6c1caecb2222e8f8259b28b2a2c40748a60d7d1f238bac924441009e9d5a9e490ca0c534cadafcbc1d0a8194f28fb43970207dc3a3c121a1ccf4452327c349ae9983c6bc582f84d5c3f000636448b243502faf521142cc2d286e53a8b1aabc1d55bc9471bd8e82bc10b9892b37536ce0429c427170abc912c27f8e3d8842887dfa072ec38f4d4f7e593c46d7b47d0f92adf4d84ced5e3fb5bfb17bc9b4389f05e2b03eb2c4c141285e5c02e674d9eee80cc2e4ddc58774bdceaa1fd5e8bdeb130613e6e344863d1d0a41cc41e364940c9b63c8e5008097fea715bf2406f89ba844ecf7c285e50bb790297b4bec18532c499b9d84cc003624ef524b719af28f09c6589ee6edeb1c90e25df8de5d957182888f7a34740c9cb85724c4a100b124734ad4859ad1da2f036b8f827f1909e00e1dafc764126a26ea0e4eecaf6fcb29edf1ecad05fb494d2735e489ccff2bb35a24e74f197438c98719fba7165206e73391fce98273c3ebd4f86e4e71f743254a0d46320dec09e5ab81b6c4e952672d5f65481c2d740dcedb4a60958ced01c5af6c239a6aa7346194fec71cd9256a2c447cbf3951cb0a50664b76dab4f5b891166073e4d65861d264f5888a9308d17c65159ef5c84c4364ed28861dbaf7ff166b1c41680b306b8efcab470d285ced2b9511932ae7c93ad83bbb9589103a98f5b4289576d9de1bd7d86541048b9210d010517d36994427eeb68f951207866e06bb1ca35406112a87a421cabd4ced411d857d6d47ec86cb7737d6811e0661e942bd789361748bcbe0d81d7d43459d8478bafa1b447e9bc980c209732915df06b0bf30e5b5eb339b0ff3aa85d9dbcaacc81f76d2b3723b5d30ef2341ae4adb594f8e410e1c0d0d1f562f16f80deccc958d32ebd27afce8e8c502b5034bb67807a19d80e30cbfee96ae9ad08f83bc4f36af5f3333e0f2992b0a2584ff2b8022d8ad7c742c114b93973879d49f1e8b5eb1d6e6d2f4e5a164db1ee31e7eb4c1e775b2bf01581065741555266cb6c4a6fd7f7d11724a04f7597fe9e838f11fc2a66b7fd889e9df174509ef98ed365e3d48da9dd76466473b9a204436346727796580f9dcd3365bfb20b8e5bc60af6afbc471810ccf0387998c4e4792e6ee0ba0b0814db8e84553486d1dc91f4c95a624fefc9286a97056e6599683700299c82f5df1b0c15597a0107ed1ee701455e5c4076f107618cecca3d7502cf150a36336703b2f50aff007277ed8158713e8e2aefcffcd9962c7a9eee73d22c2be997726f6aca3aae2b3378d670ed2d451a2b3ba81a2f4928a2de807093bbde47f5a5c83e70291d446824c552b63b223212c167d870a0c3f795dae840f7f6c30e8231115ce84fce32d0402d1ab4a86a09ae268072914d418071e86847242f1a0870242b1a8c22eea350cb4ab2bbb13e8af55cb442c", 0x1000}) syz_open_dev$audion(0x0, 0x0, 0x0) [ 517.709734] binder_alloc: binder_alloc_mmap_handler: 20124 20001000-20004000 already mapped failed -16 [ 517.746224] binder: BINDER_SET_CONTEXT_MGR already set [ 517.751626] binder: 20124:20127 ioctl 40046207 0 returned -16 [ 517.821645] binder_alloc: 20124: binder_alloc_buf, no vma [ 517.824887] binder: 20139 RLIMIT_NICE not set [ 517.827484] binder: 20124:20132 transaction failed 29189/-3, size 0-0 line 2973 [ 517.888167] binder: undelivered TRANSACTION_COMPLETE [ 517.896273] binder: undelivered TRANSACTION_ERROR: 29189 [ 517.987034] encrypted_key: insufficient parameters specified 06:09:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x90000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000240)={0x2, 0x41f7b841, 0x9, 0x0, 0x0, [], [], [], 0x1, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f8, &(0x7f0000000180)={0x2, 0x3, @local}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1f182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81940d8831eb71596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000200)=0x10) recvfrom(r0, &(0x7f0000000480)=""/239, 0xfffffddf, 0x0, 0x0, 0x2b) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) close(r0) [ 518.074049] binder: undelivered TRANSACTION_COMPLETE [ 518.079378] binder: undelivered transaction 301, process died. 06:09:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/121, 0x79}], 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x1, {0xb83, 0x6, 0x6, 0x2}}) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "80151de2518c1571961eb58b0b2db9db8b988cc3"}, 0x15, 0x3) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x2285, [], &(0x7f0000000040)=0x7ff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:30 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1994"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 518.122268] encrypted_key: insufficient parameters specified [ 518.238054] binder: 20165 RLIMIT_NICE not set [ 518.242804] binder: 20165 RLIMIT_NICE not set [ 518.286486] binder_alloc: binder_alloc_mmap_handler: 20159 20001000-20004000 already mapped failed -16 06:09:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 518.409115] binder: BINDER_SET_CONTEXT_MGR already set [ 518.414721] binder: 20159:20165 ioctl 40046207 0 returned -16 [ 518.475315] binder_alloc: 20159: binder_alloc_buf, no vma [ 518.477895] binder: undelivered TRANSACTION_COMPLETE [ 518.481069] binder: 20159:20168 transaction failed 29189/-3, size 0-0 line 2973 [ 518.486367] binder: undelivered TRANSACTION_COMPLETE [ 518.499015] binder: undelivered transaction 305, process died. 06:09:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9b6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0xfff}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630408"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000002000/0x3000)=nil, 0x3000}) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) [ 518.651701] binder: undelivered TRANSACTION_ERROR: 29189 06:09:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x5, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x10001, 0xb, 0xf, 0x0, 0xffffffffffffffe0}, @map={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x6, 0x4, 0xf, 0x1, 0xffffffffffffffd4}, @alu={0x7, 0x0, 0xf, 0x8, 0x3, 0xfffffffffffffffa, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x100000001, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x1, [], r4, 0x2}, 0x48) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x401, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000003780)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket(0x6000800000000010, 0x2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000003880)='/dev/dmmidi#\x00', 0x1fe, 0x10000) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f}}, 0x20) readv(r3, &(0x7f0000003680)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/9, 0x9}, {&(0x7f0000001380)=""/24, 0x18}, {&(0x7f00000013c0)=""/76, 0x4c}, {&(0x7f0000001440)=""/72, 0x48}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/143, 0x8f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/202, 0xca}], 0xa) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffffffffffa}}, 0x10) write(r2, &(0x7f0000000240)="fc00000016000700ab092500090007000aab80ff010052020000369321000100fd8ed69ad84e3d951e6a598514fe050000000000ba6da9cf39c10579fa79d0e45bca83d3edf27595057d0000030510fa2c1e998656aa0700000046fe0000020704020800008c0000036c6c256f1a272f2e117c35ebc20521400000040000897f78e50a9f400600000000000000d7d556272f5baa000005de0d5b32c6436e7fbf6ab82088f8e1039fe280fc83be82f605f30c9ddef2fe082038f4f8b29d03ff46328326714d334f170e5bbab2ccd243f295ed94e0ad91bd388e712f3e26ad7e25d42dd16b57e583df150c3b0000000046a6a1ed7cf80a000000000000", 0xfc) [ 518.904890] binder: 20191:20195 unknown command 134505228 [ 518.910606] binder: 20191:20195 ioctl c0306201 20000140 returned -22 06:09:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40220}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x24}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb1dd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x51}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x4040810) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 519.055144] binder: 20191:20195 got reply transaction with no transaction stack [ 519.062905] binder: 20191:20195 transaction failed 29201/-71, size 0-0 line 2741 [ 519.159537] binder_alloc: binder_alloc_mmap_handler: 20191 20001000-20004000 already mapped failed -16 [ 519.195515] netlink: 228 bytes leftover after parsing attributes in process `syz-executor5'. [ 519.255674] binder: BINDER_SET_CONTEXT_MGR already set [ 519.261134] binder: 20191:20195 ioctl 40046207 0 returned -16 [ 519.266715] netlink: 228 bytes leftover after parsing attributes in process `syz-executor5'. [ 519.307433] binder_alloc: 20191: binder_alloc_buf, no vma [ 519.313260] binder: 20191:20218 transaction failed 29189/-3, size 0-0 line 2973 [ 519.402159] binder: 20191:20195 unknown command 134505228 [ 519.407916] binder: 20191:20195 ioctl c0306201 20000140 returned -22 06:09:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) 06:09:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5bfc}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:09:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 519.542700] binder: release 20191:20195 transaction 308 out, still active [ 519.549781] binder: undelivered TRANSACTION_COMPLETE 06:09:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 519.597418] binder: undelivered TRANSACTION_ERROR: 29201 [ 519.603084] binder: send failed reply for transaction 308, target dead 06:09:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) socket$bt_cmtp(0x1f, 0x3, 0x5) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 519.747006] binder: undelivered TRANSACTION_ERROR: 29189 06:09:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x12542, 0x0) r1 = mq_open(&(0x7f0000000000)='ppp1\x00', 0x8c0, 0x4, &(0x7f00000000c0)={0x7fff, 0x800, 0x101, 0x9, 0x3, 0x1, 0x80, 0x7fff}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) migrate_pages(r2, 0x2, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x7) 06:09:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 519.934066] binder: 20242:20244 unknown command 6 [ 519.939080] binder: 20242:20244 ioctl c0306201 20000140 returned -22 06:09:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x72b4, @mcast1, 0x800}, @in6={0xa, 0x4e22, 0x28000, @empty, 0x91}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e22, 0xe8, @mcast2, 0x4}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0xa9, @remote, 0x101}], 0xcc) write$apparmor_current(r3, &(0x7f0000000140)=@hat={'permhat ', 0x4, 0x5e, ['vboxnet0\x00', '\x00', '/dev/autofs\x00', 'em1mime_type/-wlan1{eth1bdev\x1e!loeth0[#\x00']}, 0x58) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x63) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x14) ioctl$KDSETMODE(r3, 0x4b3a, 0x3ff) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 519.977209] binder: 20242:20244 got reply transaction with no transaction stack [ 519.984880] binder: 20242:20244 transaction failed 29201/-71, size 0-0 line 2741 [ 520.074626] binder_alloc: binder_alloc_mmap_handler: 20242 20001000-20004000 already mapped failed -16 06:09:32 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.118982] binder: BINDER_SET_CONTEXT_MGR already set [ 520.124514] binder: 20242:20244 ioctl 40046207 0 returned -16 [ 520.241879] binder_alloc: 20242: binder_alloc_buf, no vma [ 520.247767] binder: 20242:20262 transaction failed 29189/-3, size 0-0 line 2973 06:09:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x12542, 0x0) r1 = mq_open(&(0x7f0000000000)='ppp1\x00', 0x8c0, 0x4, &(0x7f00000000c0)={0x7fff, 0x800, 0x101, 0x9, 0x3, 0x1, 0x80, 0x7fff}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) migrate_pages(r2, 0x2, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x7) [ 520.287851] binder: 20242:20262 got reply transaction with no transaction stack [ 520.288474] binder: 20242:20244 unknown command 6 [ 520.295940] binder: 20242:20262 transaction failed 29201/-71, size 0-0 line 2741 [ 520.300413] binder: 20242:20244 ioctl c0306201 20000140 returned -22 06:09:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0007e627bb7c9c00bf00df406fb452b2be56b781d463daf11c8604871963f16dd78a6e60bed23bef2f3490766740ed93d385fc33b3ec78c8ee7f84e96796c8dfbc08393e00d11e018863a9cf11bce4622ac29272653dd49aa1254d737f365becd68f04e4aaff5b8156f0758cffb595e7073abc60a892f980fbedc4840e044a328c6e696abee89057346e4cfedd45154c6cad070642e2e50df22fdc74c59e8940aa77dd9609d0b9e78b4816f1cd2eae7625e7272f67ed2b4ec6433b588f3b9df1ce78ccfed20820e8d07fcc339cee9bce417514a22169e7f57a5228e171a03abb23a5ae1133f57c66d2a9ae99bc5954ed31f7611b195f8e6c8e0b5f4c3c44f7"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x100) getsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0x3ff, 0x6, 0x1000, 0x400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 06:09:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffffff, 0x6100) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@initdev, @empty}, &(0x7f0000000080)=0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 520.466879] binder: release 20242:20244 transaction 312 out, still active [ 520.474040] binder: undelivered TRANSACTION_COMPLETE [ 520.485588] binder: undelivered TRANSACTION_ERROR: 29201 [ 520.491166] binder: undelivered TRANSACTION_ERROR: 29201 [ 520.496814] binder: send failed reply for transaction 312, target dead 06:09:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xfc, 0x0, &(0x7f0000000240)="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"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x22, 0x0, &(0x7f00000000c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100000001, 0x2040) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000901000)="9f"}) close(r0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) [ 520.958883] binder_set_nice: 2 callbacks suppressed [ 520.958896] binder: 20290 RLIMIT_NICE not set 06:09:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000ffc000/0x1000)=nil}) [ 521.016573] binder: 20285:20295 got reply transaction with no transaction stack 06:09:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x6, 0x10000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2400, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300ffff0100020007e49a00ff7f04009a00ccf34237a3e1a589d2e79c271932dbbd0da141a7d8e3ad144126f93c05199cf819a0fee5fcbc3b4a054459ee30ff1f07ea"], &(0x7f0000000140)=0x16) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={r5, 0x9, 0x800, 0x1, 0x4, 0xffffffffffffffff}, &(0x7f00000001c0)=0x14) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000300)={0x0, 0x7, 0x4, &(0x7f0000000100)=0xffffffffffff7fff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x420041, 0x0) r6 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0x7) 06:09:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x80000, 0x1f) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baf80c66b8112a228a66efbafc0cecbaa000ecdef90f01cab8e2008ec8bad104ed26da48ee66b9800000c00f326635004000000f300fc799f6c626f226260f013c", 0x41}], 0x1, 0x40, &(0x7f0000000140)=[@efer, @dstype3={0x7, 0xa}], 0x2) 06:09:33 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x800000004, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100), 0x10) close(r1) close(r0) 06:09:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.621897] binder_alloc: binder_alloc_mmap_handler: 20285 20001000-20004000 already mapped failed -16 [ 521.666974] binder: 20295 RLIMIT_NICE not set 06:09:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.687157] binder: BINDER_SET_CONTEXT_MGR already set [ 521.692775] binder: 20285:20287 ioctl 40046207 0 returned -16 [ 521.713400] binder_release_work: 1 callbacks suppressed [ 521.713414] binder: undelivered TRANSACTION_ERROR: 29201 06:09:33 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x400) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) write$P9_RGETLOCK(r0, &(0x7f0000000380)={0x27, 0x37, 0x2, {0x1, 0x7, 0x9, r6, 0x9, '/dev/kvm\x00'}}, 0x27) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0xc0010058]}) 06:09:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff66, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c63c700f6d8dcf4746eef10a500000000000000004e27056e342274482f2c747e6bd2ca8ad187ebe09467246644e7f1a39866a3e8cd0924d124a401a916de9ed49a8879beead408e0f8b07d2c99afa366724ad45c00d6bea188d25f23a00595816bdd8c678d2440f92ebb0b00ef0997de57c0d9ff2a07c399"], 0x25, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000300)={0x9, 0x8, [{0x9}, {0x44717394, 0x0, 0x1}, {0x0, 0x0, 0x8}, {0x8001, 0x0, 0x1}, {0xfff}, {0x5, 0x0, 0x8}, {0x10001, 0x0, 0x6c3}, {0x2, 0x0, 0x6}, {0x380, 0x0, 0x10000}]}) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x657, 0x7, 0x2, 0x7, 0x5, 0x6f49c144, 0xf1, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e22, 0xfe, @loopback, 0x5da}}}, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) openat(r0, &(0x7f0000000240)='./file0\x00', 0x400, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:34 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000240)="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", 0xfffffffffffffd59) 06:09:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) geteuid() ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="008000000b0000008a55e09137b1f7b91954f3"]) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x200000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) quotactl(0xfd, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000003c0)="171dc84565eee3aa88d4e8d5cdf108415f22360f8bd62208046227e64c1aa20227e95b71a968388dcaf2f06761a8d5a26164b3c57f9baac684877b88c4f499f24e85d1cc7d2a2c514b994c062e037dcdcdbfc07d6226d8528e73e8d9b9a7297116ab9d812da0760ce0ad29918de8e6b1869ae8582a93c80b4f39053b8e878b62dd44db31f75039ffda68d059dd2581cd4be54a62154ff9e1b0e9bdbcc1ead22d92a16867ff00ab11aa0fb6614332b9d7f985c6ee9f5b") ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 522.210946] binder_transaction: 1 callbacks suppressed [ 522.211735] binder: 20346:20351 transaction failed 29189/-22, size 0-0 line 2834 [ 522.231933] binder: 20346:20348 got reply transaction with no transaction stack [ 522.239445] binder: 20346:20348 transaction failed 29201/-71, size 0-0 line 2741 [ 522.299848] binder: undelivered TRANSACTION_ERROR: 29201 06:09:34 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x2, 0x100}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 522.408302] binder: undelivered TRANSACTION_ERROR: 29189 06:09:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1000000000000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x200100) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x8, 0x0, [{}, {0x1dd, 0x0, 0x1}, {0x4000097f, 0x0, 0x8}, {0xafe, 0x0, 0x6}, {0x8d0, 0x0, 0x1}, {0x364, 0x0, 0x7f}, {0xbdf, 0x0, 0x200}, {0xbfe, 0x0, 0x9}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x46) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_open_dev$radio(0x0, 0x0, 0x2) 06:09:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 522.614839] binder: 20369:20371 transaction failed 29189/-22, size 0-0 line 2834 06:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) 06:09:34 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 522.798594] binder: 20373 RLIMIT_NICE not set [ 522.857094] binder: 20369:20371 transaction failed 29189/-22, size 0-0 line 2834 06:09:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000d4d24f5e1aaf1b1ee5010000000000000074337efd68599ad0e42fb851a4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 522.913367] binder: undelivered TRANSACTION_ERROR: 29189 06:09:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xe665af5, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(r2, 0x406, r0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x6939, 0x4) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x8c3, 0x14, 0x2, 0x1, "05f1465046bfdc1a7f8df7f706c3365fdbc600d3b5d9d0170282935c77db4e4e"}) [ 523.055427] binder: undelivered TRANSACTION_ERROR: 29189 [ 523.199159] binder: 20395:20396 transaction failed 29189/-22, size 0-0 line 2834 06:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e21, 0x80, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800}, @in6={0xa, 0x4e24, 0xec2e, @empty, 0x8}, @in6={0xa, 0x4e24, 0x8001, @local, 0x20}, @in6={0xa, 0x4e22, 0x5a, @dev={0xfe, 0x80, [], 0xd}, 0x8000}, @in6={0xa, 0x4e24, 0x7, @empty, 0x5}], 0xb8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 523.316997] binder: 20395:20401 transaction failed 29189/-22, size 0-0 line 2834 [ 523.363700] binder: undelivered TRANSACTION_ERROR: 29189 06:09:35 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101002) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, ["", "", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffea8}, 0x1, 0x0, 0x0, 0xc000}, 0x4000801) [ 523.728323] binder: undelivered TRANSACTION_ERROR: 29189 06:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0xfffffffffffffffd, 0x0, [0xc0010058]}) 06:09:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x9, 0xfffffffffffffffc) 06:09:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1000000000000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x200100) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x8, 0x0, [{}, {0x1dd, 0x0, 0x1}, {0x4000097f, 0x0, 0x8}, {0xafe, 0x0, 0x6}, {0x8d0, 0x0, 0x1}, {0x364, 0x0, 0x7f}, {0xbdf, 0x0, 0x200}, {0xbfe, 0x0, 0x9}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x46) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_open_dev$radio(0x0, 0x0, 0x2) [ 523.958995] binder: 20425 RLIMIT_NICE not set [ 523.963735] binder: 20425 RLIMIT_NICE not set [ 524.016425] binder: 20421:20430 got reply transaction with no transaction stack [ 524.024433] binder: 20421:20430 transaction failed 29201/-71, size 0-0 line 2741 [ 524.140320] binder_alloc: binder_alloc_mmap_handler: 20421 20001000-20004000 already mapped failed -16 06:09:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) [ 524.195878] binder: BINDER_SET_CONTEXT_MGR already set [ 524.201321] binder: 20421:20425 ioctl 40046207 0 returned -16 [ 524.266917] binder_alloc: 20421: binder_alloc_buf, no vma [ 524.272725] binder: 20421:20442 transaction failed 29189/-3, size 0-0 line 2973 06:09:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03f0d774143adbe22f08913085928e478fa887fa47c53c9c5203b2dab04efbbbd3f9d93427792c95158a79f4bbcb171a4b9a7b9cf39c6d607e7a01b2c887579aa9dea3ff28f7457eeaca1b7cb7e52c554fd8594e59bdb6f4541d1b963217d3819d44c19d0f84f71349ec564e1fb8b8d941fee0f7a1ea993423216ac15280"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x14c, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 524.335345] binder: 20421:20430 got reply transaction with no transaction stack [ 524.343051] binder: 20421:20430 transaction failed 29201/-71, size 0-0 line 2741 [ 524.446706] binder: release 20421:20425 transaction 325 out, still active [ 524.453894] binder: undelivered TRANSACTION_COMPLETE [ 524.460569] binder: 20448 RLIMIT_NICE not set [ 524.472721] binder: release 20421:20425 transaction 325 in, still active [ 524.479615] binder: send failed reply for transaction 325, target dead [ 524.486509] binder: undelivered TRANSACTION_ERROR: 29201 [ 524.593823] binder: undelivered TRANSACTION_ERROR: 29201 06:09:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) time(&(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x240001) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000600aaaaaaaaaa289628f0bc22edaaa8aaaaaa1daaaaaaaaaa2d58bbcb000000ffffffffffff4f88d85b2ff12efe5c0524fdbc9a78e2d17f3100000000b08f4548d04a68986c8a0da55697d1475abc1aea9e3b82f6af20d099c02548b944f92f00000000000000000000"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x400040) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x100000000, 0xe, 0x7, 0xd8, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 524.722117] binder: undelivered TRANSACTION_ERROR: 29189 06:09:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bpq0\x00', 0x13b800000000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7e9693687feafc50adb994000000000000"]) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 524.858549] binder: 20465:20467 ioctl b101 0 returned -22 [ 524.962741] binder: 20467 RLIMIT_NICE not set [ 524.967401] binder: 20467 RLIMIT_NICE not set [ 525.014887] binder: 20465:20476 got reply transaction with no transaction stack [ 525.022697] binder: 20465:20476 transaction failed 29201/-71, size 0-0 line 2741 06:09:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x44000) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 06:09:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x221, 0x0, 0x0, 0x12f) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 525.119623] binder: 20465:20476 ioctl b101 0 returned -22 [ 525.131381] binder_alloc: 20465: binder_alloc_buf, no vma [ 525.182134] binder: BINDER_SET_CONTEXT_MGR already set [ 525.187488] binder: 20465:20481 ioctl 40046207 0 returned -16 [ 525.213507] binder: 20485 RLIMIT_NICE not set 06:09:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [0xc0010058]}) [ 525.256283] binder: release 20465:20467 transaction 330 out, still active [ 525.263513] binder: undelivered TRANSACTION_COMPLETE [ 525.274313] binder: release 20465:20467 transaction 330 in, still active [ 525.281214] binder: send failed reply for transaction 330, target dead 06:09:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x7fc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xfffffffffffffee9, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000000000179d0000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 06:09:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 06:09:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="94810cb4b41442830af4e2ceb5b051294f823e989ee6e364644683e5112e4a6bdb3cb1b0aa4e9bc87f23ed39199abea4c5cbcfc69bd17e099862d67b13ac3ab3bb4a9abce40e37ba5fa7f7a3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7ff, 