, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40086602, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x2, &(0x7f0000000000)) 01:47:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x0, 0x0, 0x0) [ 295.637281] binder: BINDER_SET_CONTEXT_MGR already set [ 295.654571] binder: 9786:9789 ioctl 40046207 0 returned -16 [ 295.676213] binder_thread_write: 6 callbacks suppressed 01:47:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) [ 295.676225] binder: 9786:9789 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 295.688670] binder: 9786:9796 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:47:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:38 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae68, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 295.853298] binder: BINDER_SET_CONTEXT_MGR already set [ 295.895565] FAULT_INJECTION: forcing a failure. [ 295.895565] name failslab, interval 1, probability 0, space 0, times 0 [ 295.907095] CPU: 1 PID: 9808 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #67 [ 295.907134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.907141] Call Trace: [ 295.907168] dump_stack+0x1c4/0x2b4 [ 295.907193] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.935121] ? mark_held_locks+0x130/0x130 [ 295.939384] should_fail.cold.4+0xa/0x17 [ 295.943549] ? is_bpf_text_address+0xd3/0x170 [ 295.948076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 295.950364] binder: 9803:9807 ioctl 40046207 0 returned -16 [ 295.953189] ? print_usage_bug+0xc0/0xc0 [ 295.953206] ? __lock_acquire+0x7ec/0x4ec0 [ 295.953225] ? __lock_acquire+0x7ec/0x4ec0 [ 295.953243] ? print_usage_bug+0xc0/0xc0 [ 295.953261] ? print_usage_bug+0xc0/0xc0 [ 295.953276] ? print_usage_bug+0xc0/0xc0 [ 295.953295] ? graph_lock+0x170/0x170 [ 295.963067] ? __lock_acquire+0x7ec/0x4ec0 [ 295.963087] ? graph_lock+0x170/0x170 [ 295.963113] ? find_held_lock+0x36/0x1c0 [ 295.963216] ? __sigqueue_alloc+0x251/0x710 [ 295.963235] ? lock_downgrade+0x900/0x900 [ 295.987652] ? check_preemption_disabled+0x48/0x200 [ 295.987677] __should_failslab+0x124/0x180 [ 295.987698] should_failslab+0x9/0x14 [ 295.987715] kmem_cache_alloc+0x47/0x730 [ 295.987742] __sigqueue_alloc+0x3db/0x710 [ 295.995774] ? dequeue_signal+0x630/0x630 [ 295.995803] ? print_usage_bug+0xc0/0xc0 [ 295.995820] ? print_usage_bug+0xc0/0xc0 [ 295.995843] ? graph_lock+0x170/0x170 [ 296.045582] ? graph_lock+0x170/0x170 [ 296.049401] __send_signal+0x121d/0x1a00 [ 296.053481] ? prepare_signal+0xcf0/0xcf0 [ 296.057703] ? __task_pid_nr_ns+0x301/0x640 [ 296.062052] ? lock_downgrade+0x900/0x900 [ 296.066206] ? check_preemption_disabled+0x48/0x200 [ 296.071234] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 296.077031] ? kasan_check_read+0x11/0x20 [ 296.081194] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 296.086475] ? rcu_bh_qs+0xc0/0xc0 [ 296.090043] ? __task_pid_nr_ns+0x328/0x640 [ 296.094369] ? delayed_put_pid+0x30/0x30 [ 296.098441] ? zap_other_threads+0x270/0x270 [ 296.102857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.108402] send_signal+0x4a/0xe0 [ 296.111950] do_send_sig_info+0xae/0x170 [ 296.116018] ? __lock_task_sighand+0x430/0x430 [ 296.120613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.126162] send_sig+0x56/0x70 [ 296.129512] sk_stream_error+0xb1/0x110 [ 296.133534] tcp_sendmsg_locked+0x23ed/0x3f00 [ 296.138043] ? avc_has_perm+0x469/0x7e0 [ 296.142030] ? check_preemption_disabled+0x48/0x200 [ 296.147068] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 296.152886] ? tcp_sendpage+0x60/0x60 [ 296.156697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.162238] ? avc_has_perm+0x55f/0x7e0 [ 296.166232] ? find_held_lock+0x36/0x1c0 [ 296.170314] ? mark_held_locks+0xc7/0x130 [ 296.174545] ? __local_bh_enable_ip+0x160/0x260 [ 296.179224] ? __local_bh_enable_ip+0x160/0x260 [ 296.183897] ? lockdep_hardirqs_on+0x421/0x5c0 [ 296.188486] ? trace_hardirqs_on+0xbd/0x310 [ 296.192813] ? lock_release+0x970/0x970 [ 296.196794] ? lock_sock_nested+0xe2/0x120 [ 296.201043] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.206521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.212251] ? check_preemption_disabled+0x48/0x200 [ 296.217280] ? lock_sock_nested+0x9a/0x120 [ 296.221519] ? lock_sock_nested+0x9a/0x120 [ 296.225772] ? __local_bh_enable_ip+0x160/0x260 [ 296.230456] tcp_sendmsg+0x2f/0x50 [ 296.234025] inet_sendmsg+0x1a1/0x690 [ 296.237844] ? ipip_gro_receive+0x100/0x100 [ 296.242174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.247724] ? security_socket_sendmsg+0x94/0xc0 [ 296.252503] ? ipip_gro_receive+0x100/0x100 [ 296.256846] sock_sendmsg+0xd5/0x120 [ 296.260571] __sys_sendto+0x3d7/0x670 [ 296.264382] ? __ia32_sys_getpeername+0xb0/0xb0 [ 296.269079] ? wait_for_completion+0x8a0/0x8a0 [ 296.273673] ? __lock_is_held+0xb5/0x140 [ 296.277750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.283301] ? __sb_end_write+0xd9/0x110 [ 296.287374] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 296.292931] ? fput+0x130/0x1a0 [ 296.296219] ? do_syscall_64+0x9a/0x820 [ 296.300199] ? do_syscall_64+0x9a/0x820 [ 296.304182] ? lockdep_hardirqs_on+0x421/0x5c0 [ 296.308773] ? trace_hardirqs_on+0xbd/0x310 [ 296.313326] ? __ia32_sys_read+0xb0/0xb0 [ 296.317398] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.322768] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.328227] __x64_sys_sendto+0xe1/0x1a0 [ 296.332301] do_syscall_64+0x1b9/0x820 [ 296.336193] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 296.341571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 296.346504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.351364] ? trace_hardirqs_on_caller+0x310/0x310 [ 296.356389] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 296.361415] ? prepare_exit_to_usermode+0x291/0x3b0 [ 296.366442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.371297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.376492] RIP: 0033:0x457569 01:47:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8980, &(0x7f0000000000)) [ 296.379701] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.398611] RSP: 002b:00007f2e7964cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.406333] RAX: ffffffffffffffda RBX: 00007f2e7964cc90 RCX: 0000000000457569 [ 296.413604] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 296.420875] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 296.428145] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f2e7964d6d4 [ 296.435434] R13: 00000000004c3915 R14: 00000000004d57c0 R15: 0000000000000006 01:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 296.454758] binder: 9803:9821 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 296.463194] binder: 9814:9816 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 296.473243] binder: 9814:9823 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 296.481683] binder_thread_write: 3 callbacks suppressed [ 296.481695] binder: 9803:9807 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 296.598737] binder: BINDER_SET_CONTEXT_MGR already set 01:47:39 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/dev/amidi#\x00'}, 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3f, 0x80000) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000100)={0x7, 0x92, 0x1}) [ 296.619779] binder: 9832:9836 ioctl 40046207 0 returned -16 [ 296.644949] binder: 9832:9836 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 296.663045] binder: 9832:9842 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:47:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8983, &(0x7f0000000000)) 01:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 296.671460] binder: 9832:9836 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 296.780987] binder: BINDER_SET_CONTEXT_MGR already set [ 296.809835] binder: 9851:9853 ioctl 40046207 0 returned -16 [ 296.837428] binder: 9851:9853 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 296.848810] binder: 9851:9858 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 296.859913] binder: 9851:9853 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) dup3(r1, r0, 0x80000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8901, &(0x7f0000000000)) 01:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8904, &(0x7f0000000000)) [ 297.313044] binder: BINDER_SET_CONTEXT_MGR already set [ 297.319573] binder: BINDER_SET_CONTEXT_MGR already set [ 297.338134] binder: 9863:9867 ioctl 40046207 0 returned -16 01:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:40 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x40) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e23, @multicast1}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000100)=0x80000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) setsockopt(r2, 0x3c, 0x5, &(0x7f00000001c0)="d8e9d63e797668af3f4e25784954f885d18bc6aa88bddd4efb2c25fe3b14a3b75a1df4d24831c88de4979bec75027f54a806390d4f5231a22bdf18d0d1e2d9c8ff7e6db0fef65648465e8c7c8d6d13511d23fa1f78a4015dd1363505b116befe0a521421a79604aefba2613c98ea3f8becec00a94ecaa119340acfcc08a16f289e02c332e8074bd606addf872a5a605e5b8b05a8ac64e09d4959efccd464556f44f449a9ffe79adafa06ebd93e4feeb52fdd6cea9536bd482927933945db3a22534fabe7e3ca6de5d8b0f16d4ee4983e02b8017564e28fee5280f255106323e5d5437230071cbb6b8fc963ceb0822c7ac1ae", 0xf2) [ 297.358338] binder: 9864:9870 ioctl 40046207 0 returned -16 [ 297.377138] binder: 9863:9867 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 297.387519] binder: 9863:9879 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.389215] binder: 9864:9880 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8940, &(0x7f0000000000)) [ 297.532849] binder: BINDER_SET_CONTEXT_MGR already set [ 297.552711] binder: BINDER_SET_CONTEXT_MGR already set [ 297.564658] binder: 9889:9893 ioctl 40046207 0 returned -16 [ 297.571649] binder: 9892:9894 ioctl 40046207 0 returned -16 [ 297.594854] binder: 9892:9899 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.597825] binder: 9889:9903 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0045878, &(0x7f0000000000)) 01:47:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5421, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc020660b, &(0x7f0000000000)) [ 298.255263] binder: BINDER_SET_CONTEXT_MGR already set [ 298.272471] binder: 9915:9919 ioctl 40046207 0 returned -16 01:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10000, 0x40400) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x302, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004800) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 298.349383] binder: 9915:9930 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae76, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 298.430490] binder: BINDER_SET_CONTEXT_MGR already set 01:47:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x40087602, &(0x7f0000000000)) 01:47:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', r2}) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x120) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000200)={0x7, 0x8, 0x38, 0x80000000, 0x0, 0x7ff}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) socketpair(0x9, 0x805, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOCK(r5, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000140)={0x100, 0x4}) [ 298.457613] binder: 9934:9939 ioctl 40046207 0 returned -16 [ 298.480071] binder: BINDER_SET_CONTEXT_MGR already set 01:47:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 298.524938] binder: 9940:9944 ioctl 40046207 0 returned -16 [ 298.531347] binder: 9934:9939 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 298.549906] binder: 9940:9955 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5460, &(0x7f0000000000)) 01:47:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0x4}, &(0x7f00000001c0)=0x8) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f00000000c0)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 298.661488] binder: BINDER_SET_CONTEXT_MGR already set [ 298.670838] binder: 9964:9966 ioctl 40046207 0 returned -16 01:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40087602, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 299.162358] binder: BINDER_SET_CONTEXT_MGR already set [ 299.167939] binder: 9978:9980 ioctl 40046207 0 returned -16 01:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 01:47:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCCONS(r2, 0x541d) sendto$inet(r0, &(0x7f0000000140)="8f13000002000000000000002a981bd22e6944d62a539478bec68f2f590c47f4973a1631c1dc6473b552c786e830b3e5f9ad36b8e16e", 0xfffffffffffffe81, 0x20000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0xffffffffffffff50) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x5, 0x5, 0x4, 0xfffffffffffffff7, 0x5}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae41, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 299.288367] binder: BINDER_SET_CONTEXT_MGR already set [ 299.300401] binder: 9991:9995 ioctl 40046207 0 returned -16 01:47:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x4b49, &(0x7f0000000000)) 01:47:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0xfffffffffffffe49) [ 