0x4}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x3c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, [], 0xa}, 0x3}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000280)=0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="66baf80cb8189df088ef66bafc0ced66b8a0008ee8f30f5e6d0966b8e3008ed00f08d2410026260fc7a90b0000000f20e035080000000f22e00f01f30f001cc3", 0x40}], 0x1, 0x10, &(0x7f0000000080)=[@dstype0={0x6, 0x9}, @cr4={0x1, 0x10000}], 0x2) [ 525.809524] binder: 20509:20510 ioctl c0306201 200000c0 returned -14 [ 525.862996] binder: 20509:20517 ioctl c0306201 200000c0 returned -14 06:09:38 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000f008258a604e5e5ae355eeeec79727d5ce87aba75b70a49c95e9b2fdf3ec2e66f36a852b70cad29107b2383f7f3c98c9ccfa12457127d04998568635033fa2f2dbd", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00'], 0x3}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x6, 0x9, 0x9, 0xb0, 0x15, 0x9, 0x7ff, 0xbb9, 0x400000000000, 0x7, 0x1000008}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) 06:09:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:09:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) io_setup(0x10000, &(0x7f0000000240)=0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x80000001, r1, &(0x7f00000000c0)="71c6b1c688aa0af82326da635958b315ff6ac7b81ad212f65205855a4100e7684ddd68679ac5f2439fb8e46a346292709cfdc29e7617bb48fb8a15e9aef2d018", 0x40, 0x200, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffe, 0x8000) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local}, &(0x7f0000000280)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$isdn(0x22, 0x3, 0x26) connect(r3, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:38 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x501000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x3, 0x80}, {}, {}, {0x0, 0x0, 0x0, [], 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) 06:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x14, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 526.413979] binder: 20532:20536 unknown command -1135890369 [ 526.419892] binder: 20532:20536 ioctl c0306201 20000140 returned -22 06:09:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 526.575855] binder: 20532:20536 got reply transaction with no transaction stack [ 526.619014] binder_alloc: binder_alloc_mmap_handler: 20532 20001000-20004000 already mapped failed -16 [ 526.671474] binder: BINDER_SET_CONTEXT_MGR already set [ 526.677078] binder: 20532:20561 ioctl 40046207 0 returned -16 [ 526.681962] binder_alloc: 20532: binder_alloc_buf, no vma [ 526.704904] binder: 20532:20536 unknown command -1135890369 [ 526.710820] binder: 20532:20536 ioctl c0306201 20000140 returned -22 06:09:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x402000, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x100000001}}, {{0xa, 0x4, 0x0, @local}}}, 0xffffffee) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 06:09:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x9) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x8c, 0x0, 0x0, 0x13a) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 526.801120] binder: 20532:20562 got reply transaction with no transaction stack [ 526.803023] binder_release_work: 2 callbacks suppressed [ 526.803088] binder: undelivered TRANSACTION_ERROR: 29201 [ 526.819764] binder: send failed reply for transaction 334 to 20532:20536 06:09:38 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000200)=ANY=[@ANYBLOB="943eee01c2902f03549dd7f3e27c4deed3156746e2a58a58c76b1fc819ebebf8150e70b587ef62ae7165586e8a42ee652033e8a51a8019095559268c914a1fc6e4fa68caf04da4d5ec4517f7a14b214a22beb36c82ffcfa3967d6e2732d6213c3c41710c6d7fd14d2a86e7cd9474ff2377278376a7e8e1d8166c16ddc2bae551096e968d6962f6f813aedf79af1eec24d037c128a68ecf2e9475358254f5aef29407228bf15e4cd21c6e07af7bf4c176ae"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3454f6fc, &(0x7f0000ff3000/0x1000)=nil, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 526.888122] binder: undelivered TRANSACTION_ERROR: 29201 [ 526.893890] binder: undelivered TRANSACTION_ERROR: 29189 06:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x802, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:09:39 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000200), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000380), &(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x800, &(0x7f0000000480)) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400040) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0/bus\x00', r0}, 0x10) 06:09:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200040, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000000c0)={0x9, 0x9, 0x100000001, 0x5, 0x3ff, 0x80000001}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = getpgrp(0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x437c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x48, 0x0, &(0x7f0000000240)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r4 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03720850b43363632e840314d4e842cf5518f62c2f03ff6130e4bf186dd0b9447d1c180004b85bc4f8f4035ab4a7e36976b86f728067dd819c4781", @ANYRES64=r4], 0x0, 0x0, 0x0}) [ 527.205593] binder: undelivered TRANSACTION_COMPLETE [ 527.210896] binder: undelivered TRANSACTION_ERROR: 29189 06:09:39 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="16e0127245c1af24cb61d3b6862566ecee214caf2ddc8a765c6f8547706e7938ffaafb97c0b93a1afffed8d424b071a0d1bc093e05d61773b35c47052c8adfbe3bc81610ab8c942a0f19ffa54a91419398d33ee1ea0686c43d5f1ddf61f77d39"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:09:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=ANY=[@ANYBLOB="24000000c0a4868900000000000000001c140000fe000005000000000800040000000000"], 0x24}}, 0x0) 06:09:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$audion(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="2667dae9b8d5008ee8670fae7204b8d4000f00d80f21ba360fb05cc60f01da36660f613c0f447c00baf80c66b8822a648b66efbafc0cb80000ef", 0x3a}], 0x1, 0x8, &(0x7f0000000340), 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r6 = fcntl$getown(r2, 0x9) sched_getparam(r6, &(0x7f0000000240)) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40000) [ 527.486478] binder: 20596:20603 unknown command 1342730755 [ 527.492442] binder: 20596:20603 ioctl c0306201 20000180 returned -22 06:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c4e17e7f662341dbe1b805000000b97b0000000f01c1363e0f195200460f01dfc7442400f0000000c744240200a00000ff1c2467f3460f005e00470f3266460f3882173e0f09", 0x46}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype0={0x4, 0x8}], 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000180)={{0x1, 0xc}, 0x0, 0x100000001, 0x23, {0x0, 0x8}, 0x100000001, 0x400}) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000200)={@dev, @multicast2, @loopback}, &(0x7f00000002c0)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'ipddp0\x00', 0x10000}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/38, 0x26, 0x1, &(0x7f0000000380)={0x0, 0x989680}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x10001, 0x0, 0x0, 0xf45]}) 06:09:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:09:39 executing program 5: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) 06:09:39 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:09:40 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:40 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 528.195341] binder_alloc: binder_alloc_mmap_handler: 20596 20001000-20004000 already mapped failed -16 [ 528.258173] binder: BINDER_SET_CONTEXT_MGR already set [ 528.263758] binder: 20596:20603 ioctl 40046207 0 returned -16 [ 528.328633] binder_alloc: 20596: binder_alloc_buf, no vma [ 528.334331] binder_transaction: 4 callbacks suppressed [ 528.334363] binder: 20596:20648 transaction failed 29189/-3, size 0-0 line 2973 [ 528.377973] binder: release 20596:20597 transaction 339 out, still active [ 528.385075] binder: undelivered TRANSACTION_COMPLETE [ 528.435890] binder: send failed reply for transaction 339, target dead 06:09:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x9a800, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x80000001, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="b4ce7f98eda52ac05489635f1530b64b95a5b0be00b68b5df5bc7c9a9eb3a1adec54f1b3fdcb3dad9e7f8162ec431c5a5a76d212038873ed3bd7e93fbd038f13fea3f3c5cb2277551c546ba57abcbfb1a0903e22dbdc0cfec75565321d4f7f7e3a3b822af38784845f3b5cc6520fac92b61661ae66e62931a350a7bf92371a9ce6d2fef98643ffe52a70a66fe60ec48c574b93b1cfe665dc0c16ad19f9453dd6ef8cf0794c799d5cecacb8eced15680ed4d0cb7c305e6a3c7fa5a1d7bc794d09ad05b5b99bf349ee0c302c92ed3838a1bace4161fbcd69ad0000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00') fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='net/ip_tables_targets\x00', 0x16, 0x1) sendfile(r0, r0, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) 06:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000000000000b00000002000000e9050000080000004af4ffff00000000010000000180000000040000ffffffff"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xda81dd62c9bfc144, 0x0) bind$vsock_dgram(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) 06:09:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x94000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x101}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x41) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 528.550742] binder: undelivered TRANSACTION_ERROR: 29189 [ 528.726275] binder: 20669 RLIMIT_NICE not set [ 528.730974] binder: 20669 RLIMIT_NICE not set 06:09:40 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) splice(r0, &(0x7f0000000040), r1, &(0x7f0000000080), 0xe25, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x9, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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") [ 528.794714] binder: 20669 RLIMIT_NICE not set 06:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.858804] binder_alloc: binder_alloc_mmap_handler: 20665 20001000-20004000 already mapped failed -16 [ 528.939721] binder: BINDER_SET_CONTEXT_MGR already set [ 528.945236] binder: 20665:20669 ioctl 40046207 0 returned -16 06:09:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="8e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:09:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0xffffffffffffff91) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 528.984552] binder_alloc: 20665: binder_alloc_buf, no vma [ 528.990296] binder: 20665:20686 transaction failed 29189/-3, size 0-0 line 2973 [ 529.042276] binder: 20669 RLIMIT_NICE not set 06:09:41 executing program 5: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20000000) unshare(0x24020400) r0 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x5, 0x4002) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x4e23, 0x8, @mcast2, 0x6}}}, 0x88) clock_gettime(0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x400, @mcast2}}, 0x2, 0xffffffff8d976101}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000200)=0x84) [ 529.108598] binder: 20665:20677 got reply transaction with no transaction stack [ 529.116423] binder: 20665:20677 transaction failed 29201/-71, size 0-0 line 2741 06:09:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 529.268121] binder: undelivered TRANSACTION_COMPLETE [ 529.273454] binder: undelivered transaction 343, process died. [ 529.281358] binder: undelivered TRANSACTION_ERROR: 29201 [ 529.287066] binder: undelivered TRANSACTION_COMPLETE 06:09:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0xad, @dev={0xfe, 0x80, [], 0x15}, 0x7f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) pwrite64(r1, &(0x7f0000000180)="b5c1e75adfa8ceb96c92394dca9ce85e377a2a6394039dcd6efd411c8869fe21191864fd3a753449bd96225aabf019775936f67833b436a5823d0b935512be66043ffc2710a412fdf1641f2bbd060bc01451ad33ff22dfe434b71252", 0x5c, 0x18) 06:09:41 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RSTAT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7c000000fd000000007500000000000000000000000000223c00000000000000000000000000c45c4cd000000000000000002600217b5b232c7b4073797374656d5c6d643573756d70707030776c616e312a73656c696e75782705002d7070703100002600747275737465642e6f7665726c61792e6f726967696e0083879b01"], 0x7c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)) 06:09:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000000c0)={0x8000000000000, 0x7f}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000400)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) [ 529.406702] binder: undelivered TRANSACTION_ERROR: 29189 06:09:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:09:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) [ 529.611040] binder: 20721 RLIMIT_NICE not set [ 529.615797] binder: 20721 RLIMIT_NICE not set [ 529.672830] binder: 20721 RLIMIT_NICE not set [ 529.748278] binder_alloc: binder_alloc_mmap_handler: 20715 20001000-20004000 already mapped failed -16 06:09:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5cb, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0xffffffff00000000, "93ae9834f1144f314052626297fe62c2e4ccb450635f4b50555ab6502217bc84", 0x3, 0x2, 0xfba, 0x8000c, 0x19, 0x2, 0x1000, 0x401}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @raw_data="d358c35b05f563a559343434fe0fa851b10ecc8cbff1cc4febdfc7487f9ef61ddb242ef87d4c480c9b91d23ee1035da40a2b965bf8b05ce3de70b23bdb6d53c8f4e9989a16277230d4600022248910e7f115c9cbd437363c43bb4e742be3f646a3bb111d0310ab69d630ede47b902ad3d0d342ff5367db2fedc326a96dc6cdac3ed933cec09b089a474f4f73d8741f8dd9c070aff852a2c62591414bcb4150c28a88e4d1463028b5e94baa4ca66a57fa03c9616422ac8f948916171ab10447b63a6c441acd368962"}) [ 529.794367] binder: BINDER_SET_CONTEXT_MGR already set [ 529.799771] binder: 20715:20721 ioctl 40046207 0 returned -16 06:09:41 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0cc5e16b60d3ee64c150e55f03cd3a445a234d1ef59676cae6c769e7366a7db42a88ad9b8b1bfd7f1d68bba1ec9399ce3c4a8e9c24f0f1c5bc5f24d66266157a253299b4fc185589e4e0487cb5899fb3cdd8eded2792c389af8614"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 529.889913] binder_alloc: 20715: binder_alloc_buf, no vma [ 529.895719] binder: 20715:20738 transaction failed 29189/-3, size 0-0 line 2973 06:09:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4102, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f00000001c0)=0x7, 0x12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000140)={[{0x20000000000000, 0x10000000, 0x5, 0x7fff, 0x400, 0x5, 0x10001, 0xb0ac, 0x1f, 0xad, 0x7, 0x7, 0x7}, {0xe9, 0xffffffffffffffff, 0x6, 0x8, 0x0, 0x80000001, 0x200, 0x100000000, 0x8, 0x7, 0x800, 0x6230, 0x7}, {0xfffffffffffffffd, 0x100000001, 0xe18, 0x3, 0x1, 0x8, 0x0, 0x0, 0xf5, 0x7, 0x8001, 0x2, 0x1}], 0x85}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x300, @tick=0x2, 0x80000001, {0x0, 0x9}, 0x8000000000000, 0x0, 0x3}) [ 530.022218] binder: 20729 RLIMIT_NICE not set 06:09:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) accept(r0, &(0x7f0000001580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000001600)=0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f0000001680)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000016c0)={@multicast1, @remote, 0x0}, &(0x7f0000001700)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001780)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001b00)=0x14, 0x80800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b80)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001bc0)={@multicast2, @initdev, 0x0}, &(0x7f0000001c00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001c80)={0x0, @loopback, @multicast2}, &(0x7f0000001cc0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001f00)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f0000002000)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000020c0)={'bridge_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002100)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000002140)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000021c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002240)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002280)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000002380)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002440)={'irlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007800)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000009e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000009ec0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000ab00)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f000000ac00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ac40)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000ac80)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f000000ad80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ae80)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000afc0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f000000b0c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000b1c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f000000b2c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000b300)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f000000b400)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f000000bd00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f000000bcc0)={&(0x7f000000b440)={0x860, r2, 0x0, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x124, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xcc8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xb07b}}}]}}, {{0x8, 0x1, r5}, {0x1ac, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xbc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x134, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x763c}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x100000000, 0x7, 0x9, 0x20000}]}}}]}}, {{0x8, 0x1, r20}, {0x1e8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xbc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xe2}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r27 = accept$alg(r0, 0x0, 0x0) dup2(r27, r0) sendto$unix(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 530.064222] binder: 20715:20729 got reply transaction with no transaction stack [ 530.071906] binder: 20715:20729 transaction failed 29201/-71, size 0-0 line 2741 [ 530.075288] binder: undelivered TRANSACTION_COMPLETE [ 530.085375] binder: undelivered transaction 348, process died. [ 530.121949] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.127581] binder: undelivered TRANSACTION_COMPLETE 06:09:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000080)={0x0, {0xd1b, 0x400}}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r10 = geteuid() r11 = geteuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() r14 = getgid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() getgroups(0x3, &(0x7f0000000840)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) r19 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [{0x2, 0x7, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x4, r7}, {0x2, 0x2, r8}, {0x2, 0x1, r9}, {0x2, 0x2, r10}, {0x2, 0x4, r11}, {0x2, 0x0, r12}], {0x4, 0x7}, [{0x8, 0x2, r13}, {0x8, 0x1, r14}, {0x8, 0x3, r15}, {0x8, 0x1, r16}, {0x8, 0x2, r17}, {0x8, 0x5, r18}, {0x8, 0x5, r19}], {0x10, 0x4}}, 0xa4, 0x0) 06:09:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='+c\x00\x00'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000ec0b779834bc296e08b9"], 0x0, 0x0, 0x0}) 06:09:42 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000200)="0a5c2d0240316285717070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$void(r1, 0xc0045878) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) 06:09:42 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:09:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r4, 0x4}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 530.476858] binder: undelivered TRANSACTION_ERROR: 29189 06:09:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="66b9c60a00000f320f840100baf80c66b89078608c66efbafc0cb84dffefbaf80c66b8daf8028166efbafc0cedd0dc0f070f00a5058066b91b03000066b8a636ffff66baffffffff0f300f01ca440f20c0663507000000440f22c0", 0x5b}], 0x1, 0x20, &(0x7f0000000180)=[@efer={0x2, 0x1}, @cr4={0x1, 0x240}], 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3427269bac1540008cb55aad5958dcb53f1cfe321477f4cf4bde25200884c371b74f2d48fa91ed90d0cc7c5e9e7027a53bb0086b8c11e702582eb7304ba223558e1f90576a837ea5fe258829f634c39107fb9b03897f1790e9c2a12e29992b5912d088957e1035c2c65000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xfffffffffffffffb, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 530.650830] binder: 20772:20773 transaction failed 29189/-22, size 0-0 line 2834 [ 530.707496] binder: 20772:20783 transaction failed 29189/-22, size 0-0 line 2834 [ 530.738351] binder: 20772:20773 unknown command 25387 [ 530.745439] binder: 20772:20773 ioctl c0306201 20000140 returned -22 06:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x7f, 0x115001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000007c0)={0x0, 0x0, 0x300a}) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000020002) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x20403, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000200)={0x1, 0xfffffffffffffffc}, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) waitid(0x3, r2, 0x0, 0x21000008, &(0x7f0000000100)) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/35) [ 530.800107] binder: 20772:20777 got reply transaction with no transaction stack [ 530.807894] binder: 20772:20777 transaction failed 29201/-71, size 0-0 line 2741 [ 530.893869] binder: undelivered TRANSACTION_ERROR: 29201 06:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x0, 0x7f, 0x1ff, 0x3}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200240, 0x0) shutdown(r2, 0x1) 06:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) fallocate(r3, 0x10, 0xa802, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff1000/0x1000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 06:09:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x202, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 531.273357] binder: 20807 RLIMIT_NICE not set [ 531.278014] binder: 20807 RLIMIT_NICE not set [ 531.366293] binder: 20805:20823 got reply transaction with no transaction stack [ 531.374071] binder: 20805:20823 transaction failed 29201/-71, size 0-0 line 2741 [ 531.415103] binder_alloc: binder_alloc_mmap_handler: 20805 20001000-20004000 already mapped failed -16 [ 531.464735] binder: BINDER_SET_CONTEXT_MGR already set [ 531.470184] binder: 20805:20807 ioctl 40046207 0 returned -16 06:09:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xe0000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgro\t\x00/syz0\x00', 0x200002, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058, 0x0, 0x0, 0x2000000]}) 06:09:43 executing program 5: r0 = socket(0x2, 0x80805, 0x0) r1 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4000, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x240800, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80000000, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000008}) shutdown(r0, 0x1) shutdown(r0, 0x0) [ 531.541580] binder_alloc: 20805: binder_alloc_buf, no vma [ 531.547374] binder: 20805:20825 transaction failed 29189/-3, size 0-0 line 2973 06:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701eaba714d3ca3e598e10ecab254fb14de741a21ddc2300bbf92e85822621d15ff4ed735e098e8dad6ed1cda4e2428a90fcf435a0f44da2d544905cdc1c2d930eba27bbb51a3b77280e2a5fda002698b2e73bd94ab13c4072567e278ec4ee8532e6837ee0383e4f8b5bcd40db5a1482c2b722771dd47bc1313eebb5acc1521625be4554667a34f00000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 531.614607] binder: release 20805:20807 transaction 355 out, still active [ 531.621676] binder: undelivered TRANSACTION_COMPLETE [ 531.675468] binder: release 20805:20807 transaction 355 in, still active [ 531.682484] binder: send failed reply for transaction 355, target dead 06:09:43 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)='\'\'em0\x00', 0x6, 0x4ba1b9949d184f5c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000001c0)=0x7) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x3, 0x4}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/dev/kvm\x00'}, 0x30) sched_setattr(r4, &(0x7f00000000c0)={0x30, 0x6, 0x1, 0x1, 0x7, 0x200, 0x9, 0x6}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x200) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x20012, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 531.812015] binder_release_work: 3 callbacks suppressed [ 531.812033] binder: undelivered TRANSACTION_ERROR: 29189 06:09:43 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000040)) 