299.334756] binder: 9991:10001 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0045878, &(0x7f0000000000)) 01:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0189436, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) tee(r0, r0, 0x7f, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8903, &(0x7f0000000000)) 01:47:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$inet(r0, &(0x7f00000001c0)=""/198, 0xc6, 0x21, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000580)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r2, 0x0, 0x4, &(0x7f00000005c0)='eql\x00', 0xffffffffffffffff}, 0x30) getpgid(r3) r4 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000540)=r4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x7}}, [0x5, 0x7, 0x38b0, 0x1, 0x2, 0x8000, 0x3f6680000, 0x1, 0x5, 0x5, 0x3, 0x2, 0x8, 0x101, 0x17b6]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r5, 0x5, 0x4, 0x10000}, 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'bond0\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'eql\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@ipv4={[], [], @local}, @dev={0xfe, 0x80, [], 0x20}, @remote, 0xcc8, 0x4, 0x1c0000000, 0x100, 0x29f, 0x4000008, r6}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae03, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, &(0x7f0000000000)) 01:47:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x6f, "157e14f21216be0c1a32c8747c067786df8f8a0a7c3b22404d8d018077c254dd8111818e38a756342e76cb6191ddbe4569e84e8941c2edbefeb0741a6001c2bcd8320c5cbbbac3ce877c7e38ab424a9a2fd5f494927b13761d1cdd4f6f7993867f1db75bbc296d2c3abb7f35d7e932"}, &(0x7f0000000180)=0x77) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x6, 0x30}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00000000c0)="df3f3175e394a8df0121aafd18bf9f0e", 0x10, 0x900000020000000, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0xfffffffffffffde2) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 300.141563] binder: BINDER_SET_CONTEXT_MGR already set 01:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4b49, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5421, &(0x7f0000000000)) [ 300.172783] binder: 10038:10041 ioctl 40046207 0 returned -16 [ 300.180215] binder: BINDER_SET_CONTEXT_MGR already set [ 300.209578] binder: 10042:10048 ioctl 40046207 0 returned -16 01:47:42 executing program 2: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 300.294674] binder: 10042:10048 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8902, &(0x7f0000000000)) 01:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40049409, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @remote, 0x2}, {0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x2, [0xffff, 0x7, 0x7, 0x3, 0xffffffffffffff24, 0x8e3f, 0x7, 0xa4]}, 0x5c) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) listen(r3, 0x5) [ 300.419334] binder: BINDER_SET_CONTEXT_MGR already set [ 300.443384] binder: 10067:10071 ioctl 40046207 0 returned -16 01:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a0, &(0x7f0000000000)) 01:47:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22004001}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r2, @ANYBLOB="20002cbd7000fbdbdf250200000008000600ad0800004c000300080004000400000008000800020000001400060000000000000000000000ffffff7f00010800040004000000080007004e22000014000200626373683000000000000000000000001c000100080004004e200000080006006f76660008000900430000001400020008000900ffffffff08000500000800007000010014000300e0000001000000000000000000000000080004004e210000080004004e2100000c000700080000003b00000014000300ac1414aa00000000000000000000000008000200ff000000080002003a0000000c0007000c000000090000000c0007001100000006000000100001000c0006006c626c637200000054000300080007004e24000008000500ac1414bb0800010002000000080001000000000008000500000000001400060000000000000000000000ffffac14140d140002006270713000000000000000000000000008000600080000003c00010014000300ac1414bb000000000000000000000000140003007f0000010000000000000000000000000800050002000000080006007772720020000300140002006270713000000000000000000000000008000500ac141421"], 0x1d0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440)=0x100000000, 0x4) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae67, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 301.002445] binder: BINDER_SET_CONTEXT_MGR already set [ 301.013310] binder: 10092:10096 ioctl 40046207 0 returned -16 01:47:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 301.043372] binder: BINDER_SET_CONTEXT_MGR already set [ 301.056092] binder: 10097:10101 ioctl 40046207 0 returned -16 01:47:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x3f, 0x47, 0x21bb}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 301.086015] binder: 10097:10107 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5460, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x894c, &(0x7f0000000000)) [ 301.190773] binder: BINDER_SET_CONTEXT_MGR already set 01:47:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 301.225007] binder: 10110:10115 ioctl 40046207 0 returned -16 [ 301.254463] binder: BINDER_SET_CONTEXT_MGR already set 01:47:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) get_thread_area(&(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x5d4, 0x1, 0xfffffffffffffff7, 0x9, 0x1, 0xfd, 0x40}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000280)=0x4, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20}}}, 0x88) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev={[], 0x15}, 'bpq0\x00'}}, 0x1e) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000340)={0x80000000, 0x9, 0x80000001, 0x8}) sendto$inet(r3, &(0x7f0000000380)="f6", 0xffffffffffffffcb, 0x44, 0x0, 0x1033e) r4 = semget$private(0x0, 0x4, 0x0) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f00000003c0)=0x100) fsetxattr(r3, &(0x7f0000000040)=@random={'user.', '/dev/vhci\x00'}, &(0x7f0000000300)='\x00', 0x1, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x40c802, 0x0) [ 301.286283] binder: 10119:10128 ioctl 40046207 0 returned -16 [ 301.326968] binder: 10119:10134 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 301.333907] binder: BINDER_SET_CONTEXT_MGR already set 01:47:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)) [ 301.370188] binder: 10130:10136 ioctl 40046207 0 returned -16 01:47:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfdfdffff, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0xf, [], 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/15}, &(0x7f0000000340)=0x78) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) socket$inet(0x2, 0x2, 0xffffffff) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3ff, 0x24440) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xd3a) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000140)=0x1, &(0x7f00000001c0)=0x2) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) 01:47:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8981, &(0x7f0000000000)) [ 301.915272] binder: BINDER_SET_CONTEXT_MGR already set 01:47:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3f) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$netlink(r2, &(0x7f00000001c0), &(0x7f0000000280)=0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 301.939489] binder: 10154:10158 ioctl 40046207 0 returned -16 [ 301.982601] binder_thread_write: 11 callbacks suppressed [ 301.982612] binder: 10154:10167 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x200000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e313289b8d2a05a, 0x3}, 0xffffffffffffff1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x100) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 302.121201] binder: BINDER_SET_CONTEXT_MGR already set 01:47:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x41, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000100)="e66352c631c28e6949ac4c205b9f27c133aadcb80f2e95e0bb28f24d1c6b4c404d6885a513ddf221afeedfd598e27e047f473747f1f7ac656bf5819ea3c8b9607a11a9e7db7b1e0a2f717eefad892a0b53a7ba9a128ade0d3e7278f1ed6a9f396a58b2e040", 0x2c, 0x890000001fffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 302.148034] binder: 10174:10182 ioctl 40046207 0 returned -16 [ 302.148060] binder: BINDER_SET_CONTEXT_MGR already set [ 302.164236] binder_thread_write: 7 callbacks suppressed [ 302.164247] binder: 10174:10187 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 302.169974] binder: 10174:10187 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 302.183734] binder: 10179:10183 ioctl 40046207 0 returned -16 [ 302.207745] binder: 10179:10189 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 302.240238] binder: 10179:10183 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 302.263422] binder: BINDER_SET_CONTEXT_MGR already set [ 302.271636] binder: 10193:10195 ioctl 40046207 0 returned -16 [ 302.329918] binder: 10193:10195 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x6) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x2000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18}, 0x18) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 302.832022] binder: BINDER_SET_CONTEXT_MGR already set [ 302.851132] binder: 10209:10212 ioctl 40046207 0 returned -16 [ 302.861623] binder: BINDER_SET_CONTEXT_MGR already set 01:47:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) write(r0, &(0x7f00000000c0)="674e7c882a184c39bc2a9b359efdbc777bd741640660c48e455f1ea2f888dd2f9fa624ab9f806baa55a35eda9df4b0aaa5bf3794df0abe2c100585741a4fd505c43a681aed98c919ef34c1f5a9940afc79187a2736ef5875f4f32510ae408498f3bd96568bc4d4f65c65a12fa28cdc25f5394665c33c44d474ad7d8dac3b58d66d64ee6823dc5c0fb120436af1fe56569dded5771826062eddabe433c133a0306b4d9637", 0xa4) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x100, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000200)={r1}) [ 302.895126] binder: 10209:10221 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 302.912802] binder: 10209:10221 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 302.918967] binder: 10208:10216 ioctl 40046207 0 returned -16 [ 302.922375] binder: 10208:10222 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x1fc, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 302.986819] binder: undelivered death notification, 0000000000000000 [ 303.037095] binder: BINDER_SET_CONTEXT_MGR already set 01:47:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000240)={0x28, 0x3, 0x0, {0x1, 0x7, 0x0, 'em1em1,'}}, 0x28) bind$inet(r0, &(0x7f0000000280)={0x2, 0x41f}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x5, 0x80000001, 0xfffffffffffffffe, {}, 0x0, 0x800}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 303.074443] binder: 10229:10235 ioctl 40046207 0 returned -16 [ 303.095444] binder: BINDER_SET_CONTEXT_MGR already set [ 303.101345] binder: 10229:10240 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 303.101866] binder: 10236:10238 ioctl 40046207 0 returned -16 01:47:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x10000, 0x8) [ 303.158857] binder: 10236:10245 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xffff8000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 303.207653] binder: BINDER_SET_CONTEXT_MGR already set [ 303.225887] binder: 10250:10253 ioctl 40046207 0 returned -16 [ 303.241431] binder: 10250:10253 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:46 executing program 5: accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x7, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYBLOB="6ba9064caf43e27cf0e7d68731fc1436ac05e7526f9447ff6b8d", @ANYPTR, @ANYRES32], @ANYRESHEX, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYBLOB="8e5b045013ca3edeea7e7e81c920160d3a2c1f49", @ANYRESDEC, @ANYBLOB="00e4e6dab71246fbbba37d1c63af917cbfced89c69959139095253050dafd5c802b49f1df19c9b2169eb40e28b9ed6c78e3ab949efbbb4c7d3a6f6e8bb5410adb78a92f288b9b1fe9a3da8932306f1409f031a7886", @ANYBLOB="ef21464104dee4f2e773a80118b41d05f44a727ab76314f830f5c084281c8131a8cb74e14200b69c76559cfb8b0017b976be6be294e51c7909", @ANYRESDEC], @ANYRES16], @ANYPTR64, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251, 0x0, 0x0, [], r0}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000280)) 01:47:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r2 = eventfd(0x100000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=""/140, 0x8c, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r3, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000280)=0x104040) 01:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xffffffff00000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 303.716157] binder: BINDER_SET_CONTEXT_MGR already set [ 303.723775] binder: 10271:10276 ioctl 40046207 0 returned -16 [ 303.733717] binder: 10271:10276 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:46 executing program 5: getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000180)=""/251, 0x0, 0x0, [], r0}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x6, 0x2, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:47:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffd77) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 