06:09:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x26002, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000000c0)) [ 532.008596] binder: undelivered TRANSACTION_ERROR: 29189 06:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:44 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 06:09:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x2a}, @in6={0xa, 0x4e23, 0x8, @empty, 0xff}], 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'netdevsim0\x00', 0x2}, 0x18) [ 532.303384] binder: undelivered TRANSACTION_ERROR: 29189 06:09:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000001000000000000000700000000000000000400000000000009000000b500da76"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x1fffc, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'ip6gre0\x00', 0x100000000}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.470105] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 532.480126] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 532.542298] binder_alloc: binder_alloc_mmap_handler: 20878 20001000-20004000 already mapped failed -16 [ 532.574959] binder: BINDER_SET_CONTEXT_MGR already set [ 532.580530] binder: 20878:20882 ioctl 40046207 0 returned -16 [ 532.633028] binder_alloc: 20878: binder_alloc_buf, no vma [ 532.637361] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 532.648698] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 532.658641] binder: undelivered TRANSACTION_COMPLETE [ 532.663987] binder: undelivered transaction 362, process died. [ 532.671696] binder: 20878:20884 got reply transaction with no transaction stack [ 532.711875] binder: undelivered TRANSACTION_COMPLETE [ 532.719588] binder: undelivered TRANSACTION_ERROR: 29201 06:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x4800) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c) 06:09:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 532.876555] binder: undelivered TRANSACTION_ERROR: 29189 06:09:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0xbfb, &(0x7f0000000140)="1ffac0c54605cbf1eece3f1bb2bae837bbfa6dbd64ade1725a9a0ffe094711f690b8ae99912ef9857c283c5085782a66939c980f83b68c534bce275249bf543317ab38dac358bd37ae489f981553724f3564692b73cb836778cc09db4fed46677720dc9c8c3d61577b6da1e2c058909f560f4a18fd717e7449529b4a5933d59be90b8f4593580971d56543726395cd94ceec8f7afded35b83e75eea875341fd2cb39", &(0x7f0000000300)="4adab2dc135dec311067f2c0638ee72fadc55a74969218cc217225ebaf4c9559a1ce1d90671565122252fdd079c5d5d95e48ac5c8798993a8c5ac04f45e905f44faf9b84cde0adba0b388e3ef422ef5af62390c36e02c77197b4174b34c994dbc236fe5307dbc82818caa859bdddd73dce6998867c8ef441b5a2e3af2cec1933fd8b0ce09df1e6815698a7d5c185b24a23e27278e16300e926654c19147aa241269eca591a26a6f487b7f892bf173331fd6d0bdfa32b86fcc96dc6f0a35041663b557fee20d0fae90f38c3e22c9cb5bb907af50be25898778653518763a749b3ec114cac19eeba65b022bad6921cfbab56d501320462", 0xa2, 0xf6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x9, @loopback, 0x81}, {0xa, 0x4e22, 0x1, @mcast2, 0x1}, 0x8001, [0x2, 0x8, 0x9, 0x3, 0x80000000, 0xffffffffff3a15be, 0x9, 0x4]}, 0x5c) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'veth0\x00', 0x1002}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, [0x100000000, 0x65, 0x145621e1, 0x100000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={r1, r2/1000+10000}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x10205, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00fb990100095135fa9711308766271a9ffa71ef62fbedd9ea43bfd37fbd496fa1d49aca9a9bbed7f872e84163582c75b2a2858094031fc56878cf798c0174e19dec4befcf55266125666b937e6e095f6191142e42bb13ac65cbab16125d0cdf72463d4c15c31cc43f5409af2612aca963c36042dae72159d833dda2f46e99871e0f667f1eee46bacf5fa9d4fdeffae230075f5e7e15d57c2750baa71c1efea1e4239dfb43c5bceea04f824068a6831c3234d298a4ab27dcfdf3f9dcb76a7fbe9f0b383d8ae5c9eb985ff85d1ed905d152883376c5588209b2df0c8f0e9cf15df9bc84fcfb7a0a1921"], 0x99, 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 533.105184] binder: 20907:20916 got reply transaction with no transaction stack 06:09:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:45 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x2000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x400, 0x401, 0x5}, &(0x7f0000000140)=0x10) fcntl$setpipe(r0, 0x407, 0x29) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 533.175021] binder_alloc: binder_alloc_mmap_handler: 20907 20001000-20004000 already mapped failed -16 06:09:45 executing program 5: io_setup(0x3, &(0x7f0000000240)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x40, 0x0) close(r1) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x10000, 0xfffffffffffffffe, &(0x7f0000000080)=0x7ff}) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 533.337828] binder: 20907:20921 got reply transaction with no transaction stack [ 533.345569] binder_transaction: 7 callbacks suppressed [ 533.345607] binder: 20907:20921 transaction failed 29201/-71, size 0-0 line 2741 06:09:45 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="85e08b000000000087c3aee23ed4683649abf492c7e6ab923f1f2a3a3d56e04deeda1deb78e3e5482cc8b12e107fd5429c196475a71b5d8e93797e213c561ca523f91ff015017a9ae78e74290e15922cea68a7a413db166b9fac52d0488cebb87ab7dc2ecf392b249ecf8deb5a3a940a8a0cc04cd2abb610a97b0c5565abe3e38ec3b8809ba2620fc099e3cb9bbee1fa29b61969c0864c981d6566e2b995374bcbe7b09a56d5473fe99e24d651db7a3eb4c3525cb64ddfe231e6553b40d81d0e86c8ee25"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000080)={0x5, [0x1, 0x1, 0x1000, 0x40, 0x3]}) syz_open_dev$audion(0x0, 0x0, 0x0) [ 533.584488] binder: undelivered TRANSACTION_ERROR: 29189 [ 533.604332] binder: undelivered TRANSACTION_ERROR: 29201 [ 533.609932] binder: undelivered TRANSACTION_ERROR: 29201 06:09:45 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = dup2(r0, r0) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x2710}}) read$FUSE(r1, &(0x7f00000001c0), 0x1000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 06:09:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000640)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r4, &(0x7f0000000180)='net/rpc\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 533.824060] binder: undelivered TRANSACTION_ERROR: 29189 06:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 533.963499] binder_set_nice: 6 callbacks suppressed [ 533.963515] binder: 20964 RLIMIT_NICE not set [ 533.973390] binder: 20964 RLIMIT_NICE not set 06:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000000079, 0x80000000200000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 534.062683] binder: 20964 RLIMIT_NICE not set 06:09:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) 06:09:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x80000001, 0x0, 0x3f, 0x5, 0x8, 0x2}, 0x4}, 0xa) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="00c6f8154f5236303e7617ee9687cead5db54ed5e74d1216a566e987b84ad98349d4479e7c8310b6778efa75630cae15d0303cbb7a5dd8007a04b1f34e5da8ecc216ed0ccb8b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 534.178923] binder_alloc: binder_alloc_mmap_handler: 20963 20001000-20004000 already mapped failed -16 [ 534.224333] binder: BINDER_SET_CONTEXT_MGR already set [ 534.229730] binder: 20963:20964 ioctl 40046207 0 returned -16 [ 534.240442] binder_alloc: 20963: binder_alloc_buf, no vma [ 534.246329] binder: 20963:20979 transaction failed 29189/-3, size 0-0 line 2973 06:09:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 534.338517] binder: 20985 RLIMIT_NICE not set 06:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ff, 0x800) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r1, r1, 0x7}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r1, &(0x7f0000000140)={0x11, 0xff, r4, 0x1, 0x8, 0x6, @random="9a0622f95bbc"}, 0x14) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 534.403122] binder: 20963:20979 got reply transaction with no transaction stack [ 534.410827] binder: 20963:20979 transaction failed 29201/-71, size 0-0 line 2741 [ 534.449308] binder: undelivered TRANSACTION_ERROR: 29201 [ 534.454940] binder: undelivered TRANSACTION_COMPLETE [ 534.460214] binder: undelivered TRANSACTION_COMPLETE [ 534.465515] binder: undelivered transaction 371, process died. 06:09:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) socketpair(0x13, 0x4, 0xfffffffffffffff7, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12", 0x0, 0x0, 0x0, 0x70effc}) 06:09:46 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x10000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x8, &(0x7f00000001c0)='/\'\x00') 06:09:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="681ac0337cccb7670f1e639a6d4500630840"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x23, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 534.843120] binder: 21008:21010 unknown command 868227688 [ 534.848793] binder: 21008:21010 ioctl c0306201 200001c0 returned -22 06:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)=0x0) write$FUSE_ENTRY(r1, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x4, 0x2, 0xe65e, 0x8, 0x5, 0xfff, {0x5, 0x9, 0x9, 0x0, 0x7f, 0x401, 0x3, 0x4a2c0b6f, 0xb2b, 0x7, 0x5, r2, r3, 0x80000001, 0x1}}}, 0x90) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9800000c00f3235000400000f3048b83affffffffffffff0f23d00f21f8350000000b0f23f86626660f3881a6200000000f01cf66ba610066b886ff66efd8e3c4a26d2d14f40f30b95b0a00000f32670f001a", 0x53}], 0x1, 0x1, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 534.955028] binder: 21010 RLIMIT_NICE not set 06:09:47 executing program 5: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 535.001591] binder: 21008:21015 got reply transaction with no transaction stack [ 535.009357] binder: 21008:21015 transaction failed 29201/-71, size 0-0 line 2741 06:09:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0x7, 0x7, 0x10001}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000040)={0x3, 0x2, 0x7}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:47 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000140)=""/121, &(0x7f00000000c0)=0x79) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/109) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:47 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8804}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) [ 535.569859] binder_alloc: binder_alloc_mmap_handler: 21008 20001000-20004000 already mapped failed -16 06:09:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)=0x0) write$FUSE_ENTRY(r1, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x4, 0x2, 0xe65e, 0x8, 0x5, 0xfff, {0x5, 0x9, 0x9, 0x0, 0x7f, 0x401, 0x3, 0x4a2c0b6f, 0xb2b, 0x7, 0x5, r2, r3, 0x80000001, 0x1}}}, 0x90) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9800000c00f3235000400000f3048b83affffffffffffff0f23d00f21f8350000000b0f23f86626660f3881a6200000000f01cf66ba610066b886ff66efd8e3c4a26d2d14f40f30b95b0a00000f32670f001a", 0x53}], 0x1, 0x1, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:47 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 535.694829] binder: BINDER_SET_CONTEXT_MGR already set [ 535.700238] binder: 21008:21015 ioctl 40046207 0 returned -16 [ 535.754909] binder: 21008:21057 unknown command 868227688 [ 535.760611] binder: 21008:21057 ioctl c0306201 200001c0 returned -22 [ 535.797224] binder: 21053 RLIMIT_NICE not set [ 535.832890] binder: 21008:21056 got reply transaction with no transaction stack [ 535.840413] binder: 21008:21056 transaction failed 29201/-71, size 0-0 line 2741 06:09:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)=0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:09:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:48 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket(0x0, 0x5, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="94b31b0b8bd950019775440249bf18b0797040626a568df75124783042512148d93ac8aec181eb2d78ab566b3f9a4fed3c60ea837715f448"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 536.184936] binder: 21077 RLIMIT_NICE not set [ 536.189577] binder: 21077 RLIMIT_NICE not set 06:09:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c8650407001000002000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54) [ 536.243559] binder: 21076:21082 got reply transaction with no transaction stack [ 536.251165] binder: 21076:21082 transaction failed 29201/-71, size 0-0 line 2741 06:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 536.373477] binder_alloc: binder_alloc_mmap_handler: 21076 20001000-20004000 already mapped failed -16 [ 536.406457] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 536.439776] binder: BINDER_SET_CONTEXT_MGR already set [ 536.445356] binder: 21076:21077 ioctl 40046207 0 returned -16 [ 536.476725] binder_alloc: 21076: binder_alloc_buf, no vma [ 536.482519] binder: 21076:21101 transaction failed 29189/-3, size 0-0 line 2973 [ 536.505143] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 536.520564] binder: 21077 RLIMIT_NICE not set [ 536.541510] binder: 21076:21082 got reply transaction with no transaction stack [ 536.549358] binder: 21076:21082 transaction failed 29201/-71, size 0-0 line 2741 06:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462dc33b34b9c716403f01df14ab6e679ec62631d357e8d0db487bb793c0326258352630b02208a7f9f587b25b52d665cf76f1d7d6984d4d966abca466ae8328f510ddab5cb6e7b6a701"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058, 0x0, 0x5]}) [ 536.623357] binder: release 21076:21077 transaction 378 out, still active [ 536.630329] binder: undelivered TRANSACTION_COMPLETE [ 536.654479] binder: release 21076:21077 transaction 378 in, still active [ 536.661432] binder: send failed reply for transaction 378, target dead 06:09:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da9adac0389be2a56a9e8c812b92143476b558ab33d3ab20255b1b1ad0fda3784c09be05a945b6215deb774ecfb0ca90e602b01c8a5e06dfce0fd6187b9b013c18018f75e39800d80c7fdde16512c523b6fe302a986f4c221fee06e982235bafa5c6ebb35be1ab03c36760f95ec856f35fc25f824f9ce4ed70674b6a95c322b4ea74d681890df17bff17d2f1d17a2e1"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x4, 0xffff, 0x4, 0x8000}, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x3, @random="953df66a07d6"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000240)=[{0x4d}, {0x6}]}) 06:09:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="006340c0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/67) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 536.875222] binder_release_work: 5 callbacks suppressed [ 536.875253] binder: undelivered TRANSACTION_ERROR: 29189 06:09:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 536.991610] audit: type=1326 audit(1546668589.039:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21115 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 06:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) write$P9_RSTAT(r1, &(0x7f0000000140)={0x50, 0x7d, 0x2, {0x0, 0x49, 0x3, 0x200, {0x38, 0x0, 0x1}, 0x80000, 0x8000000000000, 0x6, 0x3, 0x4, 'eth1', 0x0, '', 0x9, '/dev/kvm\x00', 0x9, 'mime_type'}}, 0x50) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x6, 0x1342cf27, 0x7, 0xffffffff, 0x1b, 0x8, 0x9, 0x5, 0x80000001, 0x20, 0xfffffffffffffffe, 0x4}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [0x8, 0x0, 0x800]}) 06:09:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10005, 0x0, 0x1f001, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x1f, 0x16, 0x7, 0xd, 0x7, 0x3, 0x3, 0x42, 0x1}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 537.251094] binder: 21127:21128 unknown command -1069522176 [ 537.257169] binder: 21127:21128 ioctl c0306201 200001c0 returned -22 [ 537.353610] binder: 21134 RLIMIT_NICE not set 06:09:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x800001, 0xa30000}}, 0x20, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x16, 0x1, 0x1}, {{0x0, 0x2710}, 0x12, 0x6935, 0x5}, {{r4, r5/1000+10000}, 0x1, 0x800000000000000, 0x7ff}, {{0x77359400}, 0x16, 0x8, 0x7}, {{}, 0x1f, 0x9, 0x7}, {{0x77359400}, 0x1, 0x4e}, {{}, 0x0, 0x8, 0x3}, {{0x77359400}, 0xc433d7daa4da8f70, 0x7b0, 0x100000000}], 0xc0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="f1e060393ac9c8ca6ac1bc87fe165a93b24d5db86ca9eb7f0d652b4b37157ba0ccd008b31b9d88de37c6b91bd4852dd47dff18d0b536a5291798ff88f849d2e6aa9340e197c1860711ed184ddd", 0x4d}, {&(0x7f0000000380)="760ac195c873a874a7354b2af3a9268cee1806c827c351e7e1347e6f7a73dcb39936991f15bb2090eaa42fe785b9df73fb14ec5e91d33009c586b38b2f028ec0e088c99174cd3cd654b33b4e4c0c01c6d0c91385e18a911cd14992e90f0586cddb539fdcc1d2", 0x66}, {&(0x7f0000000400)="068b7ae0f83cc2947ed2d32e3683ff39a34be691abfbda1b37afdf5b1bfcdb6a1f59049e1ffec1c7f272e6e08542050ecf270114971632693b07ef407d0d2b58fa7f490cc3f41f60cc336a6198f38363759d40519c363d3ac7d537", 0x5b}], 0x3}, 0x4000000) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 537.390982] binder: 21127:21128 got reply transaction with no transaction stack [ 537.398762] binder: 21127:21128 transaction failed 29201/-71, size 0-0 line 2741 [ 537.455000] binder_alloc: binder_alloc_mmap_handler: 21127 20001000-20004000 already mapped failed -16 [ 537.492790] binder: BINDER_SET_CONTEXT_MGR already set [ 537.498324] binder: 21127:21128 ioctl 40046207 0 returned -16 [ 537.531882] binder: 21127:21134 unknown command -1069522176 [ 537.537959] binder: 21127:21134 ioctl c0306201 200001c0 returned -22 [ 537.552812] binder: undelivered TRANSACTION_ERROR: 29201 06:09:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x2) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) 06:09:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 537.745074] binder: 21153:21156 unknown command -1443425727 [ 537.751047] binder: 21153:21156 ioctl c0306201 200001c0 returned -22 [ 537.773499] binder: 21153:21156 unknown command 0 [ 537.778641] binder: 21153:21156 ioctl c0306201 20000140 returned -22 06:09:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001680)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000240)=""/25, 0x19}], 0x4, &(0x7f0000000400)=""/188, 0xbc}, 0x80000000}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/36, 0x24}], 0x1, &(0x7f00000005c0)=""/228, 0xe4}, 0xfff}, {{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/45, 0x2d}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/66, 0x42}, {&(0x7f00000008c0)=""/50, 0x32}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f00000009c0)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/243, 0xf3}], 0x7, &(0x7f0000000c40)=""/66, 0x42}, 0x7}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/183, 0xb7}], 0x1, &(0x7f0000000dc0)=""/190, 0xbe}, 0xbc}, {{&(0x7f0000000e80)=@nl=@proc, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/170, 0xaa}, {&(0x7f0000000fc0)=""/196, 0xc4}, {&(0x7f00000010c0)=""/14, 0xe}, {&(0x7f0000001100)=""/146, 0x92}], 0x4, &(0x7f0000001200)=""/216, 0xd8}, 0x2}, {{&(0x7f0000001300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/178, 0xb2}, {&(0x7f0000001440)=""/228, 0xe4}, {&(0x7f0000001540)=""/134, 0x86}], 0x3, &(0x7f0000001640)=""/40, 0x28}, 0xffffffff}], 0x6, 0x0, &(0x7f0000001840)={r4, r5+30000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002400)={0x1, [0x0]}, &(0x7f0000002440)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000002480)={r6, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x7}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 537.828235] binder: 21153:21158 got reply transaction with no transaction stack [ 537.836039] binder: 21153:21158 transaction failed 29201/-71, size 0-0 line 2741 06:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x36, "8bba9633609790ceff5e0f9df64174c040cdc56ecc3dba822705bbee772a71bd66d9d5be1e7c78644f493dda85b3d4f6c16ff3c4a4f2"}, &(0x7f0000000940)=0x3e) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000980)=r4, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:50 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr, @local, @loopback}}}}, 0x0) 06:09:50 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x5, 0x5}) [ 537.886927] binder_alloc: binder_alloc_mmap_handler: 21153 20001000-20004000 already mapped failed -16 [ 537.923837] binder: 21153:21156 unknown command -1443425727 [ 537.929722] binder: 21153:21156 ioctl c0306201 200001c0 returned -22 [ 538.102468] binder: 21153:21158 unknown command 0 [ 538.107475] binder: 21153:21158 ioctl c0306201 20000140 returned -22 [ 538.145123] binder: 21153:21171 got reply transaction with no transaction stack [ 538.201341] binder: undelivered TRANSACTION_ERROR: 29201 [ 538.207040] binder: undelivered TRANSACTION_ERROR: 29201 06:09:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400100, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x0, 0xf, 0x3, "94ef60e47bea30b330d918611700500d250e7ce681644364edc0d485d3164629"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004300)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x1}], 0x1}], 0x1, 0x0) 06:09:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) r3 = dup3(r2, r1, 0x80000) write$ppp(r3, &(0x7f00000000c0)="fe2639cd9010162c72a43b68acedfadef104f45eb82183fca051d60670a0cbbd02ccfe07328f547f6247", 0xfffffffffffffc7c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:50 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r1) fcntl$getflags(r0, 0xb) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x15ac3739, 0x80000001, 0x2, 0x0, 0xfffffffffffffff8, 0x1f49, 0x6, 0x3, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r5, 0x6, 0x7ff, 0x8, 0x1d, 0x5}, 0x14) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x503}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000140)={r6, 0xfff}) open$dir(&(0x7f00000002c0)='./file0\x00', 0x404001, 0x1) 06:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 538.586100] binder_alloc: binder_alloc_mmap_handler: 21190 20001000-20004000 already mapped failed -16 [ 538.627801] binder: BINDER_SET_CONTEXT_MGR already set [ 538.633411] binder: 21190:21191 ioctl 40046207 0 returned -16 [ 538.645821] binder_alloc: 21190: binder_alloc_buf, no vma [ 538.651514] binder_transaction: 1 callbacks suppressed [ 538.651547] binder: 21190:21195 transaction failed 29189/-3, size 0-0 line 2973 06:09:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x98}, &(0x7f0000000140)=0x8) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000200)={0x57}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r3, 0x6, 0x9, 0x3, 0xedd, 0x3f}, &(0x7f00000001c0)=0x14) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="30e18d7f000000000000000369a89d2c9174c492bfc9ac405fa6f6a4ae8365951073efc6e4f1392b8577750b9f669c"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 538.774725] binder: undelivered TRANSACTION_COMPLETE [ 538.779915] binder: undelivered transaction 388, process died. [ 538.804668] binder: undelivered TRANSACTION_COMPLETE 06:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x10001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7cc7, 0x101, 0xb7}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x100000001, @remote, 0x7}}}, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0x153) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000c00)={r0}) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r4 = socket(0x10, 0x2, 0xc) write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) write(r4, &(0x7f0000000140)="1f0000000104fffffd3b59c007110000f30501000b000300000072cc0000cf", 0x1f) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f00000015c0)="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", 0xfa}], 0x1, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='lo\x00', 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x10001, 0x0, "b60110a74706edd7db86023058a70eba75a39952af8867fecf10e977fc68128194f12e155cb09c730647d05a80bad555a8c93b0d74e646cf055643eeff28e8d3db4764ef9b69fb290d3431f218f22c2d"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 06:09:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1ff5, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x9) accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0x4) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 539.049119] binder: undelivered TRANSACTION_ERROR: 29189 06:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 539.264583] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 06:09:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 539.310305] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 539.341988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 539.399599] binder_set_nice: 5 callbacks suppressed [ 539.399613] binder: 21231 RLIMIT_NICE not set [ 539.409415] binder: 21231 RLIMIT_NICE not set 06:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058, 0x0, 0x0, 0x2]}) [ 539.453994] binder: 21229:21238 got reply transaction with no transaction stack [ 539.461612] binder: 21229:21238 transaction failed 29201/-71, size 0-0 line 2741 [ 539.472406] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 539.486366] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 539.516496] binder_alloc: binder_alloc_mmap_handler: 21229 20001000-20004000 already