303.883904] binder: undelivered death notification, 0000000000000000 01:47:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 303.947818] binder: BINDER_SET_CONTEXT_MGR already set 01:47:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 303.981978] binder: 10289:10291 ioctl 40046207 0 returned -16 01:47:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40243, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @broadcast}, {0x306, @broadcast}, 0x93a3694be57bf8b6, {0x2, 0x4e22, @multicast1}, 'vcan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0xfffffffffffffdf3, 0x1, 0x0, 0x0) [ 304.042870] binder: BINDER_SET_CONTEXT_MGR already set [ 304.071809] binder: 10299:10304 ioctl 40046207 0 returned -16 01:47:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xc000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 304.098214] binder: BINDER_SET_CONTEXT_MGR already set 01:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 304.157898] binder: 10306:10310 ioctl 40046207 0 returned -16 [ 304.158047] binder: undelivered death notification, 0000000000000000 01:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x20000000000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 304.207323] binder: BINDER_SET_CONTEXT_MGR already set [ 304.216845] binder: 10317:10320 ioctl 40046207 0 returned -16 [ 304.226797] binder: undelivered death notification, 0000000000000000 01:47:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20081}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x8, 0x1f, 0xa51000000, 0x40, 0x10000, 0x400, 0x7ff, 0x80000000, 0x3f, 0x7, 0x1f, 0x8001, 0x4, 0x768, 0x40]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000740)=@assoc_value={r4, 0x8}, &(0x7f0000000780)=0x8) [ 304.275266] binder: BINDER_SET_CONTEXT_MGR already set 01:47:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x6, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="014000828d1969d5b047c67bb3b8ae700000000208060007000000274951ed69a3daad"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'team_slave_1\x00', 0x400}) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_ifreq(r2, 0x8927, &(0x7f00000001c0)={'dummy0\x00', @ifru_map={0xffff, 0x8, 0x6bd, 0xf1d, 0x6, 0xab52}}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200000, 0x0) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f00000002c0)=0xc) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 304.317976] binder: 10325:10328 ioctl 40046207 0 returned -16 01:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 304.359934] binder: undelivered death notification, 0000000000000000 01:47:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x88140, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x5, 0x0, 0x0, 0x7, 0xffffffffffffffff}, @jmp={0x5, 0x8000000000000, 0xd, 0x6, 0x8, 0x4, 0xffffffffffffffff}, @exit, @map={0x18, 0x6, 0x1, 0x0, r1}, @map={0x18, 0xf, 0x1, 0x0, r2}, @map={0x18, 0xb, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xfd, &(0x7f0000000240)=""/253, 0x40f00, 0x1, [], r4, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(r3, 0x5606, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 304.424788] binder: BINDER_SET_CONTEXT_MGR already set 01:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x80ffff00000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 304.468189] binder: 10342:10345 ioctl 40046207 0 returned -16 01:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x2, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffe7f) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfc010000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:47 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in, @in6=@local}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000001800)=0xe8) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_mount_image$minix(&(0x7f0000001840)='minix\x00', &(0x7f0000001880)='./file0\x00', 0x6394, 0x1, &(0x7f0000001940)=[{&(0x7f00000018c0)="f3ddabd2e75b063c06c82537e45924083b006f932cb9c8ef8a836662810a9a5b42475d921d94e0e272f7e153ed6fddd253f4bdf4d23abd5b3eecee1561c3fdcee5ab0205c0b8e3c9b3891bdf55b78fb407", 0x51, 0x4}], 0x1002000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000001680)='trusted.overlay.origin\x00', &(0x7f00000016c0)='y\x00', 0x2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x68, 0x0, &(0x7f0000000600)=[@acquire={0x40046305, 0x4}, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x4}, @reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000280), &(0x7f00000002c0)=[0x18, 0x30, 0x0, 0x30, 0x20, 0x30]}, 0xff}}], 0x1000, 0x0, &(0x7f0000000680)="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"}) [ 304.927403] binder: BINDER_SET_CONTEXT_MGR already set [ 304.951819] binder: 10367:10369 ioctl 40046207 0 returned -16 [ 304.966174] binder: BINDER_SET_CONTEXT_MGR already set 01:47:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2b, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r2 = semget(0x0, 0x4, 0x201) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/5) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 304.997882] binder: 10367:10369 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 305.010085] binder: 10370:10378 ioctl 40046207 0 returned -16 01:47:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:47 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000100)=0x80) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r2, &(0x7f00000001c0)="0e337f69e508b9a2dd9e02c8508ca654a0c537f7ebfdee58eee0ebb7fad5e23e2c16d55fcc418c1a24e1d0f11e799a195259e08da5e639b16c8007b189dad76efa93aaeed8a04c8063205fda8cc88d22a8e7862d01eb2f04f0", 0x59, 0x5, &(0x7f0000000280)={r3, r4+30000000}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r2}) socket$nl_crypto(0x10, 0x3, 0x15) fchdir(r0) r5 = socket$kcm(0xa, 0x100000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000600)=@generic={0x2, 0x7fffffff}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000640)) openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x200000, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) [ 305.125290] binder: BINDER_SET_CONTEXT_MGR already set 01:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x1000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:47 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x56, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 305.195736] binder: BINDER_SET_CONTEXT_MGR already set [ 305.208820] binder: 10391:10396 ioctl 40046207 0 returned -16 [ 305.221927] binder: 10399:10400 ioctl 40046207 0 returned -16 01:47:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 