mapped failed -16 06:09:51 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a596a06300020000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 539.573011] binder: BINDER_SET_CONTEXT_MGR already set [ 539.578474] binder: 21229:21231 ioctl 40046207 0 returned -16 06:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb0931ee44983ebc462d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:51 executing program 5: membarrier(0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) lstat(&(0x7f0000000280)='./bus\x00', 0x0) getresgid(0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80003) [ 539.676092] binder_alloc: 21229: binder_alloc_buf, no vma [ 539.681886] binder: 21229:21247 transaction failed 29189/-3, size 0-0 line 2973 [ 539.709790] binder: 21231 RLIMIT_NICE not set [ 539.772751] binder: release 21229:21231 transaction 391 out, still active [ 539.779823] binder: undelivered TRANSACTION_COMPLETE [ 539.810178] binder: release 21229:21231 transaction 391 in, still active [ 539.817305] binder: send failed reply for transaction 391, target dead [ 539.824179] binder: undelivered TRANSACTION_ERROR: 29201 06:09:52 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="fdf00a8c00556f41d31fb44436ac2a7139d512e7b9c59b68fa5577df869c027b9a9f31cb0ed2e781357c8ca0c7fe08dd79291bde3c212f780b7ef3843eab90d16b7adf1f556acb26a08000f3329ae6cbbe00734b7f58a94897e34d298576ba12ef58bf4a6f5fada6f7ac7588c042a61469dca5ff3b128d6f", @ANYRESOCT=r1]]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000140)=""/97) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0xfffffffffffffffa}}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x7c, @rand_addr=0x8, 0x4e23, 0x6a2e, 'lblc\a\x00', 0x34, 0x1, 0x7a}, {@empty, 0x4e21, 0x2002, 0x3ff, 0xae, 0x401}}, 0x144e) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) 06:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 540.089285] binder: undelivered TRANSACTION_ERROR: 29189 06:09:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="c4c3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) fcntl$getown(r0, 0x9) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x3) 06:09:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) exit(0x7fff) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x2880) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000180), 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000080)={0x2, 0x101, {0x57, 0x2, 0x2, {0x3, 0x6}, {0x40, 0xffffffffffff7104}, @const={0x7f, {0xb5e2, 0x0, 0x3, 0x1}}}, {0x57, 0x2, 0x40, {0x400, 0x7fff}, {0x3f, 0x101}, @period={0x5b, 0x5, 0x7583, 0x8, 0x9, {0x9, 0x9, 0x16, 0xfffffffffffff972}, 0x6, &(0x7f0000000040)=[0x4, 0x2, 0x400080, 0x8, 0x9, 0xe63b]}}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058, 0x100000000000]}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000140)) 06:09:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x400, 0x12) 06:09:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0xb2, 0x8, 0x6, 0x303}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 540.531620] binder: 21282:21284 unknown command 50116 [ 540.537063] binder: 21282:21284 ioctl c0306201 200001c0 returned -22 06:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 540.641722] binder: 21286 RLIMIT_NICE not set [ 540.644137] kvm [21290]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x100000000000 [ 540.689089] binder: 21282:21284 got reply transaction with no transaction stack [ 540.696714] binder: 21282:21284 transaction failed 29201/-71, size 0-0 line 2741 06:09:52 executing program 5: syz_emit_ethernet(0x134, &(0x7f0000000080)={@empty, @dev, [], {@mpls_uc={0x8847, {[{0xffff, 0x8, 0x400, 0x4}], @ipv4={{0x13, 0x4, 0x7, 0xffffffffffffff3b, 0x122, 0x68, 0x1ff, 0xffffffff, 0x0, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x1f, 0x1000, [@remote, @local, @remote, @broadcast, @empty, @multicast2, @remote]}, @rr={0x7, 0x17, 0x101, [@multicast1, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @udp={0x4e20, 0x4e21, 0xd6, 0x0, [@guehdr={0x2, 0x6, 0x1800000, 0x1000, 0x100, [0x80]}], "b53f1ec66c62f99de14b5cf41b5cb202302f9e59d02f1e46bac62b98cfba46b56bc8a02f71ec17b94ad7f504752f00f2327d359275451381981336b46cb561b79b7b30f0bcba8186aa393242998d19fa71838ce29da5d6539a9ebeb2ed9890ed5d78648dffe77a31b3ef0d4d802ab238a909eab7295974dda3c4ea3c8c9cf53e497a1abbab8d75e736b8e459918869173b198cd03ceb9fe398800f1afcc0c092936508832fd88ea9231834a24a728be08955b76cbf21d01d1b7a9e38fb223d0cc3b5b57f62c5"}}}}}}, 0x0) [ 540.805248] kvm [21290]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x100000000000 06:09:53 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8140, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@local, @local, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x54, 0x0, 0x0, 0x100, 0x1, 0x20, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0xbb, &(0x7f0000000040)=""/187}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000380)={{0x401, 0x10001, 0x401, 0x3, 0xbb, 0xff77}, 0x4, 0x2, 0x7f, 0x10001, 0x1, "fe79dc14c5830bc2827c77dcb2dbfb618d679fefe93c1223727ad0a5e7b25b0ede2e72f5f354bd5f634f4accd7028280acbb07de2c94954d6ebe2af2f2d81a43408e1008cfbbe985ae6525599ced87a2c7eaf281d1a0ba4f660de15f4d47ca1042903356b92797be2af4ee71878452dd07a35a13836d90815b4db15ff9e3f1a6"}) 06:09:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB='K']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(0x0, 0x1) pwrite64(r0, 0x0, 0x0, 0x0) munlock(&(0x7f0000002000/0x3000)=nil, 0x3000) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x7, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@dev}}, {{@in6}, 0x0, @in=@remote}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getresuid(&(0x7f0000000640), 0x0, &(0x7f00000006c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000780)) getresuid(0x0, &(0x7f0000000880), 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a40)) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000800)="55c18e8b38add1d45b1e3b79d2e29dbe676b48dfde", 0x15}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 06:09:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xde) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000000c0)=0x444, 0x4) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x5, {0x54fd}}, 0x18) [ 541.146388] binder_alloc: binder_alloc_mmap_handler: 21282 20001000-20004000 already mapped failed -16 [ 541.219987] binder: 21282:21301 unknown command 50116 [ 541.225505] binder: 21282:21301 ioctl c0306201 200001c0 returned -22 06:09:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xb6cae07dffd24838, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 541.315653] binder: BINDER_SET_CONTEXT_MGR already set [ 541.321222] binder: 21282:21284 ioctl 40046207 0 returned -16 [ 541.337849] binder: 21324 RLIMIT_NICE not set [ 541.403737] binder: 21282:21324 got reply transaction with no transaction stack [ 541.411281] binder: 21282:21324 transaction failed 29201/-71, size 0-0 line 2741 [ 541.431368] print_req_error: I/O error, dev loop7, sector 248 [ 541.437442] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 541.548447] binder: undelivered TRANSACTION_ERROR: 29201 [ 541.554136] binder: undelivered TRANSACTION_ERROR: 29201 [ 541.584411] print_req_error: I/O error, dev loop7, sector 248 [ 541.590424] Buffer I/O error on dev loop7, logical block 31, lost async page write 06:09:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0dd577c117ec498e50449086e57a51c38e638d36e1eead183b9363ba6d0e05000000f3b609f487dcecd3fd5d94163ebde797aca6d3444e53604c687021bbd8db0508d76f85630ffbcb22ccc6129d5f0d2f97c3cf041dff1b58f91088f46d9bebf98b12db6ef7a93f63f3e83717a4c814518f280841eba7b16c0311bcdacb6813165ef5992c16cdabcabfb7b6e9084e08d3aad232d6b06b7c7202a813ce237a624a8516efca2397390514b395d3d984b98e2b02cc0c91219d45004fb2e8efab6a635ec6d3826e9a727ffddd6124ef634227c44c4d7ed3c6b3a4f23b417154e558eb0624"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) bind$isdn(r2, &(0x7f00000002c0)={0x22, 0x101, 0x7, 0x5, 0x5ab}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x10200, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xe041, 0x2) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0163404000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd4f000000"], 0x0, 0x0, 0x0}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x9) 06:09:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x11f007, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x2, 0x0, 'queue0\x00', 0x941}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b20625"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) getuid() 06:09:53 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x20000004e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7", 0x1, 0x0, 0x0, 0x0) [ 542.041666] binder: 21352:21354 unknown command -1049111283 [ 542.047640] binder: 21352:21354 ioctl c0306201 200001c0 returned -22 06:09:54 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6dcc0b94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 542.089880] binder: 21362 RLIMIT_NICE not set 06:09:54 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001b00)={0x0, @remote, @remote}, 0xc) 06:09:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b20625"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80041, 0x7e) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x311, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={r2, 0x10000}) r3 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x2, 0x160, 0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 542.191544] binder: 21352:21354 got reply transaction with no transaction stack [ 542.199332] binder: 21352:21354 transaction failed 29201/-71, size 0-0 line 2741 06:09:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="94c2b01a57edc1e273635307cb281cca6485d80c9ba1d59d7a7c1efbc798667df6d641832d3a18d69e4609305c0cb6c0567592a1935003488e25c774d3ddc2311f55f47ed78c312fd66fc65e6a4820095c8111dc377de6be2faa84c321f9ad28db13aa48c907ae7ed524ebc9debf73a1e216b0d07cfc40d60172b360cf76497888061a290845f63a8d88e6cf8764f2e4fa986caa69869383c62eaf4bd4d63b03d5de59672513373ce73830788c661dcc48894a7151d73b54e0"]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'ipddp0\x00', 0x20000000000}) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 542.458914] binder_alloc: binder_alloc_mmap_handler: 21352 20001000-20004000 already mapped failed -16 06:09:54 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e2ffff000010000000ed0000f2ff020000000b98002b048755250c23fc85b56ac13ae7d7913cf2a35055b6fe94178e37e754828c9e46e8ed00"], 0x1, 0x0, 0x0) [ 542.526625] binder: 21352:21362 unknown command -1049111283 [ 542.532593] binder: 21352:21362 ioctl c0306201 200001c0 returned -22 06:09:54 executing program 0: symlink(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000840)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) r10 = getegid() setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x7}, [{0x2, 0x1, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}], {0x4, 0x1}, [{0x8, 0x1, r6}, {0x8, 0x4, r7}, {0x8, 0x4, r8}, {0x8, 0x3, r9}, {0x8, 0x7, r10}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x2) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x133802, 0x0) write$FUSE_POLL(r11, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x6}}, 0x18) pread64(r0, &(0x7f0000000000)=""/2, 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058]}) [ 542.584674] binder: 21352:21371 got reply transaction with no transaction stack [ 542.592321] binder: 21352:21371 transaction failed 29201/-71, size 0-0 line 2741 [ 542.630683] binder: BINDER_SET_CONTEXT_MGR already set [ 542.636168] binder: 21352:21354 ioctl 40046207 0 returned -16 [ 542.709227] binder: 21362 RLIMIT_NICE not set [ 542.729947] binder: undelivered TRANSACTION_ERROR: 29201 [ 542.783124] binder: undelivered TRANSACTION_ERROR: 29201 06:09:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa, 0x4010, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b20625"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x5fd, &(0x7f0000000100)={@link_local, @dev, [], {@llc_tr={0x11, {@snap={0x0, 0x0, "da", "ced09a", 0x0, "1d3a508b72ec35709a1b347bc71cb6d632a85609d2b0b104f287131ade7ba11eb72064a7a76cd794f5535ae057b80f466232d01bb156f07991dcdb452e0e4784b9c2e3cb1f8581716df21652d57b75ff67262a7ae6dbf3143621643e672fa31820192af6b216ec10a918642aa51775cbfed4a3777167a51baadc093aeb7d79fa1c8e08e5f881a32eb2d345de38e933d03026019ec0e43e7454f7c6fa795452f446d81b9b64a68e9160f4c7caeabca0d3ba39fa16ad9b1aa9d6811c92b82be495472a2751beed712012e7d71a6f57de1c1c8b9727d8cea2e1b057311d69f6a0c7003a79c44c9c872565747ef5ff42f6c763ff74e09809007383f9bcbc61503de871733a8be84d6e3706826e3e9debba364b69570bf54a496c9d03e1ce655ad08b1a5f1ae2b1f6928033fd888f8225c05137f70421fc4e75259c2e36ed03ee1108e1a3d1f34570bdae7ea44db3ba15c8e9056d7579a17c791403e7b93690a916b0096e47e6923fe370a5555541f8012cf9058f9d03d161be99199216a7f8ab98de0b30a8d5c727829804dd578c982cdcacde075cf9846cc8c95ccf44adf9737600d4838ba25a76d41d91cefd304f20776b4e4fee6e250b84a8d3ff2a8c95443b6efb75bd089095d92f1e314a727413c3887db566cdb5cf6c5a15b18a6251a192acada98ce6e71b0fd7fd89cf331d3f490c87a21601709fc859194bc60ef98f0bd09c63712361040ab74512f69ebf9766847649cae639efad295a531f9e19a5b08a70ba99932ee7439e3781fa3214fbae1190ae94589135b33ddcbc9a4c301c6d72386d4d8e1db7fce4281f4cb74f9f2d2811bc7259721341571e96acd0d3d5fee52455f9e765d6ec132f37638153467f4859607719964343d5f8b86f33bc991fe41a6a364470a8f6b4ed74736d5f08f2fa11dc4c592bb8a11475df22869bdfb1966ec1d37b7f05dd35bc73211a296f73de26fffd727d4d8b0b3ff60d655ff33998847946a084111c2dc1372acfa40a103a439eed2f6f35b0840b276b36f0ed0de017859b5f4f59fd1e2d5a90c24c8471c2d3af474ccb268f64cfc384488870348fe4a33d7aa8ff31294de115b0ca9963c60a977a1fbe7bade13861a4aecaa32daeae9d9b89d3ab0fbf11316e8ff6f7c1cd1508e27162d0c8f4f6689e6428b4c2ae4c0a73e0f4195b19b25bb1998f26e3d172ac4de5971e2a80dee5dbae088d889f9c4b475aa6e04b47d98dd449bc8d0b4a4e7c61ee32af438a171106c8dc24d29aa87342281029c477d38048f2597ceb57dc1e8b3393e5cd92e32461765c7111d39ee3d092c9e9661fb8c292dd9c63c8b703e33a75f7f81ae01d75a9b1c33f1f7d4c6de58fb161be3061943706668cec3e28227d170243ab36c0d7df227b3ce91b6aec73b457f2cdb46163b30362cc99ebe8737f20cb18235aed72088936c28446465f52a1c39f432132ccf4d46800db83dfd31162862da70428776daaf505085e3bc79f0ab498aacc1383d419c28d2caa63156b51583f0524719b93bf3088a46e76a2efc98c71a8c57dc59cbca471c14a50620ce480bc7274647869aa289bf78034e3d0aee9a2d67092d4839b466f11fee86732814a540aa59bf92beeee6c177c05e70f8fd5754d7a0b11431ac48a3563483ccbd35dc467a1336dcd780ec7ef24c429aca9eb90caf5b130dbb0168a9a228f113d42a60a4085b6659266b39b48ec0dfccaa04ce40c4a1880f7fcf7428778ddc3877bd3f437b7e9d1c8f49f867106a85f66edbff8f899aa33443f2b6d37fbf7b7459f6df806429484e94fe3146208adbbeefe25a94ddfce0f8c31f9a9a0aa4543d1d0ef4eab82173f3253c7a19960fd25739674a25a683c524712b505404cfd29f70f3f641cb6f37eb9c406cf6d4330fe74baaa565e327f015ddf43a24b781ebdefbaef1cd57789010d242dd801a6ed8eddb5e3b2e5c0567a2933448c610117af038f2a97830ed237834e3e731dbf9c84f0062c59141bd6098822e6b03a2d85e75972609e6a44e3aa756bcf8639826dbb1dc0edb8de19fce4075c9ff29861d1120e44c81510a8db8ddee43e9e29366ed76be423f1521a128bae4ef4bee597686eebfc4f8f6e235b1f49d321c9dc30ec1feb98a4986c"}}}}}, 0x0) 06:09:55 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0) flock(r1, 0x2) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400400000010000000000000000000000197f24"], 0x1, 0x0, 0x0) 06:09:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x24, 0x7, 0x2, {{0x17, '#vmnet1vboxnet0trusted-'}, 0x81}}, 0x24) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7696f398cafecbbd3e35c0058b46ed02f1acc21915ad65a1691065cea26a5ae7d8366d5941172d7665788406ba8fac2d9c144ad7da9cc1ebd515c041b9421451f77a280b9233d4500db178fe3d16bbd95bb44d2ad94ec2086a7969"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 543.232775] binder: 21413 RLIMIT_NICE not set [ 543.237433] binder: 21413 RLIMIT_NICE not set 06:09:55 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x7}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) [ 543.389928] binder: 21413 RLIMIT_NICE not set 06:09:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 543.459013] binder_alloc: binder_alloc_mmap_handler: 21407 20001000-20004000 already mapped failed -16 [ 543.518185] binder: BINDER_SET_CONTEXT_MGR already set [ 543.523887] binder: 21407:21413 ioctl 40046207 0 returned -16 [ 543.543923] binder_alloc: 21407: binder_alloc_buf, no vma [ 543.549608] binder: 21407:21430 transaction failed 29189/-3, size 0-0 line 2973 06:09:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x400080, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000000c0)) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xc370, 0x4c200) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x1) 06:09:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0x0, 0x1e0, 0x0, 0xf8, 0xf8, 0x310, 0x310, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xc, 0x4e0c, 0x6}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x82d, 0x61}, {0x2, 0x8, 0x9}, {0x3, 0x1, 0x6}, 0x93b, 0x18000000000}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0xfffffffffffffffb, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x1}}}, {{@ip={@multicast2, @empty, 0xff, 0xff000000, 'irlan0\x00', 'eql\x00', {0xff}, {0xff}, 0x0, 0x1}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00', 0x0, {0x3ff}}, @common=@unspec=@cpu={0x28, 'cpu\x00', 0x0, {0x5, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x4, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x6) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="677a87b9000000000000000441275a252ffbe3b10661fa5b34b2e2bffb50fa03da5e4ed20c0a4758f9528daa77df3deb493e2b7190ab0ca15d5d90edce25e3ce61aed880dc5623da3987517502474d91f618085cdb18e635b6d9321aacd50722ddd4134477570ed2ed37e80f9c0e1456d88206e1791dfd717b82ff08bed0ce71992c75c3c4597803c21a16819ffa300502c7fe39c739f89c6527d45179f48edb17e54dab8261e44b088b08d843d1b98cfb05441f7a7bea5101a0c9c1890e1c483ecefb84729b39e805bba07537c02fa9047d090e3c60b022a46be77612bab8cc6e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) [ 543.644153] binder: undelivered TRANSACTION_COMPLETE [ 543.658176] binder: undelivered TRANSACTION_COMPLETE [ 543.663550] binder: undelivered transaction 402, process died. 06:09:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x301000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0), 0x4) [ 543.796073] binder: undelivered TRANSACTION_ERROR: 29189 06:09:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 544.068037] binder_alloc: binder_alloc_mmap_handler: 21442 20001000-20004000 already mapped failed -16 06:09:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080), 0x4) [ 544.127890] binder_alloc: 21442: binder_alloc_buf, no vma [ 544.129773] binder: BINDER_SET_CONTEXT_MGR already set [ 544.133744] binder: 21442:21443 transaction failed 29189/-3, size 0-0 line 2973 [ 544.146885] binder: 21442:21454 ioctl 40046207 0 returned -16 06:09:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 544.184580] binder: 21442:21447 got reply transaction with no transaction stack [ 544.192431] binder: 21442:21447 transaction failed 29201/-71, size 0-0 line 2741 [ 544.213192] binder: undelivered TRANSACTION_COMPLETE [ 544.218456] binder: undelivered transaction 406, process died. 06:09:56 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 544.258441] binder: undelivered TRANSACTION_ERROR: 29201 [ 544.264310] binder: undelivered TRANSACTION_COMPLETE 06:09:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 544.494745] binder: undelivered TRANSACTION_ERROR: 29189 06:09:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x3ae) 06:09:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000680)) 06:09:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="946fdc62ab72a27396235a1bbfaaac5a8c42659eaa51fc796d954395d10b2e2a98cf838ae2494cb73be04c2b596cb720cfb21bda8c0e7b7d6d4e0d38346293562bd79d4dbe0855f5016a8d6df05175ef6bbfd8b7179c6c1831937b9583a571cf54ba74783d89034eb0b6fc24ad6b3d2d398a181ccca54783fbe36fe2ef19765f79fc24401061ba76e07812a476663f94aade0000000000000000"]) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x1, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 544.684724] binder: 21476:21478 got transaction to context manager from process owning it [ 544.693422] binder: 21476:21478 transaction failed 29201/-22, size 0-0 line 2825 06:09:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 544.758877] binder: 21476:21478 got reply transaction with no transaction stack [ 544.766601] binder: 21476:21478 transaction failed 29201/-71, size 0-0 line 2741 06:09:56 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='x']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x2eb) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}, 0x0) [ 544.882027] binder_alloc: binder_alloc_mmap_handler: 21476 20001000-20004000 already mapped failed -16 [ 544.892860] binder: BINDER_SET_CONTEXT_MGR already set [ 544.898293] binder: 21476:21478 ioctl 40046207 0 returned -16 06:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0}) [ 545.018735] binder: 21476:21496 got reply transaction with no transaction stack [ 545.026434] binder: 21476:21496 transaction failed 29201/-71, size 0-0 line 2741 [ 545.054464] binder_alloc: 21476: binder_alloc_buf, no vma [ 545.060190] binder: 21476:21497 transaction failed 29189/-3, size 0-0 line 2973 06:09:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 06:09:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02023e8c318df2f60feb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 545.147793] binder: undelivered TRANSACTION_ERROR: 29201 [ 545.163913] binder: undelivered TRANSACTION_ERROR: 29201 [ 545.169499] binder: undelivered TRANSACTION_ERROR: 29189 06:09:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xd9, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000180)={0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000240)={r3, 0x2}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:09:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000001c0007031dfffd946f610500070000000502000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 06:09:57 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x460001, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x21, 0x1, 0x3}}, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0xfffffffffffffff9, 0x4) write$P9_RXATTRCREATE(r1, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) clone(0x20200000, &(0x7f0000000200)="d06b1bd14e22c66cda90662d30137e6cb4df0fae046bf51bb1dfbbed14a81a74a05d9080a5bd256dabdf5c93b03db1e6ed350fc319e7111283f2f2cb36d944adc0cd06a102faa150d9a01117b6947482", 0x0, 0x0, &(0x7f0000000300)="b2e863e16a4c6de5a788e202ce11f07b0961da7df4054cc7f5a0249587f98088cc866edf5261ed2748d9c5ba7ae2f3d58486e496d9f7d05e85b19fb4d90f052951fa898d4a435023eba8c8f93bbac7b85009a9f988c43589e74873acf1162b8c554de91a49144f35c23ad3dcaf07879bc4b9759cc3ca9796357a0b4ffeb9f6941b99db5a02597d856458db55812527d00578cf6b4bf0eaa3e6adc24f") write$P9_RCREATE(r0, &(0x7f00000003c0)={0x18, 0x73, 0x1, {{0x6c, 0x2, 0x6}, 0x40}}, 0x18) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000400)=0x68, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000440)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$P9_ROPEN(r0, &(0x7f0000000480)={0x18, 0x71, 0x2, {{0x40, 0x4, 0x1}, 0x7fffffff}}, 0x18) [ 545.518633] binder_set_nice: 5 callbacks suppressed [ 545.518649] binder: 21525 RLIMIT_NICE not set [ 545.528435] binder: 21525 RLIMIT_NICE not set [ 545.580853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 545.589815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 545.655791] binder: 21525 RLIMIT_NICE not set [ 545.692817] binder_alloc: binder_alloc_mmap_handler: 21524 20001000-20004000 already mapped failed -16 06:09:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3fffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="1643"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e2a2d1a6cd5ddcd2e02"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 545.735488] binder: BINDER_SET_CONTEXT_MGR already set [ 545.740885] binder: 21524:21525 ioctl 40046207 0 returned -16 [ 545.810926] binder_alloc: 21524: binder_alloc_buf, no vma [ 545.816744] binder: 21524:21537 transaction failed 29189/-3, size 0-0 line 2973 [ 545.863131] binder: 21541 RLIMIT_NICE not set [ 545.896908] binder: 21524:21541 got reply transaction with no transaction stack [ 545.904557] binder: 21524:21541 transaction failed 29201/-71, size 0-0 line 2741 [ 545.980470] binder: undelivered TRANSACTION_ERROR: 29201 [ 545.986044] binder: undelivered TRANSACTION_COMPLETE [ 545.991298] binder: undelivered TRANSACTION_COMPLETE [ 545.996598] binder: undelivered transaction 416, process died. 06:09:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x8207, 0xfffffffffffff801, 0x3, r4}, &(0x7f0000000240)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="c9b7be276e1bf000006974f3c95ea2766e1a349963ae2338db8e727268554b4900eb1999ad42beb075f0a547e1a7e61d6c182c2e1a13ff38d55b32357624c2e902c77e5c0bee895b69640fea895d2bbade0c34fb248fad6fa809f8220f8a301564b67aa753054c6771093a67b8bf5f535057c439a0a85e14128e37f31d3157cf2fd1e20baf15a22890b9b90f883c21afa6ca6b3ba5a07ce4e7b202193647022b9ae7d104db674f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 546.160045] binder: undelivered TRANSACTION_ERROR: 29189 06:09:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b206255b3f7e05265c6b1d0e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0xfffffffffffffffd, {{0xa, 0x4e21, 0x4, @remote, 0x3}}, 0x69a951de4c45709d, 0xa, [{{0xa, 0x4e23, 0x6, @remote, 0x545}}, {{0xa, 0x4e23, 0x8001, @empty, 0xe0}}, {{0xa, 0x4e20, 0x1, @local, 0x81}}, {{0xa, 0x4e23, 0x80000001, @ipv4={[], [], @loopback}}}, {{0xa, 0x4e21, 0x4, @ipv4={[], [], @broadcast}, 0x72f}}, {{0xa, 0x4e23, 0x5000000000000, @empty, 0x1}}, {{0xa, 0x4e22, 0x7fff, @mcast1, 0x6}}, {{0xa, 0x4e21, 0x3, @loopback, 0x8}}, {{0xa, 0x4e20, 0x0, @mcast1, 0x3}}, {{0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}}]}, 0x590) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x322, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:58 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007fbdb72d23b2a4a280930a0600fec0a8431491000000040008001a000500fec000001900a30700000000000000dc1338d54400009b84136e115afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 546.459771] binder: 21569:21574 got reply transaction with no transaction stack [ 546.467499] binder: 21569:21574 transaction failed 29201/-71, size 0-0 line 2741 06:09:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20493402316ee8b20625"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 546.849027] netlink: 25 bytes leftover after parsing attributes in process `syz-executor0'. 