305.325123] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x9, 0x80) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f00000006c0)="0df8e65387c6a02c721c2ce010", 0xd) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='systemeth0em1wlan1\x00', &(0x7f0000000100)="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", &(0x7f00000002c0)='\x00'], &(0x7f0000000640)=[&(0x7f0000000600)='ppp0+selinux\x00'], 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000700)=""/240) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 305.361345] binder: 10416:10419 ioctl 40046207 0 returned -16 [ 305.407846] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfff, 0x400) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffff9, 0xffffffffffffff7f, 0x3, 0x1, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x9, @local, 0x2}}, 0x3, 0x10001, 0xfffffffffffffffb, 0x5, 0x8}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r2, 0x1}, &(0x7f00000002c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="1507b09d14976650"], &(0x7f0000000340)=0x8) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000016c0)={0x0, @remote, @dev}, &(0x7f0000001700)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', r5}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x481, 0x1, 0x0, 0x256) r6 = dup2(r3, r3) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f00000000c0)) 01:47:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 305.433053] binder: 10420:10425 ioctl 40046207 0 returned -16 [ 305.505840] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x2, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 305.530037] binder: 10432:10436 ioctl 40046207 0 returned -16 01:47:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 305.571712] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 305.604396] binder: 10442:10447 ioctl 40046207 0 returned -16 01:47:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x3, 0x2b61540000000000, 0x3, 0x100000000, 0x0, 0x7, 0x23400, 0x1, 0xc, 0x2, 0x7, 0x9, 0x400, 0x11, 0x5, 0x7fff, 0x1000, 0x9, 0x80000000, 0x8, 0x1, 0x7ff, 0x7f, 0x5, 0x8001, 0x7c7bb4a7, 0x7, 0x5, 0x1000, 0x4, 0x1f, 0xc7, 0x5, 0x100, 0x9, 0xed, 0x0, 0x18, 0x1, @perf_config_ext={0x800, 0xf7c}, 0x4400, 0x7, 0x101, 0x0, 0x7, 0x7, 0x10001}, 0x0, 0xb, r1, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20000400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffffbb, 0x8001, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0xfffffe3b) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) [ 305.705967] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 01:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 305.741387] binder: 10458:10464 ioctl 40046207 0 returned -16 [ 305.762075] binder: BINDER_SET_CONTEXT_MGR already set [ 305.777263] binder: 10465:10468 ioctl 40046207 0 returned -16 01:47:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:47:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @remote}, {0x6, @local}, 0x18, {0x2, 0x4e21, @multicast1}, 'lo\x00'}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 305.888548] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x2000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000080)={0x7, {{0xa, 0x4e23, 0x9, @mcast1, 0x9a7}}, {{0xa, 0x4e22, 0x3, @local, 0x80000000}}}, 0x108) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) [ 305.909789] binder: 10475:10483 ioctl 40046207 0 returned -16 [ 305.953656] binder: BINDER_SET_CONTEXT_MGR already set [ 305.976072] binder: 10475:10495 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 305.983518] binder: 10484:10489 ioctl 40046207 0 returned -16 01:47:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:47:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400282) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bpq0\x00', &(0x7f0000000100)=@ethtool_ts_info={0x41, 0x6, 0x8, 0xd3, [0x80000001, 0xff00, 0x2a0], 0x45c23c46, [0x5, 0x100000001, 0x4]}}) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfc01000000000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 306.169031] binder: BINDER_SET_CONTEXT_MGR already set 01:47:48 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=""/248, 0xf8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 306.191338] binder: 10509:10513 ioctl 40046207 0 returned -16 01:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfdfdffff00000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) r1 = memfd_create(&(0x7f0000000080)="9c747275737465642600", 0x1) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0xf) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 01:47:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) sendmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth1\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="f7c7", 0x2}, {&(0x7f0000000140)}], 0x2, &(0x7f00000001c0)=[{0x90, 0x11f, 0x3, "06f3b1e9e4cad2b2903763cd7e037bcf7658494b271e658b1303a73340a80067845fd2f72ebcdd396f6f619344766a456bcb013be12a4f91624bad434882b67cf028a04a986d7569bdb9b9ad7bfa063db918b54b46a0456fa8c115b62092c0c25aa3516cc43cc7a2b81a5b32434038a142680a632c5132898f76015d731eda"}, {0x88, 0x1, 0x2, "ab473c8681fe54b13523f9f6ee32e3988511e3a9a7b6d3777778cee63a9c9c66783a18678a020b2eb5cf0fb9330f8e975791fd2771e6067485e071c1050797341e66b5d63d26ec3070784f0c97acf1fc6d28f9b5ec7636a1c0ed25bb5c9d5001560f1761643dee9efc8c42cc12848f7d2f"}], 0x118, 0x4000}, 0x3f}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="1d1fa707832d11dfd4ff6bd65d1ec1636a92bf79bff422d1437e11091c614ef46a028e83", 0x24}, {&(0x7f0000000600)="781d8050bded105d71cc896489343f4b01a66ebcf04ded692d069ed85163c583e975f644b6932f1e5714fb82b58cb43f8271a8ed952b5070b4127912b3d99cd68b", 0x41}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="195ad9ce60f79932c10e1910bc791012552299f22d30bf43df", 0x19}], 0x4, &(0x7f0000001700)=[{0xa0, 0x13f, 0x7, "fb841d790e346f8ee929a32d602e21ab8257286f2130fd7fc4af4cdb2c21b97963fe3087ba09d369b8b4fd4a81b04aaa6fe9674d78a37444c2ad38cbb38e6f45593063edcc246a8916cdf06ab9bca1f3e1dd06bdf7578b2215b75639c28c01b3145e08309166ae1f0d19da9a09eb64d4226087075c1c99cfe646db8ba14d29765611ff73dcfe336987d2c9c0920a47"}], 0xa0, 0x4000000}, 0x100}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000017c0)="f095cbc1ab01151cc71ac66101c37e0ca2be1d6743696601eb7cf3800f012e63e5b0c0fead", 0x25}, {&(0x7f0000001800)="348020a6eaf1cf270c1c4bc536b5d05365f8c9633f8c4cea0aa91faccaf83a04da9a6f33af3c6cb702124e9cc52db34fd9325fd2830e47fbe6ee4146b741de1dd430eab6afae9f53b5d105", 