06:09:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000001c0007031dfffd946f610500070000000502000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 06:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ff6000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xff, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x8f, 0x0) 06:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000180)={r2, 0x36}) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syzkaller1\x00', 0x10) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0xc, "739d9b8c3224ae7ade4481bd"}, 0xe, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="7643ab65c98326a68847787583fd8100000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:09:59 executing program 0: r0 = socket$inet(0x2, 0x803, 0x800000000000005) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x80000000027, &(0x7f0000000200)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000180)={@multicast2, @local}, 0xc) [ 547.134574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 547.143448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 547.157118] binder_alloc: binder_alloc_mmap_handler: 21569 20001000-20004000 already mapped failed -16 06:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4d5a5e1bcf4b0ba1b20"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x10000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400000001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 547.193407] binder: BINDER_SET_CONTEXT_MGR already set [ 547.198899] binder: 21569:21574 ioctl 40046207 0 returned -16 [ 547.198911] binder_alloc: 21569: binder_alloc_buf, no vma [ 547.198960] binder: 21569:21605 transaction failed 29189/-3, size 0-0 line 2973 [ 547.305830] binder: send failed reply for transaction 420 to 21569:21571 [ 547.445737] binder: undelivered TRANSACTION_COMPLETE 06:09:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x10003}, &(0x7f0000000300)=0x5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0xff, 0x0, 0xff, 0x7fff, r3}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="016340400000d1afe8e3f1bfbc13a20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff623930a24924d5af9860353274c8783d50b4d12bf0cbc784dde15de2946926307b39236488f27690d9a73c9bd5d6d0fca930097efdeb132170f0957b69354bef3d1d2a923a5a1cfed42ba35f51"], 0x0, 0x0, 0x0}) 06:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000000c0)={0x20, 0xfffffffffffffe00, 0x8, 0x7fffffff, 0x100000000, 0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:09:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 06:09:59 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080600010800060400000180c200aaaa7f00000100000000000000010000"], 0x0) 06:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985b4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:59 executing program 0: [ 547.749885] binder: 21632 RLIMIT_NICE not set [ 547.754649] binder: 21632 RLIMIT_NICE not set [ 547.809890] binder: 21632 RLIMIT_NICE not set 06:09:59 executing program 5: 06:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:09:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x81, 0x5, 0x4, 0x1ff, 0x2, 0x4}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 547.831386] binder_alloc: binder_alloc_mmap_handler: 21631 20001000-20004000 already mapped failed -16 [ 547.924583] binder: BINDER_SET_CONTEXT_MGR already set [ 547.930049] binder: 21631:21632 ioctl 40046207 0 returned -16 06:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x0}) setxattr$security_selinux(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='security.selinux\x00', &(0x7f0000000680)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xa8, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x20, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0x2, 0x2, 0x13}], &(0x7f0000000100)=[0x38, 0x0, 0x0, 0x20, 0x0]}}, @release={0x40046306, 0x4}, @decrefs, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x30, 0x28, &(0x7f00000001c0)=[@flat={0x776a2a85, 0x1, r4}, @flat={0x736a2a85, 0xb, r5, 0x1}], &(0x7f0000000200)=[0x40, 0x38, 0x70, 0x28, 0x18]}}, @clear_death={0x400c630f, 0x3}], 0x6c, 0x0, &(0x7f0000000240)="b556e8a322a60eb3fed029b02d4ddde5a86418611215e88c14c7a40b09e1deeb41d48c688d38bf37975e676dc8cd4e64330ffea5b2c024464546c21154234d4e63d0694b52b11c6ee56d299f3a8ecc7ecff505a1b372732e41386b9d27495b40819e7439d46bda01814c14d4"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_open_dev$audion(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) ppoll(&(0x7f00000006c0)=[{r6, 0x20}, {r2, 0x4010}, {r1, 0x100}, {r6, 0x1}, {r1, 0x8000}, {r6, 0x4000}, {r1, 0xc0}, {r3, 0x400}, {r2, 0x4008}], 0x9, &(0x7f0000000740)={0x77359400}, &(0x7f0000000940)={0x7ff}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="ffff030005001f00efff0c0004000a0004000a0004000a0004000a0004000a0004000a0004000a00"], 0x40}}, 0x40000) [ 548.017169] binder_alloc: 21631: binder_alloc_buf, no vma 06:10:00 executing program 0: [ 548.065893] binder: 21632 RLIMIT_NICE not set 06:10:00 executing program 5: [ 548.115401] binder: 21631:21650 got reply transaction with no transaction stack [ 548.157996] binder: undelivered TRANSACTION_COMPLETE [ 548.163382] binder: undelivered transaction 425, process died. [ 548.170523] binder: undelivered TRANSACTION_COMPLETE [ 548.214389] binder_release_work: 3 callbacks suppressed [ 548.214403] binder: undelivered TRANSACTION_ERROR: 29201 06:10:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:00 executing program 0: 06:10:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="00b6344ae55b568d78b8537b699a7f36446534cc7ceb37497ffbff26cf66b93798d3f8f07101c2380d054470077cfa8a452a00dbedf38e526cfd9fd66bde69719c4cddb2ca703279cd84d17c3402dc7892ff8bcd4a756e0d45ae7241acd6230a02302f499a0d07000000000000000fd32e04f9aeeccec4104be5c2ffa2123d2fff0000000000000090e0fb3966ef8a571c395d7efe3af719b79e029ff2b6a93465b1b52f454635e9d1dd6ab28b064fd2164f743dbe4b9eee8a875f064d86be2efdcde3d11fd895a449acf2aefedd4132bd16a2d5fb297b000d5512ce69f9cfd28f5f0ac0862c37bcab185e37fef85a0bc8acead0ec1f23b26bc1f7ba89828e0b253963623651a19e9823bcd9c97cffcc0cdeb98a0bad0b6f5c4b84fbcab266b3aa8f4caf898e3a1f73833a12e9a7fd5f89b1c702011c096112dc7705c20a286edd24e611fc84d4afb37305c46ae4ea0ee676c6778ae6676eee0e3b3a7d46"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) bind(r0, &(0x7f0000000540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x2c9) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @remote}], 0x4c) 06:10:00 executing program 5: [ 548.396555] binder: undelivered TRANSACTION_ERROR: 29189 06:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="b62af7f43e080000000000000000000000"]) prctl$PR_SET_FPEXC(0xc, 0x120000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 548.555196] binder: 21663:21668 ioctl 5386 20000000 returned -22 06:10:00 executing program 5: [ 548.638143] binder: 21663:21668 ioctl 5386 20000000 returned -22 06:10:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 548.707656] binder: undelivered TRANSACTION_ERROR: 29189 06:10:00 executing program 0: 06:10:00 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:00 executing program 5: 06:10:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x15, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 548.905604] binder: undelivered TRANSACTION_ERROR: 29189 06:10:01 executing program 0: [ 549.060837] binder: 21696 RLIMIT_NICE not set [ 549.065619] binder: 21696 RLIMIT_NICE not set [ 549.098364] binder_alloc: 21693: binder_alloc_buf, no vma [ 549.104249] binder: send failed reply for transaction 431 to 21693:21696 06:10:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000000080)="2385a19c3e55c4f3416dc1f3b15d372c44ffb03ac54e172b73c6aa1c124dc655c271dd50c0667f37443d03", 0x2b) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 06:10:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 549.144616] binder_alloc: binder_alloc_mmap_handler: 21693 20001000-20004000 already mapped failed -16 [ 549.185533] binder: BINDER_SET_CONTEXT_MGR already set [ 549.190997] binder: 21693:21696 ioctl 40046207 0 returned -16 06:10:01 executing program 5: [ 549.248978] binder_alloc: 21693: binder_alloc_buf, no vma [ 549.254792] binder_transaction: 5 callbacks suppressed [ 549.254820] binder: 21693:21701 transaction failed 29189/-3, size 0-0 line 2973 06:10:01 executing program 0: [ 549.329768] binder: undelivered TRANSACTION_COMPLETE [ 549.335094] binder: undelivered TRANSACTION_ERROR: 29189 [ 549.345037] binder: undelivered TRANSACTION_ERROR: 29189 [ 549.350603] binder: undelivered TRANSACTION_ERROR: 29190 06:10:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/130) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x5d}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x1, 0x3}, &(0x7f0000000300)=0x8) 06:10:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) utimensat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x7530}}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:01 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x48000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 549.680433] binder_alloc: binder_alloc_mmap_handler: 21722 20001000-20004000 already mapped failed -16 06:10:01 executing program 5: 06:10:01 executing program 0: [ 549.770378] binder: BINDER_SET_CONTEXT_MGR already set [ 549.775958] binder: 21722:21724 ioctl 40046207 0 returned -16 [ 549.846301] binder_alloc: 21722: binder_alloc_buf, no vma [ 549.852240] binder: 21722:21738 transaction failed 29189/-3, size 0-0 line 2973 06:10:02 executing program 5: [ 549.924668] binder: 21722:21738 got reply transaction with no transaction stack [ 549.932398] binder: 21722:21738 transaction failed 29201/-71, size 0-0 line 2741 06:10:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x243, 0x42) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="023a462933b4873bd96f2a31a900687fd3d42c3b98eceedb1f69b14b4626e2792dd48f54193f4a63cd623092429bb9439500000000000095b122f0f7e0ce776ef8f1f6e98147df8dbe510fafee648f3add3f685a460b9fd24bff3b4a51b6a3c2518529f875c07e647cd0059184de57d085b975fd69b09816a50e052f855541eb883da8949daa0060447a64f5fb05eb00d8cc7cf49def0532"]) get_mempolicy(&(0x7f0000000040), &(0x7f0000000200), 0x7, &(0x7f0000fec000/0x4000)=nil, 0x5) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x1, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 549.984399] binder: undelivered TRANSACTION_COMPLETE [ 549.989714] binder: undelivered TRANSACTION_COMPLETE [ 549.994969] binder: undelivered transaction 436, process died. [ 550.001104] binder: undelivered TRANSACTION_ERROR: 29201 06:10:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:02 executing program 0: 06:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x4000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600, 0x0) ioctl$RTC_VL_CLR(r3, 0x7014) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a42e2525f4fb4407422cc6e947d1d57ebd57efce01f0396e593c2c33d1aead7b2b92fc7b217eb540ad5f2fe88b8d4ec30204726205689df66e6633f33422fea139ac41d84942e1b7c9290d9a2a94640c0a9bbfead228c2338ae5dfe743b9bd720d551a4272adcc85c7"]) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0xffffffff80000001, 0x2, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:02 executing program 5: 06:10:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x5) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 550.300110] binder: undelivered TRANSACTION_ERROR: 29189 06:10:02 executing program 0: [ 550.501261] binder_alloc: 21766: binder_alloc_buf, no vma [ 550.507140] binder: 21766:21767 transaction failed 29189/-3, size 0-0 line 2973 06:10:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d824559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c8689c37be72e4fddd7e79f2"], 0x1, 0x0, 0x0) 06:10:02 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e2ffff000010000000ed0000f2ff020000000b98002b048755250c23fc85b56ac13ae7d7913cf2a35055b6fe94178e37e75482"], 0x1, 0x0, 0x0) [ 550.610911] binder_set_nice: 5 callbacks suppressed [ 550.611010] binder: 21772 RLIMIT_NICE not set 06:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000004c0)={0x7b, 0x0, [0x1, 0x7, 0x0, 0x3]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x127fe, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) fstat(r0, &(0x7f0000000300)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000580)={0xf9b0000, 0x5, 0x400000, [], 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x886d, @local}}, [0x1, 0x5, 0xffffffff, 0x5, 0x5, 0x35, 0x6, 0x3f, 0x1, 0x8001, 0x7f, 0x100000001, 0x2, 0x2f0, 0x4]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r4, 0x2}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff6000/0x3000)=nil, 0x800, 0x2, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x79d}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 550.684181] binder: BINDER_SET_CONTEXT_MGR already set [ 550.689539] binder: 21766:21767 ioctl 40046207 0 returned -16 [ 550.773599] binder: 21766:21772 got reply transaction with no transaction stack [ 550.781130] binder: 21766:21772 transaction failed 29201/-71, size 0-0 line 2741 06:10:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e2ffff000010000000ed0000f2ff020000000b98002b048755250c23fc85b56ac13ae7d7913cf2a35055b6fe94178e37e754828c9e46e8ed008fce67d4831c5f000000000000000019a4f621f4ae273675"], 0x1, 0x0, 0x0) [ 550.845282] binder: BINDER_SET_CONTEXT_MGR already set [ 550.850777] binder: 21766:21767 ioctl 40046207 0 returned -16 [ 550.895105] binder_alloc: 21766: binder_alloc_buf, no vma [ 550.900885] binder: 21766:21772 transaction failed 29189/-3, size 0-0 line 2973 [ 550.938153] binder: 21790 RLIMIT_NICE not set [ 550.970075] binder: BINDER_SET_CONTEXT_MGR already set [ 550.970453] binder: 21766:21797 got reply transaction with no transaction stack [ 550.975658] binder: 21766:21791 ioctl 40046207 0 returned -16 [ 550.983243] binder: 21766:21797 transaction failed 29201/-71, size 0-0 line 2741 06:10:03 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000180)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000053d096171578a2f7a14728ccc804707c38bdf09a7f37cd8ded04d339586072ed794cc1d2167aa4f8cbc841ec3362961400bafdbe3063f232e18ef6a7ce3d5cda3f8923b3b76e0d9b67a2f657b39a873fb7fdde3c0afdadf25920f1de7eddc364da8f0fbf89c0030e34206dfcf2581eb412940ed81d28f520fa0d6b4f4d1ea95c626094c5beef446feec9d8"], 0x0) [ 551.022561] binder: undelivered TRANSACTION_ERROR: 29189 06:10:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d824559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630020"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000240)=0x1) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @broadcast}, 0x10) 06:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x80000001, 0x0, 0x10001, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x6, r4}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="96"]) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x1c9c380}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:10:03 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e2ffff000010000000ed0000f2ff020000000b98002b048755250c23fc85b56ac13ae7d7913cf2a35055b6fe94178e37e754828c9e46e8ed008fce67d4831c5f000000000000000019a4f621f4ae2736757432f8ab8dc71aeb34869eb5aabb26b50afaacce66654f2c2d11978a017abe031686971838be23d71999256ae59634a20a9b2738e59072d7ef9ce047cb0e0dce9adea88feeb7d2dbda60c33a9bbcd18da8fb558224f7edd40fcbcbc0c9d7eb2bac634fc0b71f07d9fdd4ab464ad0e3"], 0x1, 0x0, 0x0) [ 551.311395] binder: 21808:21809 unknown command 536896262 [ 551.317143] binder: 21808:21809 ioctl c0306201 20000140 returned -22 [ 551.418133] binder: 21808:21809 got reply transaction with no transaction stack [ 551.425769] binder: 21808:21809 transaction failed 29201/-71, size 0-0 line 2741 [ 551.485783] binder_alloc: binder_alloc_mmap_handler: 21808 20001000-20004000 already mapped failed -16 06:10:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d824559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:03 executing program 5: socket$unix(0x1, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xffffffffffffffa2) r0 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, 0x0, 0x9f) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) tkill(r1, 0x1000000000016) listen(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 551.541148] binder: BINDER_SET_CONTEXT_MGR already set [ 551.546650] binder: 21808:21828 ioctl 40046207 0 returned -16 [ 551.554747] binder_alloc: 21808: binder_alloc_buf, no vma [ 551.560356] binder: 21808:21829 transaction failed 29189/-3, size 0-0 line 2973 06:10:03 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="2000e200001f000067a13c2bc26d00000000000000d9e77e24b5f671eaa6ddccef5550b891b81572d5d7bd3a1a18b4b756dc6237842bff8af833f7990a171a9b2c7ad58401b2adba6bba9525b6e5a969e1f46fe0e6aa94735602e52eda107ed33f5507253982b4b26f663ea9c5390b1f69a3a6ba10ded4b66e57e466a07f9d0000aa967088a7d5f282f22075af6df1ae1c352109924dc224fa98c4f169ebf8590cf93d58a0a56944bf89ce2dcc3a5b25c72a8b576b1ff444ab47fcc9dcf05222110104000000000000bce7008522485d8b44987858e0e8a00b7ba2e16d7a497d503f75407ab254e0ca3bfc4b1955e420"], 0xf0}, 0x0) 06:10:03 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0x214) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 551.704397] binder: 21808:21809 unknown command 536896262 [ 551.709983] binder: 21808:21828 got reply transaction with no transaction stack [ 551.710095] binder: 21808:21809 ioctl c0306201 20000140 returned -22 [ 551.717792] binder: 21808:21828 transaction failed 29201/-71, size 0-0 line 2741 06:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x28e) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 551.889117] binder: release 21808:21809 transaction 445 out, still active [ 551.896171] binder: undelivered TRANSACTION_COMPLETE 06:10:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2000000000000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x800000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x12c}, 0x0) [ 551.946280] binder: send failed reply for transaction 445, target dead 06:10:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x11d, 0x0, &(0x7f00000000c0)=ANY=[], 0x82d1b74cf4c89314, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4b3101300e907f6f4921d41b1fbc18a77c96bd6b4ae46cd8f9ceccdbe3ae5dac2d8aa577a49612cc079eda6a398935a02e8d2451fb41a720279bff90c6d55434a32fd43cc17684ca8a3c562b47464f943f0e23a89d91a3a5638aa32dbb8117aa66a21a12495d5fd59f084094fc5d0c81b6793a7568e39eeb7fb0b23ee3e2cd7313"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:04 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000180)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000053d096171578a2f7a14728ccc804707c38bdf09a7f37cd8ded04d339586072ed794cc1d2167aa4f8cbc841ec3362961400bafdbe3063f232e18ef6a7ce3d5cda3f8923b3b76e0d9b67a2f657b39a873fb7fdde3c0afdadf25920f1de7eddc364da8f0fbf89c0030e34206dfcf2581eb412940ed81d"], 0x0) [ 552.258905] binder: 21867:21868 unknown command 0 [ 552.264301] binder: 21867:21868 ioctl c0306201 20000180 returned -22 06:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x100000000, 0x2}, {0x4, 0xfff}, 0x588, 0x1, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 552.302800] binder: 21867:21868 unknown command 805384523 [ 552.308468] binder: 21867:21868 ioctl c0306201 20000140 returned -22 [ 552.330970] binder: 21867:21872 got reply transaction with no transaction stack 06:10:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82455985"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 552.396907] binder: BINDER_SET_CONTEXT_MGR already set [ 552.397355] binder_alloc: binder_alloc_mmap_handler: 21867 20001000-20004000 already mapped failed -16 [ 552.402576] binder: 21867:21872 ioctl 40046207 0 returned -16 [ 552.510996] binder: 21867:21884 unknown command 805384523 [ 552.517112] binder: 21867:21884 ioctl c0306201 20000140 returned -22 [ 552.534020] binder: 21867:21883 unknown command 0 [ 552.539088] binder: 21867:21883 ioctl c0306201 20000180 returned -22 06:10:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e2ffff000010000000ed0000f2ff020000000b98002b048755250c23fc85b56ac13ae7d7913cf2a35055b6fe94178e37e754828c9e46e8ed008fce67d4831c5f"], 0x1, 0x0, 0x0) 06:10:06 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c8689c37be72e4fddd7e79f2cb860d7908c002226cd103ffcc30bf0f6e2128be85f5cb03834f5ec3bc087fbe3c3e95dfa9a4116c782799e7c15064e29da99eea7445c80ca083ce69db", @ANYRESHEX], 0x2, 0x0, 0x0) 06:10:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="94e7bc8e2db56fcd7b35aeb208d949be5c828d6c01fc1f6df96d75026cba9f41ad9bf6f7c9d5f243d553a92a2dbdc0d01260d7b11dbfc35111725f50f08381b9d5a7fc919df4e425725dd3079406cddcb81f234f258bdada0bc337708d81a4407d64dd77e5abd6c4678472de8d9dbad99dcbee4b7fc271c5e17de003efd5ed3f0c6da1dd8c17ce9dc25cee1ea3e84dd43376ed4b02c4002a693363a8f74c24dbfef4a54966bbb41e1c"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0xf9b0000, 0x5, 0x40, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:10:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x10000000000, 0x20014, r1, 0x20000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x17, 0x0, &(0x7f0000000240), 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d824559"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="fbc1bb54dc6c99ab6487cf956987b86dc6b7ac34d53449f655ffeb1ff40d326733c7b96c29fff9fe4bc994ae82ce6a99f89682f0a2c7c9"]) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffff80, 0x220000) setsockopt$inet_dccp_int(r3, 0x21, 0x1b, &(0x7f00000000c0)=0x7d0000000000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x100000003) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c8689c37be72e4fddd", @ANYRESHEX], 0x2, 0x0, 0x0) [ 554.712294] binder_alloc: 21899: binder_alloc_buf, no vma [ 554.717949] binder_transaction: 1 callbacks suppressed [ 554.718009] binder: 21899:21900 transaction failed 29189/-3, size 0-0 line 2973 [ 554.802332] binder: 21899:21900 got reply transaction with no transaction stack [ 554.809917] binder: 21899:21900 transaction failed 29201/-71, size 0-0 line 2741 [ 554.868411] binder: BINDER_SET_CONTEXT_MGR already set [ 554.874093] binder: 21899:21910 ioctl 40046207 0 returned -16 [ 554.883546] binder_alloc: 21899: binder_alloc_buf, no vma [ 554.889250] binder: 21899:21916 transaction failed 29189/-3, size 0-0 line 2973 06:10:07 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$tipc(r3, &(0x7f0000001540)={&(0x7f0000000040)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) [ 554.936598] binder: 21899:21920 unknown command 0 [ 554.941647] binder: 21899:21920 ioctl c0306201 20000140 returned -22 06:10:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:07 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 555.018935] binder: 21899:21910 got reply transaction with no transaction stack [ 555.026631] binder: 21899:21910 transaction failed 29201/-71, size 0-0 line 2741 06:10:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x9, 0x0, @thr={&(0x7f0000000080)="9750974422c0648b337446a6b2a5fdb4", &(0x7f00000000c0)}}, &(0x7f0000000140)=0x0) timer_delete(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000540)=0x4, 0x2415656a, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) renameat2(r0, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x4) pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000300)="64e4992bfc653dac86fb1888abdb87eefb372dc37821862f14ce384269dbf00b051b2b48a9b144114c0584d58845c37a3d54f8f9371eb6c4", 