0x4b}, {&(0x7f0000001880)="e598f3579671c380c81c9590edaeb3bf46d02fc40c6b86df0991bf2b515a38c3527e2b9fd89b9232a91220555ccae30de8ad018af7a0c8e9df9a8aefca0b33c68434411d8bccd8eb62913b8fefc2467c6c0b77648eceb02059de2d89f501613aee972487bf88f0df8d223cae35e2025800", 0x71}, {&(0x7f0000001900)="96433d8a9e0d9c2a", 0x8}, {&(0x7f0000001940)="e0c39a42a3cdcce7fa4692bae5b60f1665e0fd33ae71a25a3eca3aacd3afd21ec84eb11f0cd285f62b6e4eb79221a63de35ff59b5d8115b0734a4e5125a0b80b6207e62f89f621dd33eb576c9749448d36a2376097edf38b6bd93e9f298bc4efc37bb7ab596f6ca142f05271677943a789a18098016b10e5ba328e2ce055b816e2b6387c2ed8a1a3507ebf43398e422e65a4ab45180e8eed60ce9cfb157506c80d991530275e3e2c94f8194d393b64b05a5d44ac5c5e1b7a55e36138377346af9482ee4aaf9785eb3d5a312a8574e88442fbf3c32b472ffa38", 0xd9}, {&(0x7f0000001a40)="bee6173167ad6a8b3b13dbaadc411258908725891b43c200dc3bbcd27290d7cdab979c307bfc75f92ab5ce0ff1180e53f55b6ac5a6042e245971be37a0", 0x3d}], 0x6, &(0x7f0000001b00)=[{0xf0, 0x6, 0xaeb, "1ccbccedc032b802b02ffdd02c25ad20ff16d323d9f2a9ad9900f8c481a45da152c173c4a8379f2ce8603a4fb75bc0e16f3d32961430514056004a5eada150848891cad36aea37c605e043d172bb7030204f92118ecebdac0e8a8dfd8c827b12131e173feddf038ec22deab89cd5c39273778adc8effc4f8feb80aa40e7c4d1a3a4bd8461ac23ffe021273afa05a0d7a994cfa2c9bd5009164a937770c2ee22ac250ca507a7e2a888eb1561f356546348a900f032fd1405969daef4a599c0aafc254af132a6c9ad77738dc2e97a799bbb36e003daaebc0e9db9a6f62"}, {0x28, 0x117, 0x8, "28fd00f0ca7eb8ee8ca2fe1d008e3149db464baf2649a999"}, {0x68, 0x119, 0x100000000, "e3c293f3f147538490b4168cad22528158bbf502ae4e68015bc5e1e7405f5d9ecb7f1180f082a3de1d8343bb2801f7184c2346b7205333f8cf4ffb8f4fc33d9d833c09ff14b6ff4fa4f7b19b9e6e062532350ca00c"}, {0x78, 0x107, 0x2, "703ddfa6eb6595a95d74afbdb2f67ecae42125d28cfb9a3619a1910107b8f478ea02d2dfb1037ab9becd1f0cfc506aebbe62a5df7d8a32e44138e31c139d5c507daba532940d3ec62d85f7d60997b24ad449917200a6fe151f0759e88a6a7e5f4fc4"}, {0xe8, 0x0, 0xfb, "2eb4cdbb3a790e9b1a472047cbc1f5f223d3ddbde7a170250e2b0673ad9776b6bb1220b628720584d02d3d9e7192de2082c31c6fb15e8d8e71e7a3a570e38ac1f229485489dd084bae36b4482fbf4d86881c85effd18f5eb70fe244793b62ad5d3004eb253f93644b7841ea6fc4fdbbbe472108793dc09f054738c737b5e982c185a1bb1fecf3c3fb92f11872c745117b1b17292df17dce3a6a105c8a78fdc4385b0d02718757ed2d3c5d0f914cf709f2134b060f8517713e3fce494c642e286904abe4c54ed0aa5b7e4bd8b30888f3d1c9ffd"}, {0xd0, 0x10f, 0x6, "5f2e27bb748f6a8ba8c1573a297fc95abb697c0e3c266248566afe5f08b92e84a603c4b557a56a87c82f37b9e43d095e9a506d7aaff9570f799fffc47e9853faa31fb4739e2d3765ccf8b4bf8225a813deab404c2224e6fab35feeab1c87f80d9d8ee3d672309a1ef86406aac3d13d177d4575602a85fe749df22748a61621a78d3c020dcdb31973929e0399fc24385e35e3c45fa34dd05388688e93ca6a5622998554166588fdf0e643296ea85c229274806113537194c0632f31"}], 0x3b0, 0x400c0}, 0x80000000}, {{&(0x7f0000001ec0)=@generic={0x8, "c483e50e6ef39786fec35669ae1698132bc8232bc9ad1c982e34372fdd64163e71d553875cd091f60aba6de40c2f283a2bdc8ba6222f823d0398903aaa616fee4e8b892bb26f11760e5600989d2f870db1e747f35d4c35d552043578aa4b2f8b5ff83ca059784a39cca9f078b25c165aeabb5839119f378d04d2e406b77b"}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)="f14ad36afa", 0x5}, {&(0x7f0000001f80)="ed071d7f1c755d8b206bb658fa595e03cb24e0e197080c422637b9ca52a0d59414c75e13ebacfa421c64fe0c0fb839478f71d8169ab010e0cab5548a99a1ca0a0ca9bcaf14f1f5e516ccc0d6d85995cb313bfd34431b48718616e78a7f582acc141840ac5367aaa968dc4e9c0b1166e549b255646814fb4bc3020c", 0x7b}, {&(0x7f0000002000)="dcb53c9dbd4e4144c5d198616829dc3e83e1fd65fef253f79ed9abbea5b60deda2c0aaaa3bfc4256ccf104852c0cd1b039cbf410818140ebdd4e1d863a0b65e4a49d58e13a3eb374ff5bb04428eee34ad326f9ad6d9f272ee698a7ecafc449b84ee9c93fed2db51ba9b688f54782eff0b1667ca83bec54778ab9558642", 0x7d}, {&(0x7f0000002080)="1892c6d472da9e35fcf1955cd57c2b511460fbb762d8e89984", 0x19}], 0x4, &(0x7f0000002100)=[{0xd0, 0x11d, 0x8000, "82fa8a5abad11e26f9645827a93c747478ac0f7cb8dfe36b7b364f24ae0e021b21834d614d2fb5bd9b5a553d1809fcc67335c704b2532a499ac327f2bba12035dfef8602ee9e5130bef2c8c7d52f6650ec8f335a0cfc6b5ae3a16a21c8fedd759e7e8a17d9da75fbf23206a3691f68b5f0926bd14d4b53889877a80d0362a8af8cf9365c4a1dcc3caf7da46a1f6298468f3c02b1bb610cf20c5f05bfe142072147eaf7d9aea47d4eab0336590ecaa3dcaeeda7a13cd5104680cbf0521161"}, {0x48, 0x11f, 0x3, "1358863e8ca95d9573acd17517300230db850880055ca9523d2844612929be28a3046d4c8a8252adfd2a3f6f8ad0e077f7"}, {0xf0, 0x11a, 0x8000, "985ebe60dbf74fa37bd26d2d3481e420b160badbab027c7ef382705b5279bdb25416f9e16d15fbbac94e544d34d910b8e15e84bf55c1cd93cbd0d6340be1a2d06919f25aeb8780c41a16b5fd651b6aec0be43a2e7360a4c97aea7ed481f493b14bec7d53670f4049952382972510e327ebb935df3e8e49283703894988cbb4c019941a49322ee4230270635d799016284ed2fcb13552a1a3e8fb6db6705a205a5183e44ee7a9c5c7ad154b61cc8ff0c908f16f33cdb8ec70889ea2d4029a7769c9fdd0070b1535963e9a28022b97826b7c74b73f6557eec57552a6f4"}, {0x78, 0x11e, 0x0, "aaf902347767f7d528856f6dcbf251975ea84b5b6aca679e70688863a7c30142adb1f770ff36de4f9093205305e3cbe8000af77aa81988f86ed906e6fddd6f1b9511ba56e236f1aebaa3ea72ce5e98670f1ac406b6261d73945193e238cc18ba87fa88ca"}, {0xc8, 0x101, 0x1, "dde512da7feb34dcf6ca7391954759aea71f7021815acde950b844b76059ee9874eb5da196c5d8403280652140f4b6fc5374554eda8a2dd3e34bf3a77bbab54f2921b5e611a0c2931b6b58defe7d394c9ec485fcb0e466c79912c541224f6059ec6533dca0878b4753fe969432275a25236024bebed4f12a6c7942856d2ba58094044c91e15b6665b1a83ced8bde0dfdcfa25aa081d65e98008c1720d6c128d95e7b653d589d8082236a2d2e365013497a"}, {0xe0, 0x88, 0x8083, "dd6ceeb67f312b7826c62bd669bfc1a679da436f7546967da34c1e31b9fb9fb58bee7ee3cbc5e84ee39b43601a6de347eee01be91ababd17ef4525b0ed540c49929ac22be1e8b80c91f3b1a2ccd5bff2b386a92c888daced19695ddaea24f1502204b0249e64a3f1b620630e6a99cd593b5cae6fa526f0eb120d1a4238467fc4b30cbe2107201eb0bf39b4861b5cc16e15a0d7a9e6cffdc79d28ae855864c338acacad428dffe72fb9e8bc2dc4102ea0a2c8692dafc900231eb1573626814e680798b46d885bc1481d79"}, {0xc0, 0x118, 0x5, "78284e0244b9e0f5c8d18ac08790424f7046429bee8dcff221e768a4ba0f0f8223421253a4fe4c1213333520a683e001675081d63e525e3c62ff21ed53d2e881244dbdcb537a515eae42e63378e6df323234ea983c71d05d7f26381b57cb1c5ce38dc5c81cc64a921888a0dc5013e131b247c3061881baadc42155dd6ff0569c04d892e0290bc8d2013360f612f89651912d9384279632f25549c42bd74e0074ccbaaf1efad4ed1111c80e834028"}], 0x4e8, 0x4}, 0xfb}, {{&(0x7f0000002600)=@pppoe={0x18, 0x0, {0x3, @dev={[], 0x1e}, 'ip_vti0\x00'}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002680)}], 0x1, &(0x7f0000002700)=[{0xf8, 0x13f, 0x401, "54cc1d630f5ab5190aa000e525691d3917b3c6ce458ed9635131bd58667504645a0c09bc62e5ee1b01c5eac8b517cfd79efa645f3aefc4d8d54b4ea6cf07f9d42e07d46df62702b627e2b7630ab80514fc75b600e29adfeb524ba8a7665d7acca74025250e56c869bfd77fe76c4c93d366edceb52e1832b92bf99a9bcec54076b5818cd2b5c1f7d5725d75a0fcf943302a97c221e663489ee9b5bf47bff0ef998ec12aebe34161b96c4f04b4a420badbdf0d1b35040a07ef369f3cc0f5066fec3b05c6d7c3102873b463ab50e979b7c5cce33f92a2fe0295184d2c7eab56722043830fd03cd6da"}], 