0x38}, {&(0x7f0000000340)="dd874df28b3d7c86332bf8f818b4d1dfefd7e4db7a0421cf1941981dac0b30bc6690b839c2d025c62117b5bf83fbf9a0e680da379a9dff4ea0fa0a990147aadcb91a954db022e48d2e4feef67086e95d5c1f63fb30ed3e26e1564d99be348522e1a9f34c94eb585366605249c99cfef8d414eec1ba499e46f61c5b60894b9bf9d5f23f7a0e770c0a88908947dbe668e5ed3846481da16f86d00f67411318fe5377c2112fb29897dd", 0xa8}, {&(0x7f0000000400)="54d9a6356824697be50269b7370bf9ddd774c09f85ea669d2cc75222625889056715c41c63ae54f6a629cc8d7587cca169cd804b8b15922dc591da1800c0264aaea3a246af2531b6e961fad5fb91013b38de4646be", 0x55}, {&(0x7f0000000480)="306b4c6fbad34ba20cebc858d1742f57abccd863133ea5f8fbd2f427ab2da4070849c69f8db19c2aeed2a37b5fd6ae02b0e564b0fd574a2b4c48e6912b83b8e73ce3f0a98af4a957313c44e707b1ba943ebcecb7563eae22f2de925da906ce5f99f0078024713bd708cc491499f6f2434ead", 0x72}], 0x4, 0x0) write$FUSE_GETXATTR(r4, 0x0, 0xffbe) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="94c291869a34f9b8259de9eaa7d13165db516bee3403dab0cc51d05ed94d2696b772cc02d89128dadc73da4db54b9b6be282e95500000061ab560b8aa5085d26a3439f5cd50179a86e3c9472b07fd303e822d7bfa9724035f5d692e54b5981a5338adf14d410995a60785eda8ebe365d17890057b1325fb2b6931b305a21d959c3b6b820f6d67c70cb2a0f393ed24065bc33de53160bd4a1c874d62fd9163277a393566dc3cb8afd436a9bca07a957a5a4176c5d24a397c54f36d68e398d779e4b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FICLONE(r1, 0x40049409, r3) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_open_dev$audion(0x0, 0x0, 0x0) [ 555.109053] binder_release_work: 7 callbacks suppressed [ 555.109068] binder: undelivered TRANSACTION_ERROR: 29201 [ 555.138039] binder: undelivered TRANSACTION_ERROR: 29201 06:10:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x100, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000001840)={0x18, 0x0, 0x7, {0x7}}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x100, 0x0) r5 = dup2(r0, r1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x80000, 0x0) io_submit(r2, 0x6, &(0x7f0000001800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x35c4c5e2, r0, &(0x7f0000000240)="fc5d3d9e5d3d0bd7b1ded43e6f42d665e71a501cfe61b38e455494ef24b98184392ec47d1f99e1a4490428fc491a32453ba61c7ca78854dc6e074963ce4f366c4444aac6744ae287a9742cc32edf775f312b4daf4ecda4a11231eb82e2cfa3220e4e17e9dd81cf6217893c6524c4dd23f1a79cb46787654d53a229b3ac45a38d0d61564e8f7912038e60bd6bb10db36f", 0x90, 0x3, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, r1, &(0x7f0000000500)="6474a0e0862c44e4b2a1b8b8b7354c81c06657b01106b1f583e2be089651c4772bc394e54bffd8eea238a4dc45e8544fa8305afb9b78b0e980a8137d1ae4212b6766ab4b62c3e678ba449a02c24ba75b498f27a397f04d2490b97a6dc3013412db2d39635aee291d21af39df055e3273b06e9b13c4777995bc561292822c3dcb9b7fdc36744dc1925dd7610ec33f442eed31e47d61c498e855", 0x99, 0x3, 0x0, 0x1110adaf3bd483fe, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xd1a, r0, &(0x7f0000000300), 0x0, 0x9}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffff80, r0, &(0x7f0000000640)="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", 0x1000, 0x10001, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000001640)="411e26e2bff10cba111a8ea250c6e2da5e9240d0068d2122e8fb35dc46a89d435be148bbad7f7c5a84c98cdb898563af9c1265d0b230232af46c3f205bab7c0e981d88638cefc739e5ee43cadb3b9616ea724b86af17dea282e13338711b54164483f020627cded49a77ea6c700503a5c5b3a8bcca5b02d6cf47a8e0b1757212c786a3998580deb6ced474d839ecda488d2d9f", 0x93, 0x0, 0x0, 0x0, r6}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000001700)="31cc0faf066c9be785e3470a0e2d49c8befaf0b3ef592045183ed06056da692ac649f90ac51d37f7ae44143fdb7ff35521fa81114ba6b9b2a6e65aac285fc5b3fa22ca042b99b1d7129d43f87291c93922efa7d686257eafc8d1c53505883293701b565be7e3b1ac5a6254ab146846df9b4763b0ebad8afd65219a23f385fe4936960fea056e9a57b7775f32e4877ca2534a3a082e4ac1a74b98095879489b62dede34a910767ade3448097cc9ac31cf2802656ae49679", 0xb7, 0x7}]) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 555.315882] binder: undelivered TRANSACTION_ERROR: 29189 06:10:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"6cdd4237dd245c8404721efdc9c8dc1964125fa9ef4f3d0f702bef7ec8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264f1c8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8494525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee8059000000006a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd52428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f07000000ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8ec3b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e4721b3d3c2019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000020000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x4f5f6c4f, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}]}}) [ 555.421090] binder: 21938:21940 got transaction to context manager from process owning it [ 555.429653] binder: 21938:21940 transaction failed 29201/-22, size 0-0 line 2825 06:10:07 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="526e4a4c1e660f93d45c8899837c85a7edaa4c00000c886d7ecb09f63220ad9a9fdda692d54af0869cbf634b55a5c82913c168ed78ac0cacf5d5edaddb5f1868d2d0de5aeb562f1ea96c6d2e0a2cf3f3654a40d3a1725259b3db88a3c8c915a339988ef06a80df3ee65fc19a"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 555.528186] binder: 21948 RLIMIT_NICE not set [ 555.573818] binder_alloc: binder_alloc_mmap_handler: 21938 20001000-20004000 already mapped failed -16 [ 555.606131] binder: BINDER_SET_CONTEXT_MGR already set [ 555.611608] binder: 21938:21940 ioctl 40046207 0 returned -16 [ 555.644571] binder_alloc: 21938: binder_alloc_buf, no vma [ 555.650371] binder: 21938:21948 transaction failed 29189/-3, size 0-0 line 2973 [ 555.686820] binder: 21956 RLIMIT_NICE not set 06:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)) 06:10:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="6b3ef97f00000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000000)) [ 555.721486] binder: 21938:21958 got reply transaction with no transaction stack [ 555.729312] binder: 21938:21958 transaction failed 29201/-71, size 0-0 line 2741 [ 555.753278] binder: undelivered TRANSACTION_ERROR: 29201 06:10:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:07 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:08 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 06:10:08 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x1, 0x5d, "8ccfd06647b69bdb2964a34a6699cda4addc6c67bfbb033b368d8490d5b608910a93e5e5b5a86e9fdc66f12ce174b8d6e1f9b97bf1c152f7263ffbf76a707bb1e3b4f5de9d7a04efb98df9a9153b9c9dcd189fff725a50725cac2ed2f9"}, 0x65) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630000388ff3a8f3f5e4cf42"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 556.020017] binder: undelivered TRANSACTION_ERROR: 29189 [ 556.025725] binder: undelivered TRANSACTION_ERROR: 29201 06:10:08 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 556.210972] binder: 21982 RLIMIT_NICE not set [ 556.216463] binder: 21982 RLIMIT_NICE not set 06:10:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x0, 0x800}, @mss], 0x2037) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) [ 556.255262] binder: 21982 RLIMIT_NICE not set 06:10:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 556.291414] binder_alloc: binder_alloc_mmap_handler: 21980 20001000-20004000 already mapped failed -16 [ 556.315049] binder: BINDER_SET_CONTEXT_MGR already set [ 556.320598] binder: 21980:21986 ioctl 40046207 0 returned -16 [ 556.405576] binder_alloc: 21980: binder_alloc_buf, no vma [ 556.405868] binder: 21995 RLIMIT_NICE not set [ 556.411398] binder: 21980:21994 transaction failed 29189/-3, size 0-0 line 2973 [ 556.476522] binder: 21980:22000 got reply transaction with no transaction stack [ 556.484515] binder: 21980:22000 transaction failed 29201/-71, size 0-0 line 2741 06:10:08 executing program 2: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="06"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:10:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x7e3e877f) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x4d7) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @empty}, 0x3f, 0x0, 0x0, 0xb}, 0x20) getsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000040), 0x0) 06:10:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1a, 0xa, 0x200) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) syz_open_dev$audion(0x0, 0x0, 0x0) [ 556.551374] binder: undelivered TRANSACTION_COMPLETE [ 556.556760] binder: undelivered transaction 462, process died. [ 556.572111] binder: undelivered TRANSACTION_COMPLETE [ 556.577286] binder: undelivered TRANSACTION_ERROR: 29201 06:10:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000000c0)) 06:10:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d82"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x2000000c0ffffff}) 06:10:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = socket(0xd, 0x5, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x6}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x34ac}, &(0x7f00000002c0)=0x8) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80001, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 556.921010] binder: undelivered TRANSACTION_ERROR: 29189 06:10:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x3, 0xe6, &(0x7f0000000300)="626acdac0ac4e364eff1aac7deebdbc3601642b7fe0c735bc10ddb5c9d26fa5cb10cb125cc59224384cebdd01b80b4894f81c6fc495001ef7f9b00088bfc21f9e2426d83df0c141a26f9e8ade9f2bcee651f4ae4082e61f4e6ab79f8df4cb0907a327830ce5ca0f287f3f29f3da0883690f82a288f5cdc292d5f116acecf2bb676e42c013cc91016bfd3a6585642d30f604cf572c250e9ffaf89116d6ccce5281fca6624244620c1af57b09f8dc2e73542718c84742cb7ea2e000c2f4e6540c933f7ba496bfc23535bc0f7e71cc3dac1704e9534b518c77269777d90a78b942eab4870fc6f6a"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000280)=ANY=[@ANYBLOB="ae7a025ea53e50aca57b72bfda37647a139e4694cfcbbd9a8a7e99d200"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000140)=""/148) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="360f01df0f01ca470f01f8c4e3a540dd000fc72c5f0f00560a66b854008ee8420f01cf0f01c846dbe8", 0x29}], 0x1, 0x2, &(0x7f0000000100)=[@cr4={0x1, 0x600000}, @efer={0x2, 0x8400}], 0x2) 06:10:09 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 557.061284] binder: 22028 RLIMIT_NICE not set [ 557.066057] binder: 22028 RLIMIT_NICE not set 06:10:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 557.169564] binder: 22028 RLIMIT_NICE not set [ 557.203017] QAT: Invalid ioctl [ 557.204350] binder_alloc: binder_alloc_mmap_handler: 22026 20001000-20004000 already mapped failed -16 [ 557.241597] binder: BINDER_SET_CONTEXT_MGR already set [ 557.247162] binder: 22026:22028 ioctl 40046207 0 returned -16 06:10:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) [ 557.247616] binder_alloc: 22026: binder_alloc_buf, no vma [ 557.258960] binder: 22026:22034 transaction failed 29189/-3, size 0-0 line 2973 [ 557.273647] binder: 22034 RLIMIT_NICE not set [ 557.346585] QAT: Invalid ioctl [ 557.368157] binder: undelivered TRANSACTION_COMPLETE [ 557.373439] binder: undelivered transaction 467, process died. [ 557.381349] binder: undelivered TRANSACTION_COMPLETE 06:10:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:09 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="94"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 557.523537] binder: undelivered TRANSACTION_ERROR: 29189 06:10:09 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 06:10:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffa) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_tables_names\x00') r3 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xffffffffffffff81, 0x800) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000000c0)={0x4, 0x2, [{0x9, 0x0, 0x5}, {0x3f, 0x0, 0x6}, {0x2, 0x0, 0x6}, {0xd3a5, 0x0, 0x1}]}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff75, 0x0, &(0x7f0000000200)=ANY=[], 0x6a74542d, 0x0, 0x0}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x1, 0x2000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="54427df77393a0a55b5aeafbcb044d258ec93a1511f9c7763444b37d7b6ca37ed992214ede41f905e66f7cfc536087dee9adcf044be0574e1dcf5b71169771c60c6b88f4c3752728f28dc685898aef576616341fdf02bab0d7ad4ea258d5c8d5ba15c26dafc783cbf67a9e29de6bfa3312c8ea2df33721886db63d0f0d1663baac5bf66eb988e16ac1bbe2df068b17db60269d079103e2edf4bbd966e4bc00f32a52f59d4973a2acdd560e6bfdf6ad484f40432da0f47861720eb64aa4c1bd7769"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 06:10:09 executing program 5: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 06:10:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 557.848055] binder: 22071:22073 ioctl 800454d2 20000300 returned -22 06:10:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r0, &(0x7f0000000080), 0xc) [ 557.939382] binder: 22071:22073 ioctl 800454d2 20000300 returned -22 06:10:10 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) 06:10:10 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="03", 0x1}], 0x1}}], 0x1, 0x20008084) 06:10:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x6a, 0x0, &(0x7f0000000240)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722860ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802fab72486eceb6cd63023549e08dab903df7b3417caf7d0ea3696fd3f9fadbebe329f"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:10 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 558.324076] binder: 22105 RLIMIT_NICE not set 06:10:10 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff080045fddc9f3d00000000009078ac14ffbbe00000010b89427c9296b8e316f3ff73db0000000000059078"], 0x0) read(r3, &(0x7f0000000400)=""/4096, 0x1000) 06:10:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x40000000000010) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) [ 558.397676] binder_alloc: binder_alloc_mmap_handler: 22103 20001000-20004000 already mapped failed -16 [ 558.432570] protocol 88fb is buggy, dev hsr_slave_0 [ 558.438291] protocol 88fb is buggy, dev hsr_slave_1 [ 558.533918] binder_alloc: 22103: binder_alloc_buf, no vma [ 558.557585] binder: BINDER_SET_CONTEXT_MGR already set [ 558.563151] binder: 22103:22121 ioctl 40046207 0 returned -16 [ 558.574581] binder: undelivered TRANSACTION_COMPLETE [ 558.579829] binder: undelivered transaction 471, process died. 06:10:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 558.610431] binder: undelivered TRANSACTION_COMPLETE 06:10:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 06:10:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fcQJ'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x20800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x68, r3, 0x50a, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) 06:10:10 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) [ 558.742787] protocol 88fb is buggy, dev hsr_slave_0 [ 558.748457] protocol 88fb is buggy, dev hsr_slave_1 [ 558.768343] binder: undelivered TRANSACTION_ERROR: 29189 06:10:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 558.912374] binder: 22132:22133 unknown command 1246847756 [ 558.918180] binder: 22132:22133 ioctl c0306201 20000140 returned -22 06:10:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 558.986606] binder: 22132:22133 got reply transaction with no transaction stack [ 559.035691] binder_alloc: binder_alloc_mmap_handler: 22132 20001000-20004000 already mapped failed -16 06:10:11 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x3) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000003f00000000003300000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 06:10:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x8000000004e22, 0x0, @ipv4}, 0x1c) [ 559.120346] binder_alloc: 22132: binder_alloc_buf, no vma [ 559.120450] binder: BINDER_SET_CONTEXT_MGR already set [ 559.132101] binder: 22132:22151 ioctl 40046207 0 returned -16 [ 559.218364] binder: 22132:22146 got reply transaction with no transaction stack [ 559.252585] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 559.263989] binder: 22132:22156 unknown command 1246847756 [ 559.269871] binder: 22132:22156 ioctl c0306201 20000140 returned -22 [ 559.274072] binder: release 22132:22133 transaction 474 out, still active [ 559.283545] binder: undelivered TRANSACTION_COMPLETE [ 559.293415] binder: send failed reply for transaction 474, target dead 06:10:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000000c0)={0x0, 0x0, 0x2003, 0x8, 0x76af, {0x48cf}}) 06:10:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 559.555980] binder_alloc: binder_alloc_mmap_handler: 22169 20001000-20004000 already mapped failed -16 [ 559.595065] binder: BINDER_SET_CONTEXT_MGR already set [ 559.600515] binder: 22169:22171 ioctl 40046207 0 returned -16 06:10:11 executing program 5: 06:10:11 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1, '\b\a\x00\x00'}}}}}, 0x0) 06:10:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$sock_proto_private(r0, 0x1000000089eb, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="96"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0xf4, 0x30}, &(0x7f0000000240)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000400)=0xc) getpgid(r4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x7a70, @loopback, 0x10001}}}, 0x84) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f0000000140)="8c96c605219bf570797b2869b8cbea3f23747a5b94dbcd77a900083ffbe0f5df4ea46d373f4c93b6eb2ecd9b92c82bc90b9da3cf1e30b5534be76c8e672f6c2052815797422cd001fb6a6b1df5e7a67c409b4f1a11af066d3cf84f92598cb057d26151448594a0dee0e1d15bdc35c025e5869ed5265d7342771fbdb3962b428fe9ac32bd0af46e00ca997a69648d457f5ac8518a7ed83d") 06:10:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = dup2(r0, r0) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) [ 559.615459] binder_alloc: 22169: binder_alloc_buf, no vma [ 559.623163] binder: 22169:22173 got reply transaction with no transaction stack [ 559.640407] binder: undelivered TRANSACTION_COMPLETE [ 559.645645] binder: undelivered transaction 480, process died. [ 559.691942] binder: undelivered TRANSACTION_COMPLETE 06:10:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7, 0x200) write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18, 0x0, 0x1, {0x4}}, 0x18) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 06:10:11 executing program 5: 06:10:12 executing program 4: 06:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:12 executing program 0: [ 559.989167] binder_alloc: 22190: binder_alloc_buf, no vma [ 559.995007] binder_transaction: 6 callbacks suppressed [ 559.995042] binder: 22190:22192 transaction failed 29189/-3, size 0-0 line 2973 06:10:12 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 560.111318] binder: 22190:22201 got reply transaction with no transaction stack [ 560.119097] binder: 22190:22201 transaction failed 29201/-71, size 0-0 line 2741 [ 560.216059] binder: BINDER_SET_CONTEXT_MGR already set [ 560.221601] binder: 22190:22201 ioctl 40046207 0 returned -16 06:10:12 executing program 5: 06:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:12 executing program 4: [ 560.324310] binder_alloc: 22190: binder_alloc_buf, no vma [ 560.325637] binder_release_work: 5 callbacks suppressed [ 560.325652] binder: undelivered TRANSACTION_ERROR: 29201 [ 560.330017] binder: 22190:22205 transaction failed 29189/-3, size 0-0 line 2973 [ 560.335438] binder: undelivered TRANSACTION_ERROR: 29189 06:10:12 executing program 0: 06:10:12 executing program 5: 06:10:12 executing program 4: 06:10:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x331, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:12 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="91cb6c94dea883737f127d2afe84bfabf8d7820e24fd9a8e27aa4eb57d33701a203ac7fd4a93ffce10105e385c0b0ae8ea577af8b337a1f175ac1be72b97648e7532974c8e2b2f8cf8721e152d3ef6e677c7ed2ade1d233b5ec5ea5d145d5a196cab66b11d341855859df556214c242c63e49671cac6a8a9424ee7a1e65b7af7c6d4724ae21f7bc4a04b5a196df6b2ca03a45a3016bf5655d809"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf9b0000, 0x5, 0x0, [], 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 560.713616] binder: undelivered TRANSACTION_ERROR: 29189 06:10:12 executing program 0: 06:10:12 executing program 4: 06:10:12 executing program 5: [ 560.864753] binder: 22231:22232 unknown command 808464432 [ 560.870387] binder: 22231:22232 ioctl c0306201 20000400 returned -22 06:10:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 560.994877] binder_set_nice: 9 callbacks suppressed [ 560.994893] binder: 22232 RLIMIT_NICE not set [ 561.043347] binder: 22231:22243 got reply transaction with no transaction stack [ 561.051015] binder: 22231:22243 transaction failed 29201/-71, size 0-0 line 2741 06:10:13 executing program 5: 06:10:13 executing program 4: 06:10:13 executing program 0: 06:10:13 executing program 2: 06:10:13 executing program 5: 06:10:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 561.609926] binder_alloc: binder_alloc_mmap_handler: 22231 20001000-20004000 already mapped failed -16 [ 561.633304] binder: BINDER_SET_CONTEXT_MGR already set [ 561.638757] binder: 22231:22243 ioctl 40046207 0 returned -16 [ 561.656373] binder: 22231:22263 unknown command 808464432 [ 561.662361] binder: 22231:22263 ioctl c0306201 20000400 returned -22 [ 561.669270] binder: 22243 RLIMIT_NICE not set [ 561.670259] binder: undelivered TRANSACTION_ERROR: 29201 06:10:13 executing program 5: 06:10:13 executing program 4: 06:10:13 executing program 0: 06:10:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0094ad63d740"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffe74, 0x0, &(0x7f0000000380), 0xffffffffffffffde, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 06:10:13 executing program 2: 06:10:13 executing program 0: 06:10:13 executing program 2: 06:10:14 executing program 4: 06:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 561.965164] binder: 22272:22276 unknown command 1672320000 [ 561.974295] binder: 22272:22276 ioctl c0306201 200001c0 returned -22 06:10:14 executing program 5: [ 562.039118] binder: 22278 RLIMIT_NICE not set [ 562.070149] binder: 22272:22276 ioctl c0306201 20000100 returned -14 06:10:14 executing program 0: 06:10:14 executing program 2: [ 562.129407] binder_alloc: binder_alloc_mmap_handler: 22272 20001000-20004000 already mapped failed -16 06:10:14 executing program 4: [ 562.273311] binder: 22272:22276 unknown command 1672320000 [ 562.279087] binder: 22272:22276 ioctl c0306201 200001c0 returned -22 [ 562.302641] binder: BINDER_SET_CONTEXT_MGR already set [ 562.308075] binder: 22272:22292 ioctl 40046207 0 returned -16 [ 562.357334] binder: 22278 RLIMIT_NICE not set 06:10:14 executing program 5: [ 562.378919] binder: 22272:22276 ioctl c0306201 20000100 returned -14 06:10:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c6300005a57bfe5eda54040bb77493b4d637f29f8e2d0bd83805e3e8dc5f9735c70815601b5895a030442ca2b7e45b484ad116d473a0d0675f7006a144861170183a254854e6c28f6772f6c11a6bf918b02346248d9ee0ca6"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x202000, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)=0x1) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:14 executing program 0: 06:10:14 executing program 2: 06:10:14 executing program 5: 06:10:14 executing program 4: 06:10:14 executing program 0: [ 562.783612] binder: 22312 RLIMIT_NICE not set [ 562.788360] binder: 22312 RLIMIT_NICE not set 06:10:14 executing program 2: 06:10:14 executing program 5: [ 562.874702] binder: 22311:22315 got reply transaction with no transaction stack [ 562.882579] binder: 22311:22315 transaction failed 29201/-71, size 0-0 line 2741 06:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 562.943473] binder_alloc: binder_alloc_mmap_handler: 22311 20001000-20004000 already mapped failed -16 06:10:15 executing program 4: r0 = socket$packet(0x11, 0x400000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0x1f, 0x0, 0x1, r5}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_data=0x0}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000180)=0x100) [ 563.018859] binder: BINDER_SET_CONTEXT_MGR already set [ 563.024417] binder: 22311:22312 ioctl 40046207 0 returned -16 06:10:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt6_stats\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 563.076444] binder_alloc: 22311: binder_alloc_buf, no vma [ 563.082195] binder: 22311:22324 transaction failed 29189/-3, size 0-0 line 2973 [ 563.092951] binder: 22312 RLIMIT_NICE not set [ 563.196320] binder: 22311:22331 got reply transaction with no transaction stack [ 563.204308] binder: 22311:22331 transaction failed 29201/-71, size 0-0 line 2741 [ 563.232768] binder: undelivered TRANSACTION_ERROR: 29201 [ 563.238377] binder: release 22311:22312 transaction 491 in, still active [ 563.245345] binder: send failed reply for transaction 491 to 22311:22312 [ 563.252301] binder: undelivered TRANSACTION_ERROR: 29201 [ 563.257896] binder: undelivered TRANSACTION_COMPLETE [ 563.263106] binder: undelivered TRANSACTION_ERROR: 29189 06:10:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000500)={0x0, 0x0, 0x0}) 06:10:15 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 06:10:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x800000800000001) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x104) 06:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)={0x2f, 0x6, 0x0, {0x3, 0x3, 0x6, 0x0, 'eth0${'}}, 0x2f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 563.405992] binder: undelivered TRANSACTION_ERROR: 29189 06:10:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x2880) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000180), 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000080)={0x2, 0x101, {0x57, 0x2, 0x2, {0x3, 0x6}, {0x40, 0xffffffffffff7104}, @const={0x7f, {0xb5e2, 0x0, 0x3, 0x1}}}, {0x57, 0x2, 0x40, {0x400, 0x7fff}, {0x3f, 0x101}, @period={0x5b, 0x5, 0x7583, 0x8, 0x9, {0x9, 0x9, 0x16, 0xfffffffffffff972}, 0x6, &(0x7f0000000040)=[0x4, 0x2, 0x400080, 0x8, 0x9, 0xe63b]}}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0xc0010058, 0x100000000000]}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000140)) [ 563.567866] binder: 22348:22349 got reply transaction with no transaction stack [ 563.575585] binder: 22348:22349 transaction failed 29201/-71, size 0-0 line 2741 06:10:15 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x9, 0x7}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2001000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8101, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x18) 06:10:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000180)='\xc9\xe9\xbf\xee\x00\t\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xffffffffffffffff, 0x1f, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = gettid() r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x422, 0x200000) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9e2b, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x10000, 0x0, 0xd, 0x1ff, 0x2, 0x45, 0x801, 0x800, 0x1f, 0x7, 0x6, 0x8, 0x1, 0x8000, 0x0, 0x9, 0x1, 0x4, 0x6, 0xfffffffffffffff8, 0x80000001, 0x8, 0x81, 0x7, 0x40, 0x7, 0x7f, 0x7d, 0x1, 0x7, 0x8, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000040), 0x8}, 0x80, 0x7fffffff, 0x7ff, 0x0, 0x7, 0x6, 0x1}, r2, 0xb, r3, 0x2) [ 563.690259] binder_alloc: binder_alloc_mmap_handler: 22348 20001000-20004000 already mapped failed -16 [ 563.742037] binder: BINDER_SET_CONTEXT_MGR already set [ 563.747455] binder: 22348:22349 ioctl 40046207 0 returned -16 [ 563.783069] kvm [22354]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x100000000000 [ 563.822495] binder_alloc: 22348: binder_alloc_buf, no vma [ 563.828142] binder: 22348:22367 transaction failed 29189/-3, size 0-0 line 2973 06:10:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x801, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="e0", 0x1}], 0x1) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x40000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 06:10:16 executing program 2: connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @loopback}}, 0xffffffffffffff64) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000000), 0x12053df4) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) [ 563.912939] binder: undelivered TRANSACTION_ERROR: 29201 [ 563.918472] binder: send failed reply for transaction 496 to 22348:22349 [ 563.925509] binder: undelivered TRANSACTION_COMPLETE [ 563.930650] binder: undelivered TRANSACTION_ERROR: 29189 06:10:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000200)=0x7ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x23, 0x400) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)=""/101) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="4bf2eff316688edcd270861c003b0d434dd99681ffb365a2271bd60bee3ba5e7858077bb5c5139602ce61044349bdccffce0ef53f51864db316545000000a69a37b6455282c237d92dbd062918d028bb5184e8288b74d62fc4fd49487bd295213f1e9033dd8e35b438ebc778145a1de869d3de95a06ba9ad0dee003fb3b48b703d9dc5174e5fa26f5425f079c404b6c07bbab3dce10e2fd59b961fcd8262b1c5c646859061e2989838055880986e"]) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff22, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 06:10:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffd69, 0x0, &(0x7f0000000080)=ANY=[], 0xfffffffffffffdd4, 0x0, &(0x7f0000000300)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20080, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={r3, &(0x7f0000000100)=""/54}) 06:10:16 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)=@nl=@unspec, 0xf) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="6f86456298d76d9230a53c1d7298ff4f5826623c1054a35862dfb12927f3cee09a333229018a7115ca6659daf35a216a2d2b3872b667bc367a71126ce7f3356a3f182d3d0a41eb777ff536cb8af15998d16c57385560b906a3c03b9d33314801bd81be73d471921f51c6ca543829e8a1b1dfaefb665ad1d3446abd714d92dcebb4d485010e5f347e04242f344a9f63c5de35966ae4b3", 0x96, 0x0) keyctl$assume_authority(0x10, r1) [ 564.254170] binder: 22385:22387 unknown command 0 [ 564.259163] binder: 22385:22387 ioctl c0306201 20000140 returned -22 [ 564.274327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 06:10:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) quotactl(0x2080000201, &(0x7f0000000200)='./file2\x00', r1, &(0x7f0000000040)='-0') [ 564.301018] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 564.352371] binder_alloc: binder_alloc_mmap_handler: 22385 20001000-20004000 already mapped failed -16 [ 564.376932] binder: BINDER_SET_CONTEXT_MGR already set [ 564.382620] binder: 22385:22387 ioctl 40046207 0 returned -16 [ 564.383780] binder_alloc: 22385: binder_alloc_buf, no vma [ 564.394391] binder: 22385:22399 transaction failed 29189/-3, size 0-0 line 2973 06:10:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2c00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1048}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='D']}) close(r4) close(r1) 06:10:16 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ppoll(&(0x7f0000000000), 0xa5, 0x0, 0x0, 0x0) [ 564.498447] binder: 22385:22392 unknown command 0 [ 564.503555] binder: 22385:22392 ioctl c0306201 20000140 returned -22 [ 564.522615] binder: release 22385:22387 transaction 500 out, still active [ 564.529584] binder: undelivered TRANSACTION_COMPLETE 06:10:16 executing program 0: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x40000) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6388e439, 0x311100) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x20000) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, 0x6, r2, 0x3a}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="247b9d187d360952130196c84aad83b19535c16383e9492b67a816f68f83d7f67b9caed12f31d2e649b6fe12fee6bc0e613d0ffee90ba810846b8b08551866754a49f4d801f3eed52ef70076180d253bfa0f4c5030ca21d0b2efb37eb6d32a16", 0x60}], 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x100000}) mq_timedsend(r3, &(0x7f00000000c0), 0xffffffffffffffd7, 0x0, &(0x7f0000000040)) [ 564.578832] binder: send failed reply for transaction 500, target dead 06:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:10:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffffffffffec, 0x0, &(0x7f0000000000), 0x48, 0x0, &(0x7f00000000c0)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:16 executing program 2: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) socket$inet6(0xa, 0x0, 0x0) ptrace(0x10, r1) ioperm(0x0, 0x20, 0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x1f, 0x1eb0b895}) ptrace$setopts(0x10, r1, 0x6, 0x0) [ 564.997304] binder: 22424:22434 got reply transaction with no transaction stack [ 565.005047] binder: 22424:22434 transaction failed 29201/-71, size 0-0 line 2741 06:10:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)=0x3) 06:10:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="13000000000000000000000000000000be381e0909e2db5957a17213c98f9bb509fbac29cdc8fd51cb64062e6eb72994ddc0533232d76628108e6861c2d9d2bdb45ee1cbe9adcf39f0241d6ae9eff52321620d056198a7322a50b0e965ed7b5a46d51b643c75625ab4ec459771ba248b2c30453765d900fc1257296dbd17086ad5dbcea63bfc8a02b19def5ea7d38201308dc66141fe6794001526a18a9e4556b3512bed0ed3fb295ffad735e57a2ce920c607be76dde9a9db8631d1a4fea971533ff2bf997267c49b964daf18aa704938c90a3301f45719d6e7d833abd27d3bd286b3c71cfb513b0749108668d7b81776bd2e72da1cbea260fb0eda4c912ad1318d6b98266130d6bbb324ed90bf58f4eb0d0ac88ea178ed27e1704fb2d9ad83d5398c128eea773b2c0436d825e7639487bc9822ab892fc480932d61d2e9c954753e76922bc3dd01397ae5c64f32b2c6d4875cf201e1c51025f656a23ec7e5cf7321f0369655959fce0cd0c4e7dde830d5633021bbbea60b746a2399f4b6432119b8817fc5ca779f82d188ef4a274f745a15166930f6ff860c6effe716d14884fd2bd37662424f67623e6f0f2304dc88f89caae2df52651a7e8d013fe7de6f1160a566a81ddc65680d1768caa6103c250e62b600138515f5ede221945be440073e9f556ffcf3"]}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e20, @loopback}}) 06:10:17 executing program 0: add_key(&(0x7f0000000240)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000600)='\xd1?\xf3\xd7v\xdc\xf2\x05\x11\x1c\x87B\xbd\xeb\xc90x0) syz_open_procfs(r2, &(0x7f00000001c0)='7U\'*\x9fR\x13LW\b\x18\x8f\xcf\x13\'#^\xb49\xe6[\xbb@\x89\xec\xfeZ\x1ej\x05\xc2\a\xad\n\x14z\x8a!;PQ2R\xf3\xe5\\\xe9\x02\x8e\xc8\xc0\'\xdf\x82\xcc\xf7\xd1\xbc\xd1\tY\xb8\xa3\xe6\x83\xf4c\v\xf6\xe2\xbe\xdb:\x98\xb5&b\xb5\xda9U\xbc\x83\xa9\xbfq\xb6\xdc\x9a\\\xbd\xf7\x81\x02\xa8?\xc4qt\r>\xa6\xb3\x9f%7\xf1\x0e:\x19\x03\xaa3') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, 0x201000, 0x0) 06:10:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000280)={@dev, 0x0}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, @generic={0x40, 0x200, 0x9, 0x1, 0x8}, @ldst={0x2, 0x3, 0x3, 0x8, 0x0, 0x50, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x12, &(0x7f0000000100)=""/18, 0x41100, 0x1, [], r2, 0xd}, 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 566.672722] binder: undelivered TRANSACTION_ERROR: 29189 [ 566.832859] binder: 22528:22533 got transaction to context manager from process owning it [ 566.841561] binder: 22528:22533 transaction failed 29201/-22, size 0-0 line 2825 [ 566.856139] binder: 22528:22533 got reply transaction with no transaction stack [ 566.863965] binder: 22528:22533 transaction failed 29201/-71, size 0-0 line 2741 06:10:18 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000000040)='./file1\x00', 0x0) r1 = dup(r0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x3) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 566.891455] binder_alloc: binder_alloc_mmap_handler: 22528 20001000-20004000 already mapped failed -16 [ 566.957199] binder: BINDER_SET_CONTEXT_MGR already set [ 566.962733] binder: 22528:22533 ioctl 40046207 0 returned -16 [ 566.996455] binder_alloc: 22528: binder_alloc_buf, no vma 06:10:19 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000000040)='./file1\x00', 0x0) dup(r0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 567.002377] binder: 22528:22540 transaction failed 29189/-3, size 0-0 line 2973 06:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 567.067493] binder: 22536 RLIMIT_NICE not set [ 567.077119] binder: undelivered TRANSACTION_ERROR: 29201 [ 567.098166] binder: undelivered TRANSACTION_ERROR: 29189 06:10:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x56}, {0x5, 0x1}, {0x1, 0x9601}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:19 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 567.365765] binder: 22555 RLIMIT_NICE not set [ 567.370511] binder: 22555 RLIMIT_NICE not set [ 567.433168] binder: 22553:22561 got reply transaction with no transaction stack [ 567.440873] binder: 22553:22561 transaction failed 29201/-71, size 0-0 line 2741 06:10:19 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x3, 0x1, 0x1, 0x1, 0x6, 0x1, 0x9, 0x8, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x10000, 0xfffffffffffeffff, 0x0, 0x80, 0x1, 0x10}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYBLOB="c52f50627e60314726a235f9687929dd89ae85c6bd67b4cec9c5e258e3acdf590eedee86238bd6fba2bc3f520a9b2b33d834a4cf1a64b4152998bbba6280225682e546f1a1ca7153e328ed219090413ef9d2d8e13cbdb3b36202028bab690ed880c7dd8932286aa4a8788ae2fe24113d283b3b0628de29ea54a95b2ee3785c23ad209f374bc001111f63ed562ec69897688e5475f8cd9a3c110bd36324eb8876b86fdc3b0348b7588e0537b576f2ffa19e67da182fa70d43c8", @ANYRESHEX, @ANYRES64=r4, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=r4, @ANYPTR64, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES64=r2], @ANYRESHEX=r1]) ioctl$KVM_NMI(r5, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 06:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) r3 = syz_open_dev$admmidi(&(0x7f0000001400)='/dev/admmidi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000001440)={0xfffffffffffffffe}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002780)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000028c0)={&(0x7f00000027c0)={0x1d, r4}, 0x10, &(0x7f0000002880)={&(0x7f0000002800)={0x7, 0x2ec, 0x6, {}, {}, {0x3, 0x3f, 0x7e7, 0x5}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x5}, 0x1c, 0x1, 0x0, 0x0, "5969b4c15bd162ac32c9f66aa1c3464f14a28faf6a44c5b6a5688cbdfe89e02ba7f0f9f56175457db20118b3051dffd484ce91ef48e29925b5eb0976b28c5ba9"}}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x40400d0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 567.577336] binder_alloc: 22553: binder_alloc_buf, no vma [ 567.583289] binder: 22553:22561 transaction failed 29189/-3, size 0-0 line 2973 06:10:19 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 567.625047] binder: release 22553:22555 transaction 515 out, still active [ 567.632209] binder: undelivered TRANSACTION_COMPLETE [ 567.649432] binder: release 22553:22555 transaction 515 in, still active [ 567.656452] binder: send failed reply for transaction 515, target dead [ 567.663269] binder: undelivered TRANSACTION_ERROR: 29201 06:10:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002180)=""/223, 0xdf}], 0x1}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}], 0x2, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000bc0)=""/139, 0x8b}], 0x2, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/6, 0x6}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x8bd, 0x4) 06:10:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x15071583, 0x101800) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 567.790330] binder: undelivered TRANSACTION_ERROR: 29189 06:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="4bf2d9f316683e1416d2fb207ff182455d748ce4bb935a7e113bb63b9f527fb568c04a3590f453413f873340f023df533cb13ebf1e3f5db3a1bd0fc79a122879525267168a98ade0a0921b7da79b3fc458fccbd9fcd38847d2cfd8048987d291b70fb3384793acc92c5cd60aef64d5e38f58a481dff25dbe2731d9810d09c5ab6480807dd284f64f7fb627"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:19 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 567.932639] binder: 22584 RLIMIT_NICE not set [ 567.937289] binder: 22584 RLIMIT_NICE not set 06:10:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'hsr0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x19}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20240, 0x0) write$vhci(r1, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "953b78451c9e7080c3fe910d9f4e5cf1842b28732df9a4e25432d02f094c1b5c3a3da65f783f867ef2f78f60"}, 0x2d) [ 568.031479] binder: 22584 RLIMIT_NICE not set [ 568.092276] binder_alloc: binder_alloc_mmap_handler: 22583 20001000-20004000 already mapped failed -16 [ 568.135355] binder: BINDER_SET_CONTEXT_MGR already set [ 568.140756] binder: 22583:22584 ioctl 40046207 0 returned -16 [ 568.155360] binder_alloc: 22583: binder_alloc_buf, no vma [ 568.161312] binder: 22583:22592 transaction failed 29189/-3, size 0-0 line 2973 [ 568.173860] binder: 22583:22592 got reply transaction with no transaction stack [ 568.181584] binder: 22583:22592 transaction failed 29201/-71, size 0-0 line 2741 [ 568.193358] binder: undelivered TRANSACTION_COMPLETE [ 568.198712] binder: undelivered transaction 520, process died. [ 568.218588] binder: undelivered TRANSACTION_ERROR: 29201 [ 568.224324] binder: undelivered TRANSACTION_COMPLETE 06:10:20 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xfff7, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x68, 0x8, &(0x7f0000000240)=[@flat={0x77682a85, 0x10a, r2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x1, 0x1b}], &(0x7f0000000180)=[0x0]}}], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ace553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:20 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000000)={0x20071022, r0}, 0x0) [ 568.274302] binder: undelivered TRANSACTION_ERROR: 29189 06:10:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x80, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x80002) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x204000000000102}) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x1, 0x200) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'ip6_vti0\x00', 0x404}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syz_tun\x00', 0x80000600}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x488c00) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000240)={0x5e14700c, 0x2, 0x4}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9f0000, 0x1, 0x8, [], &(0x7f0000000100)={0x980902, 0x2, [], @p_u16=&(0x7f00000000c0)=0x2}}) userfaultfd(0x800) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x0) r3 = semget$private(0x0, 0x0, 0x204) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000280)=[0xfffffffffffffff7, 0x101, 0x3, 0xffff, 0xa941, 0xdfaa, 0x785b]) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1fc, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) 06:10:20 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x480000, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x115ffc, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000100)=r2) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@upd={0x100, 0x12, 0x316, 0x70bd2a, 0x25dfdbfd, {{'drbg_nopr_hmac_sha512\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x101}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) [ 568.456749] binder: 22604:22608 got reply transaction with no transaction stack [ 568.522507] binder: 22604:22608 got reply transaction with no transaction stack [ 568.556934] binder_alloc: binder_alloc_mmap_handler: 22604 20001000-20003000 already mapped failed -16 [ 568.588697] binder: BINDER_SET_CONTEXT_MGR already set [ 568.594364] binder: 22604:22608 ioctl 40046207 0 returned -16 [ 568.617074] binder_alloc: 22604: binder_alloc_buf, no vma 06:10:20 executing program 0: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa6ff7)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000000)) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) 06:10:20 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) sendfile(r0, r0, &(0x7f0000001000), 0xfec) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 568.635479] binder: 22604:22625 got reply transaction with no transaction stack [ 568.728013] binder: 22604:22631 got reply transaction with no transaction stack [ 568.773897] binder: undelivered TRANSACTION_ERROR: 29201 [ 568.779478] binder: send failed reply for transaction 524 to 22604:22608 [ 568.786669] binder: undelivered TRANSACTION_COMPLETE 06:10:20 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x50800, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) 06:10:20 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\t']}) close(r3) close(r2) r4 = semget(0x0, 0x2, 0x10) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x8, 0x2d, 0xe38]) 06:10:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x103080, 0x0) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="4bf2d9f372fec1ee02000000000001004c13280782c500000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6501f8"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:21 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getegid() getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140)) [ 569.198777] binder: 22652:22653 unknown command -134126324 [ 569.204790] binder: 22652:22653 ioctl c0306201 20000140 returned -22 [ 569.235727] binder: 22652:22653 got reply transaction with no transaction stack 06:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 569.280138] binder_alloc: binder_alloc_mmap_handler: 22652 20001000-20004000 already mapped failed -16 06:10:21 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 569.380134] binder: BINDER_SET_CONTEXT_MGR already set [ 569.385682] binder: 22652:22653 ioctl 40046207 0 returned -16 06:10:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4b8245000000e0ffffffffffffff0000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), 0x4) [ 569.437143] binder_alloc: 22652: binder_alloc_buf, no vma [ 569.482437] binder: 22652:22653 unknown command -134126324 [ 569.488129] binder: 22652:22653 ioctl c0306201 20000140 returned -22 06:10:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet(r0, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000008003, 0x80000001}, 0x14) shutdown(r0, 0xfffffffffffffffe) 06:10:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x803}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'team_slave_0\x00', @ifru_mtu}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) [ 569.599001] binder: 22652:22661 got reply transaction with no transaction stack [ 569.599118] binder: release 22652:22653 transaction 531 out, still active [ 569.613632] binder: undelivered TRANSACTION_COMPLETE 06:10:21 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 569.659154] binder: send failed reply for transaction 531, target dead 06:10:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x15) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000e95fe0), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/55, 0x37}], 0x1, 0x4e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x5, 0x0, 0x1, 0x1, 0x10001, 0x4}, 0x20) 06:10:21 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 569.927299] binder: BINDER_SET_CONTEXT_MGR already set [ 569.932882] binder: 22693:22696 ioctl 40046207 0 returned -16 06:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000080)="f9f6c14dbd68c107f57d68f0104b6275c57f8fa0780d7b53d47066d353200991d6701e32fa31d9cacac47d935f65fa3de588bb381b8f01e994700d032b9091c72f49edd3eabb0b33993594bdcff3c482b77262be911cf7737b6930515b41092b46936d9cecfb", 0x66, 0x4, &(0x7f0000000100)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 569.979742] binder_alloc: 22693: binder_alloc_buf, no vma [ 570.039213] binder: 22693:22694 got reply transaction with no transaction stack [ 570.040477] binder: undelivered TRANSACTION_COMPLETE [ 570.046995] binder_transaction: 9 callbacks suppressed [ 570.047024] binder: 22693:22694 transaction failed 29201/-71, size 0-0 line 2741 [ 570.052148] binder: undelivered transaction 537, process died. [ 570.083336] binder: undelivered TRANSACTION_COMPLETE 06:10:22 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:22 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 570.502557] binder: 22716:22723 got reply transaction with no transaction stack [ 570.510120] binder: 22716:22723 transaction failed 29201/-71, size 0-0 line 2741 06:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d82458d5cf322728c8b59a5d57e55e2d4d222d588df841d4f77c9b7ca5ce263bd8280a1dc68af6b4a34cce36688cf60701d58096baca679181eb989e0b7b0d72b611ece7255b2870e9c7e9bba621b41c1b0d915ad3c7160f0a9052eeb77c577b2d69bacd5745f6ccbf5b30223c3aba6d129d21f918541"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:22 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x2000000000003) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/17, 0x11, 0x22, &(0x7f0000000140)={0xa, 0x4e22, 0xda6ef86, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) fsetxattr(r0, &(0x7f00000000c0)=@random={'os2.', 'comm\x00'}, &(0x7f0000000100)='/cgroupem1%\x00', 0xc, 0x0) 06:10:22 executing program 2: write(0xffffffffffffffff, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x4000000000b, @pix_mp}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x40100, 0x0) write$P9_RSTAT(r1, &(0x7f0000000740)={0x7a, 0x7d, 0x2, {0x0, 0x73, 0xfbc4, 0xff, {0x1, 0x4, 0x5}, 0x10000000, 0x101, 0x400, 0x2, 0x16, 'trusted.overlay.nlink\x00', 0x15, '/dev/bus/usb/00#/00#\x00', 0x9, 'vboxnet0.', 0xc, '/dev/video#\x00'}}, 0x7a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40040, 0x0) write$P9_RMKDIR(r2, &(0x7f00000004c0)={0x14, 0x49, 0x1, {0x0, 0x2, 0x8}}, 0x14) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0xf, @vbi={0x1, 0x800, 0x10001, 0x32344d59, [0x2f, 0x3], [0xffd0], 0x1}}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000680)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'U-', 0xfffffffffffff3a7}, 0x28, 0x2) r3 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x476, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000280)={0x10, 0x0, 0x6}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44801) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r5, 0x80}, 0x8) lsetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'system.', '/dev/rfkill\x00'}, &(0x7f0000000440)='/dev/rfkill\x00', 0xc, 0x0) 06:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9dd16688edca61c0826f61d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:23 executing program 2: write(0xffffffffffffffff, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:23 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x200000fff, &(0x7f0000000200)="0a5c2f023ce97da4126275ffc34656c02d7ff74f8074") fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "f33027803c5f3d56827894162631bd3be053e483"}, 0x15, 0x3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fa3f2"]) ioctl$KVM_NMI(r4, 0xae9a) mmap$binder(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x8, 0x10, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$caif(r1, &(0x7f0000000180)=@util={0x25, "e2729ef3ec917b01d4bbacbdabbbbe4f"}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="75736572030000006c6647a8dc766d6e65743173656c6600"], 0x0, 0x0, 0x0) fchdir(r0) [ 571.229142] binder_alloc: binder_alloc_mmap_handler: 22716 20001000-20004000 already mapped failed -16 [ 571.274131] binder: BINDER_SET_CONTEXT_MGR already set [ 571.279568] binder: 22716:22723 ioctl 40046207 0 returned -16 [ 571.308949] binder_set_nice: 6 callbacks suppressed [ 571.308962] binder: 22758 RLIMIT_NICE not set 06:10:23 executing program 2: write(0xffffffffffffffff, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 571.418696] binder: 22716:22723 got reply transaction with no transaction stack [ 571.426436] binder: 22716:22723 transaction failed 29201/-71, size 0-0 line 2741 [ 571.435070] binder_release_work: 8 callbacks suppressed [ 571.435084] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.490767] binder: undelivered TRANSACTION_ERROR: 29201 06:10:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), 0x4) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8502, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000000c0)=""/8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:10:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:23 executing program 2: r0 = memfd_create(0x0, 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:23 executing program 0: r0 = eventfd(0x7) pipe2$9p(&(0x7f0000000080), 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}], 0x2, 0x7fffffff, &(0x7f0000000180)={0x8}, 0x8) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000001c0)=0xfffffffffffffcb0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x1, 0x100000000}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x19}]}}}]}, 0x3c}}, 0x0) [ 571.752852] binder: 22781 RLIMIT_NICE not set [ 571.757562] binder: 22781 RLIMIT_NICE not set [ 571.797140] binder: 22781 RLIMIT_NICE not set [ 571.821315] netlink: 'syz-executor0': attribute type 25 has an invalid length. [ 571.824978] binder_alloc: binder_alloc_mmap_handler: 22780 20001000-20004000 already mapped failed -16 [ 571.829094] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) 06:10:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x402000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, 0x0) ioctl(r2, 0x0, 0x0) dup3(r1, r0, 0x0) 06:10:23 executing program 2: r0 = memfd_create(0x0, 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 571.869915] binder: BINDER_SET_CONTEXT_MGR already set [ 571.875560] binder: 22780:22781 ioctl 40046207 0 returned -16 [ 571.897598] binder_alloc: 22780: binder_alloc_buf, no vma [ 571.903494] binder: 22780:22791 transaction failed 29189/-3, size 0-0 line 2973 06:10:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3f, 0x20010c) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x4001, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4bad430e6c97dc175f01132c1d820000000015e8984b34773f3d6d6aa19bde9e62ffc7f9ce95680a50a60d7fa8dd5c614a040afde439cf85f997f6d2d783bef0af152da033ffff7c0d420af2eafdc32de9daa110cf70c190b432666a5a23a5262e1ae7b525a6b5dfa5c76f2f2a2e00000000000000000000000000000000000000001000400000000000000008e0d20a1a"]) fstat(r3, &(0x7f0000000180)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xa7, 0x1, 0x0, 0xfd0f) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) [ 571.945903] binder: 22781 RLIMIT_NICE not set [ 571.998985] binder: undelivered TRANSACTION_COMPLETE [ 572.004404] binder: undelivered transaction 545, process died. [ 572.015687] binder: undelivered TRANSACTION_COMPLETE 06:10:24 executing program 0: r0 = eventfd(0x7) pipe2$9p(&(0x7f0000000080), 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}], 0x2, 0x7fffffff, &(0x7f0000000180)={0x8}, 0x8) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000001c0)=0xfffffffffffffcb0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x1, 0x100000000}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x19}]}}}]}, 0x3c}}, 0x0) 06:10:24 executing program 2: r0 = memfd_create(0x0, 0x2000000000003) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) socketpair(0x800000001e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r5 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='\x00', 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000400)='user\x00', &(0x7f0000000440)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000eca000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 572.147046] binder: undelivered TRANSACTION_ERROR: 29189 06:10:24 executing program 4: ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="644899f243f6f466baf80cb85463988def66bafc0cb0fbee66440f3881bb009000004d0fae2a47d8cc3e2646f40f08c44151e9556d66baf80cb80cee5e84ef66bafc0ced", 0x44}], 0x1, 0x11, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1fcb, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 572.316322] netlink: 'syz-executor0': attribute type 25 has an invalid length. [ 572.324090] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) 06:10:24 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 572.511180] binder: 22819 RLIMIT_NICE not set [ 572.516055] binder: 22819 RLIMIT_NICE not set 06:10:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x733, &(0x7f00000000c0)=0x4) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/135) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:24 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @dev}, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x50b100, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x600000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) [ 572.604854] binder: 22819 RLIMIT_NICE not set 06:10:24 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:24 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff9961bfc50326303ecbcade9d5c95d53373f55290919a95bf31f03131de7c202d087ffbaf854f7ca2857fd2e", 0x54) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8001, 0xac000) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000080)={0x2197, {{0x2, 0x4e22, @empty}}}, 0x88) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8970, &(0x7f0000000040)={'veth1_to_bond:\x00', 0x0}) close(r2) close(r1) 06:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316e88edc846fbaa2055c70fb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:25 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='\xff\'\xc5\x02trg\xeb\xf1\xf4\xd8;\xb2\xf0x\x9c\fx\x1c\xcbB\xdf\xa3u\x7f9\xf2u^p\xd7|}!\xd0G\xca$-\x8f\xe1\x1d\"\x87\x94~\xa6\"\xa3*;n\x80\xd1\x80].\x94\x17b\x19\x90\xc5\xc4\xc0{\xed\x95\xed\x90\xcevU9\xb8T\x9d\x83,\xcf\x91^\x9f\xb0\xe7P\xa3\xa1@\xf0\xe2\x87\xb4=\xa71\x81\xb6\xfc\xd7t\xc6\xe2 \x8e\xb7?\xdc\x8df-/\a7\xd1\xb9\xa9\xae\xdc\xff\x9a\xe5@\xc9\x97*\x90\xc2\xca\x95\x17a\x1a\xf9/\x8av\x90T\x84m\x82\xf2\xfe=\xf0\x1f\xa3\xed\x0f\xe0\x7f\xc0\xc9\xb7\xf8a\tP\xb1\xb6\xd1\x8f\x1b\xda\xeae\x1d\xe6Y\x02\xaf6]\x1fSV\xbe\fn\xd5\x1fm\xe1\x9f\x85n\xe5V\x93>\xd0k\xd15.M\x8e\x9f\xda\xd8\xda\xf4:\xf0\xd4\xd1\r\xba\xe9\xc8\x84X\x1a\xd4\xf3\xd2\xb3\xd0\xf6\xc1\xbe9{\t\x92\xb4\x87#\xe5\xdc\x8eT(\xb6\xd1\xb3\x02(\xf8\xa6N3\x94\xf7\xd6B\x0f\xa2\xc8\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6O\x86\xb1pev\x93\xc1\xf7+ \xaf\xc9\xc1\x16\x9c^V\\X\x9b\xee\xea\xc8\xaa\xc8\xc8\xa2\xa4\x8d\x7fv\x1cF\xa7\xb0\x8cs`\'\xfc\xd4\x90YKo\xfb\xc0\xd4\x85\x02J\xb1\xc4\xea\xf1G__\x1f\x9a\xa6\x14\xe6\xc1mK\xfc\xffY\x82\xe8\x18$\x9ee/\xb6\x9a\xed8U|q\"\x9a\xa1\xaa0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r5, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x0, [], 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0063434080a41ad7a8299f4b65d7718d7393d6b5313f9a58ca66958a105a77a0e8c6ef99efc7c2ce1f65d418da568e811b202ab431933ce1a0eb9c3a310ad34be27fd544"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01630000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 06:10:25 executing program 4: unshare(0x400) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r3 = socket$inet6(0xa, 0x803, 0x3) r4 = socket$inet6(0xa, 0x3, 0x3a) r5 = accept$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000012c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001300)={{{@in=@loopback, @in=@rand_addr=0x800, 0x4e21, 0x0, 0x4e22, 0xa, 0x0, 0x80, 0xa0, 0x2, r6, r7}, {0x9, 0xfffffffffffffffb, 0x1, 0x1, 0x2, 0xffff, 0x7, 0xd4}, {0x9, 0x0, 0x386, 0x2}, 0x2, 0x6e6bb3, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d2, 0xff}, 0x2, @in=@multicast1, 0x3504, 0x0, 0x1, 0x8, 0x80000000, 0xa}}, 0xe8) setsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f00000002c0)="39cfadf367badb9e816e3e76ae323db964d8539d2afd6877d97e0386d29cb179d46bee2a0f12c43ce76909dc60d18273a7770da8f16a55378d8f27c7fd75eac0a7710f8fa1f3a1c74eeb207fc0f8630cae69faa07e1d5cf6e8479ed2ccdb402666d4f362cf5eba9de917dc6a3bac5cf3830e9b4bffa70ef0ad6b5b340060b4d403b177f53f7ef02a21766b9461228ed95ddbaf957db977489376b954d1e502db865b6cd947e18bcef08c63b9f6a6c9333d4ff0a1e9eed9618cae", 0xba) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x8, 0x1, 0x6, 0x2, 0x7, 0x10001, 0x0, 0x8000}, &(0x7f0000000380)={0xe2, 0x6, 0x5, 0x3ff, 0x2, 0xfffffffffffffffa, 0xfffffffffffffb93, 0x1000}, &(0x7f00000003c0)={0x7ff, 0x0, 0x57b9171d, 0x0, 0x0, 0x5, 0x4, 0x3}, &(0x7f0000000440)={r8, r9+30000000}, &(0x7f00000004c0)={&(0x7f0000000480)={0x3}, 0x8}) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000540)=0x10, 0x80800) setsockopt$inet_opts(r10, 0x0, 0x80002, &(0x7f0000000580)="567a3d7471b27fc548d9684a6744718ec73c4e479329d351d251580c453db9c7b884da0ed4e78d865ff1faf4041f187a84dafe331013fcfb6a2035430004863954f1f9357cd49dca34423d975827ece195a2bb892ea9e3af86b33a1f08", 0x5d) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$kcm(r11, &(0x7f0000001dc0)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)="e4f0c837de4fd7b7c6331d576d7ea9269a872048a69848afa0d80707f03ccccd86e19e3ba479526f3898804bd1ae2b556c87f8f88324411e88b6c314455b1e7b3e2d4ee5510046fc441f508e40385b5f97f5903daa4f431dc9d95cc4bdbf7ca20ac9616cb8561f104c5fbc3eeb0a234346024b44c91d1411034b9a073fe5e60df66542f325738b2bfa6b37bcf519a06cf8027135b03d069195d51bee71685834e020f1eb9a126f23cfa0140b5d1c6fd17e82962ddc4e4e572351153b21404d810c5f8648e274667d5acdb2306445f942799c41f3d822740226b3cf2a24fd674ff2e2459d1b3418dd984520822c7600ae3c53d2b9f2f49fdab3", 0xf9}], 0x1}, 0x20000000) write$binfmt_aout(r11, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0xa25) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r12, 0x310, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x812e4d9ba1024ffd) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0xa) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x6, @mcast2, 0x100000000}, {0xa, 0x4e20, 0x0, @mcast1, 0x2}}, 0x5c) close(r4) fcntl$getflags(r0, 0x401) 06:10:25 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x2) socket(0xc, 0x7, 0x6) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000140)=0xc) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000044fb98c3e8834579ce3a02649211a83f1b597139e742eeff7600000000000000"], 0x18}}], 0x1, 0x0) 06:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200400, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x1, 0x1, {0xa, 0x4e20, 0x9, @mcast2, 0xff}}}, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r5}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000240)=0x7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:10:25 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:25 executing program 4: r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000005b40)=@sco, 0x80, &(0x7f0000006e80), 0x0, &(0x7f0000006f00)=""/27, 0x230}}], 0x400011e, 0x0, &(0x7f0000007040)={0x77359400}) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000740)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) timer_create(0x1, &(0x7f0000000240)={0x0, 0x13}, &(0x7f0000000200)) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000000040000000000e6ffffffffffffff33d832d8870800e57f444990b50b5871a6d916895b8ea6f35956edbceec454d4ad633ba1bb477cb9bdf57ec021b9ce523c58990b950d59a44aeedab7001e9b2f4b07d1973df5db76fa1917f597e08ef439f173d6585b6b9535d0bd5410ec0c90213b30d42b2ec11cd0c0914480e95092d483adfd3f092c90f5efacf70ba3fc21906215557fd979f0fe93d70ceb5a56c476fec840acf32f3fb8a6c5fdd4e1ca083d1a4ee8ad5b2f82358c21c6402e13fcff723c66"], 0x14}}, 0x0) [ 573.807285] binder: 22890:22891 ioctl c0306201 200001c0 returned -14 06:10:25 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:25 executing program 0: r0 = userfaultfd(0xffdfff7ffffffffd) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) setrlimit(0x7, &(0x7f0000000080)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x4, r2, 0x0, 0xfffffffffffff000}) clone(0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0xff, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e24, 0x0, 'sh\x00', 0x0, 0xfffffffffffffff7, 0xf}, {@local, 0x4e23, 0x5, 0x9, 0x1, 0x5}}, 0x44) read(r1, &(0x7f0000000180)=""/157, 0x9d) sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/217, 0xd9}], 0x1) 06:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt(r3, 0x1000000020000000, 0x100000001, &(0x7f0000000080)=""/127, &(0x7f0000000100)=0x7f) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, 0x0, 0x16, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 573.913915] binder: 22890:22900 ioctl c0306201 20000600 returned -14 06:10:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 573.980067] binder: 22890:22891 ioctl c0306201 20000140 returned -14 [ 574.028103] netlink: 48 bytes leftover after parsing attributes in process `syz-executor4'. 06:10:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x420000) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000003c0)=0x6, &(0x7f0000000540)=0x2) prctl$PR_SET_TIMERSLACK(0x1d, 0x9c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x8) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @multicast1}, 0xc) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000580)=0x80) ptrace$pokeuser(0x6, r3, 0x40, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) sendmsg$nl_netfilter(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x2, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@typed={0x8, 0x68, @pid=r3}]}, 0x1c}}, 0x20000804) r5 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x80, 0x0, &(0x7f0000000640)=[@free_buffer={0x40086303, r5}, @dead_binder_done, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000440)=[@fda={0x66646185, 0x6, 0x2, 0x33}, @fd={0x66642a85, 0x0, r2, 0x0, 0x1}], &(0x7f0000000500)=[0x0]}, 0x21a17b2a}}, @acquire_done={0x40106309, r5, 0x2}, @acquire], 0x0, 0x0, 0x0}) 06:10:26 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:26 executing program 0: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xffffffffffffffff}}}}}, &(0x7f0000000040)) 06:10:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000000000000175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 574.435110] binder: 22923:22927 got transaction to context manager from process owning it [ 574.443778] binder: 22923:22927 transaction failed 29201/-22, size 0-0 line 2825 06:10:26 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, &(0x7f0000000140), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) [ 574.508427] binder: BINDER_SET_CONTEXT_MGR already set [ 574.513978] binder: 22923:22933 ioctl 40046207 0 returned -16 06:10:26 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x77) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x13c) close(r1) [ 574.570160] binder: undelivered TRANSACTION_ERROR: 29201 [ 574.575929] binder: send failed reply for transaction 553 to 22923:22931 [ 574.704027] binder: undelivered TRANSACTION_COMPLETE [ 574.709402] binder: undelivered TRANSACTION_ERROR: 29189 06:10:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x1}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x8, 0x0, 0x2, {0xfffffffffffffff9, 0x100000000, 0xb6fd, 0xa8}}) 06:10:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 06:10:28 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, &(0x7f0000000140), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x80202) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0x1, 0x2, 0x4, 0xffffffffffff0001, 0x4, 0x1f}, 0x7}) mremap(&(0x7f0000a94000/0x1000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000b18000/0xe000)=nil) 06:10:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 06:10:29 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, &(0x7f0000000140), 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:29 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) r3 = dup3(r0, r0, 0x80000) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001240)={0x0}, &(0x7f0000001280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6d, &(0x7f0000000100)={r4, 0x3}, &(0x7f0000000040)=0x4) 06:10:29 executing program 4: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0x1, 0x4c000000}, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xb) [ 577.307530] ================================================================== [ 577.314978] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 577.321515] CPU: 0 PID: 22980 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #2 [ 577.328721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.338082] Call Trace: [ 577.340704] dump_stack+0x173/0x1d0 [ 577.344370] kmsan_report+0x12e/0x2a0 [ 577.348253] kmsan_internal_check_memory+0x455/0xb00 [ 577.353389] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.358774] ? trace_kmalloc+0xc2/0x2e0 [ 577.362807] kmsan_copy_to_user+0xab/0xc0 [ 577.366989] _copy_to_user+0x16b/0x1f0 [ 577.370928] sctp_getsockopt+0x164ef/0x17530 [ 577.375433] ? aa_sk_perm+0x605/0x950 [ 577.379299] ? aa_sock_opt_perm+0x121/0x270 [ 577.383665] ? sctp_setsockopt+0x12480/0x12480 [ 577.388287] sock_common_getsockopt+0x13f/0x180 [ 577.393008] ? sock_recv_errqueue+0x8f0/0x8f0 [ 577.397526] __sys_getsockopt+0x489/0x550 [ 577.401740] __se_sys_getsockopt+0xe1/0x100 [ 577.406117] __x64_sys_getsockopt+0x62/0x80 [ 577.410468] do_syscall_64+0xbc/0xf0 [ 577.414245] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 577.419458] RIP: 0033:0x457ec9 [ 577.422683] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.441600] RSP: 002b:00007fedd25b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 577.449328] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9 [ 577.456614] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005 [ 577.463925] RBP: 000000000073bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 577.471212] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fedd25b56d4 [ 577.478563] R13: 00000000004c90f8 R14: 00000000004cfc80 R15: 00000000ffffffff [ 577.485884] [ 577.487565] Uninit was stored to memory at: [ 577.491916] kmsan_internal_chain_origin+0x134/0x230 [ 577.497065] kmsan_memcpy_memmove_metadata+0x58f/0xfa0 [ 577.502382] kmsan_memcpy_metadata+0xb/0x10 [ 577.506729] __msan_memcpy+0x5b/0x70 [ 577.510473] sctp_getsockopt+0x16cee/0x17530 [ 577.514907] sock_common_getsockopt+0x13f/0x180 [ 577.519618] __sys_getsockopt+0x489/0x550 [ 577.523832] __se_sys_getsockopt+0xe1/0x100 [ 577.528192] __x64_sys_getsockopt+0x62/0x80 [ 577.532581] do_syscall_64+0xbc/0xf0 [ 577.536327] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 577.541609] [ 577.543259] Uninit was stored to memory at: [ 577.547632] kmsan_internal_chain_origin+0x134/0x230 [ 577.552769] kmsan_memcpy_memmove_metadata+0x58f/0xfa0 06:10:29 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751a", 0x91) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="a25ba246ee4fb0347eb703a2cdef0ee4c45cd244face307b1db75acb8a99986cd666df50eda5d7141ffec7533854d2b5e852bbd67049e778002307cb5b40e9220119e3b058a781469da1aecea1ed17289f764f2e267c5c55a9e913e9f99eaf26622cfbb260583ea850bedae9d84727f2b1d452d0e7d1a8e7a462921f18d008d800200f78aea01ca05bf564e5746a6811f45343e6b5c62f030b494db165b52e28ea22cf0bb49f9799bb18e180174d0bc19c", 0xb1}], 0x1}, 0x4000084) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:29 executing program 2: r0 = memfd_create(&(0x7f0000000340)='#vmnet1nodevem1\x00\x98;\xe2h\xe5\xb2*\xb9n@Pq\xbc\xa9bHoR\xfee\xc7pf\xe9\xed.\xc2\x97', 0x0) write(r0, &(0x7f0000000140)="6f12f9eb9e69e4aeb9d9c0fe704943d2f83615fa56e65288075e3d7e7e4d89c17e504e3a28dff89ff996", 0x2a) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x0) 06:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="4bf2d9f316688edc175f4c132c1d8245"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2cd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:10:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 577.558071] kmsan_memcpy_metadata+0xb/0x10 [ 577.562409] __msan_memcpy+0x5b/0x70 [ 577.566139] sctp_getsockopt+0x16b9a/0x17530 [ 577.570583] sock_common_getsockopt+0x13f/0x180 [ 577.575301] __sys_getsockopt+0x489/0x550 [ 577.579476] __se_sys_getsockopt+0xe1/0x100 [ 577.583846] __x64_sys_getsockopt+0x62/0x80 [ 577.588186] do_syscall_64+0xbc/0xf0 [ 577.591959] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 577.597153] [ 577.598784] Uninit was created at: [ 577.602351] kmsan_internal_poison_shadow+0x92/0x150 [ 577.607567] kmsan_kmalloc+0xa6/0x130 [ 577.611386] kmem_cache_alloc_trace+0x55a/0xb90 [ 577.616099] sctp_inet6addr_event+0x5c9/0xc10 [ 577.620616] atomic_notifier_call_chain+0x13d/0x240 [ 577.625660] inet6addr_notifier_call_chain+0x76/0x90 [ 577.630809] ipv6_add_addr+0x2361/0x2620 [ 577.634904] inet6_addr_add+0xc75/0x1bd0 [ 577.639022] inet6_rtm_newaddr+0x15be/0x3ab0 [ 577.643455] rtnetlink_rcv_msg+0x115b/0x1550 [ 577.647956] netlink_rcv_skb+0x444/0x640 [ 577.652078] rtnetlink_rcv+0x50/0x60 [ 577.655831] netlink_unicast+0xf40/0x1020 [ 577.660018] netlink_sendmsg+0x127f/0x1300 [ 577.664304] __sys_sendto+0x8c4/0xac0 [ 577.668149] __se_sys_sendto+0x107/0x130 [ 577.672245] __x64_sys_sendto+0x6e/0x90 [ 577.676274] do_syscall_64+0xbc/0xf0 [ 577.680013] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 577.685207] [ 577.686863] Bytes 32-35 of 2688 are uninitialized [ 577.691736] Memory access of size 2688 starts at ffff888102572000 [ 577.697973] Data copied to user address 0000000020000208 [ 577.703427] ================================================================== [ 577.710809] Disabling lock debugging due to kernel taint [ 577.716301] Kernel panic - not syncing: panic_on_warn set ... [ 577.722219] CPU: 0 PID: 22980 Comm: syz-executor0 Tainted: G B 4.20.0-rc7+ #2 [ 577.730866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.740253] Call Trace: [ 577.742864] dump_stack+0x173/0x1d0 [ 577.746544] panic+0x3ce/0x961 [ 577.749795] kmsan_report+0x293/0x2a0 [ 577.753681] kmsan_internal_check_memory+0x455/0xb00 [ 577.758810] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.764192] ? trace_kmalloc+0xc2/0x2e0 [ 577.768243] kmsan_copy_to_user+0xab/0xc0 [ 577.772423] _copy_to_user+0x16b/0x1f0 [ 577.776392] sctp_getsockopt+0x164ef/0x17530 [ 577.780880] ? aa_sk_perm+0x605/0x950 [ 577.783421] binder_alloc: binder_alloc_mmap_handler: 22956 20004000-20005000 already mapped failed -16 [ 577.784761] ? aa_sock_opt_perm+0x121/0x270 [ 577.798587] ? sctp_setsockopt+0x12480/0x12480 [ 577.803246] sock_common_getsockopt+0x13f/0x180 [ 577.807991] ? sock_recv_errqueue+0x8f0/0x8f0 [ 577.812526] __sys_getsockopt+0x489/0x550 [ 577.816742] __se_sys_getsockopt+0xe1/0x100 [ 577.821124] __x64_sys_getsockopt+0x62/0x80 [ 577.823409] binder: BINDER_SET_CONTEXT_MGR already set [ 577.825490] do_syscall_64+0xbc/0xf0 [ 577.825522] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 577.825540] RIP: 0033:0x457ec9 [ 577.825561] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.825573] RSP: 002b:00007fedd25b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 577.825593] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9 [ 577.825605] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005 [ 577.825617] RBP: 000000000073bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 577.825630] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fedd25b56d4 [ 577.825642] R13: 00000000004c90f8 R14: 00000000004cfc80 R15: 00000000ffffffff [ 577.832026] Kernel Offset: disabled [ 577.910510] Rebooting in 86400 seconds..