0xf8, 0x84}, 0x3ff}, {{&(0x7f0000002800)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x81, 0x0, {0xa, 0x4e23, 0xfffffffffffffff8, @mcast1, 0x400}}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002880)="7c142adb13a527cf87e04689242d6fae47e0345d028dec865ba3b26907b4a5827195d4", 0x23}, {&(0x7f00000028c0)="eb7355a6c791aa5acd7e29247f0005b99142897129f6ce64138015c881e656744160e112db01f3c16c82df151cb772d212aff4cb245b555583c526c8ce6ea44fc7c79344de45b70853b24dd9d4748a6295b0fde9f5676674cf9bf511acc12194c0f6ce4f25a2f7f2a25d035ad9015784584de4e122f36dec4f1f6e3ab170ff82f8d13489e36c4045d322b070045abec44d2831d6cc5afb695352f6cad2d6545894e98b0a6dbf53c3c399c38398428a1903aee15156bdb83af8435a4da1fb57e9078e57b8a072df8ccd9564321aa002d5fee78de01a1df3a73f6efe0718d8b5d2", 0xe0}, {&(0x7f00000029c0)="6bf4de3a28a9359b2416d4", 0xb}, {&(0x7f0000002a00)="50c16e30f6f54320f498cb47ef90a621dea972915d86ee0871a0d5a42f093feb", 0x20}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="14226a3decf3e81cdd107e5c49ba5f9be1c93ebbd0adb9e48ca0a2a746ee8129509bb9983cec66c10076be21e82d9d688c73d551befc5db252d6f901475f3ab7642327c37560eadb52d5647d73a7626d7a7aefda848f7dcd937bce1d882ded4e3ebd67d56aa4fb35efa29e3b54f621b7f652e138d0929167f9b4b1c9574326660c178c28c923fa77ef95706deefac3396ad31e37c3e883f217ea6831cf2aea684b05842bdeb68c79d244c4e488a06197958473acc923d09bfbea845b57dede44c46b75e2e2147c326c509aa738748ffeea9178f645f78e37b5b91022be", 0xdd}, {&(0x7f0000003b40)="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", 0xfa}], 0x7, &(0x7f0000003cc0)=[{0xe0, 0x105, 0x8, "5030cd58b6cd4e8933458812ca0669759bb0d740ef777fd1f45012982fe54250fedc59cef609a93d009e8512b8dca0be1bbaf2888eb6af9221a0c3f75500f23ccf267feb85e6b673b0f5aea90e977aa2bbd34761efa671820c993d6565d4bc10e49178996fae758cc755b0389ce2f10a79192ccaa4a8ef16c94e91beac9baf23450413ad69f132b766a44ab6095792e8f2f7c98ef6872752d82d35f5bd057ab241e67f6bfb2bef83f5840e4375af09132f6160921a3a2d265dcebabdf101d732bedf6996fb6f37277f70"}, {0x90, 0x11f, 0x4, "2ea7f592d67de1471cf4b4ee72f300eef0bd5d2adc05f0de6e5a21e7e73ebe584d7768d8099ba2c4b622a1fd26d3c177df55d9d5d98c1a6c9abc671b368985f738f27f4a0d3ea9bcf6ee6df59c247818e16889d58544f80813ecf9c7de2a4ee78881c409fbf49af01cf1870b8d30c62b3e900c323bee9bf7807385df900e44"}, {0x1010, 0x3a, 0x100, "cabe9ffea9dacdae6030b77cdd2662abefd433bb69f3d7bb67ae99209f585f760ba38789878cae3b6176df4a22230c0ac5899ed739653a1f804ba9233a4d426c8d66387e38893f3cbc523e693efe7f03af54f4b35c2e364d0d5e8b674bcb1f4a8c439825ea266795b13d69792d2afd35edec110e543af9a8f6be3778d0292ea6301ae8fde27a5cc7e31a5b63c9612c24a08d3234d88de68b2b821be9bb6cedf8f43bd9b52a64c2e50c976380e386514a531ff9b699d26d14f8a06d0d8c91a6c6b35a5d88cadeae0e6127c0b05e688142c324a194f37e7fb96457f4d120ec3045226e2ef4515f4348fe38e19cb145a284a6eddd0a4ce29a404b6188bf056548b141de955e5cce038cf76a2c76c17b589bf10aae167e7ace1dc0f85f9cbf2d243f05becb3d65a6f47541796775c05d731a6994313d381aae4ffe59cce03d5ef2328ab10e858ead162fcd2959409ddc0816b4ee55dfefba96d87a21b813264ee3117c48c4a328e9f58cfe45fb6e585645397757e8411401f0b5266fea0429507001489a5503410ba09df3acc88e0bb91c2670bf116f2435538afdd8d860de7ba213a40b885d245c826a9a6ff8caf2cf9b4e58875614e350c2909fc9896558154431b3ea1a69edc051ddc48c4288d109d5726d786b2707f885a3a138a4a1f87b5c35313518a183e43bdde3405de5af8f47522c0aaced4d9ed6ac2007d3846067674381cdc19f822b37741625eda32ca022b0cc77671b5595c082d604a8d632b76ac5908d2f262e60e358f3463d58a5d21a1e06e4e91924ed28b87e3c6e0166dc4efb25f6c4f86877abba813a4867d8bed278121abf5254d51b6e923d805ffd88f6d3d453edffb9bd68f709319e963988fad3e5af042d9700a55c3a97659ac6b8cd50ddfee070cdc33c512c06ba0c27355a368ae7728e697c2b21e89cd002dc4d26a98da93d49f9647110dd3b41165f5d7e516798bee58c5aaa8fc926d6439612192892f0ac403a4ae573ce0843b690564a311dc5f86fa3e769489bfc0513b200af058d56754ea264bf68bdfc9c6e0225a0fcc3636af12e6a706660ff2a18529c873b8d05bfd6520f83e3448487b70ab2b2bb627a835a71ef40301583337935d266d50b290032f903a322aa97b5063eb4fa2eea322223a4ae1947afe8185e44d6173d8c35d83a79683626f060d81f470860f5e9030110db03b8f61b0af94dcd206f1356a8781b20586212d8beb441db5623e7dd826a6b7a88db29f068cd5dc45ec7ff91b0ed6ad48b76e6d6a10d26f83ad236e40e3c188b7b123aaaf9e6f76a1a68e4e8996c003c7fabf94b42dc6ddee563da98e3882d048f3ceb31964f6865426efb9a2b3ce7cf81e7a8d5c4942e9adb4c90807b31c0412b000ce3b80d6c07005893cc72c83a7a44855cf4648b10ccce2720c49ec59a83f5efbd40955d7ae9a53844084bc18e4db1d40ad658ca1de8eeebdfc2e319a22714a023adcdeae0cd4fe365a57de3711bc2cc05bc570c04820a45d44d7651072a7ea7445b4f39ad829aea2b6302d4a507df8cfc880ccdc7ed8c284347382225d95015572dc4e53987ae4ce2c3aaa2833c1278ce1c09ae26eeefd03c8bbec3ceb0e1da39178094e7f9461bb4740da999cb5ee1ce702dc17330de7dcee37bca1157fc44f52344a374024735f82da907a59036359474f261beb63c937affa7ebc1d657ed3d37cba2daf5d5b8382d85e242ea6d86461dd02c89f05f1554ab9f59d3e874de21403b5e5ae6672c298f60ebff847d7c2d129dc435a26137e37a3f0131b6a6656df8c566675df277b4c902e8bffef405ccf982acbcd868f7a0ddc6314de9f8419e30ac9b603001177dd06f2454ed0c886f2cf1847a361881012b9dec8758840a6802c16bbe053210d32ac3c4f36ceae76441f7bd3bd32297ad8fcdf4030f7746ecfbb3251f6475c8b648070f75355d335adcb57cf0eb3969ae5d460413727d428e524f82e3f954c5db658bf1bcd2540484d1cd87d39bf37406e697314d47e4a590b6898c0649471c0903bcb5437a8e233556fb64ea7c633c1efb2ebae2a8482d519f6e402fdf264fea2278c30c19396ac5fceb0d7e3019bc96ba97f05dcac59777afeb2ef0e7b85fa705980a2d5f5e5bb4c34e615795b99d1138cb79767a96b82726f8952e500a461f7ce73f3db1619fb0b0d532454dc1cd10975130ec4e3be0376248ea12fe476392cb19ae00ced0a01662c5da363c7c9297f80230657fed196b273a5d8b7b8eab4d74f3d867cbdde1ffcc8dd2378c2c52d571f05e48e95ba727fa9e71a6e10b679ff9505c41b4e4821c44c5d10d0d50548b9962aa3689d680e127c695493fcf9f0e2c40b81fd63f82ffe65e5405ee3e291252b6931b3a79985fd30a7b096d861fd809ba3c382dd4e12e9d84507992728a634226e18e948fe551f93b35eb99c94500c99eb1f6f52117495a4d942e1eb062dba9e54674eef473824691d307c44ccd31a46331bcbbab9408a4705e5ecf65864222cfa9612aa3547ef967c2649ecbb1cbbb407009acb02b2c1a88b74c6be38546c768a916959f9fd67c52af281a05f9fa957a931b59d582fe088fd1db71149b0e3125ed9774adf2e151c120c19d69a521f7e401b4e3fc1a2b09ec6f00edb271268c75258e0d314bd9c433f52f2a04e01bd859af5d3cef27a0aaa65a490fd8ab44662a9d4639f582b3c8e026010f24cd25fabeb797431145add2ac40cc61c0d0caac18c810a4e1a884c1511c5938fe1153d617aaff0522ded95690464e2c0433aea6fdbd4cb073c0dce2c2a3b5ee5b28d36a529b17ecc7e9c106762c20250277a247ceb1247437b06998dd318e83e38bc7669aa219c8f278444fcd656efb3952b3c8d5b178a0603c4b913076a8a5eb6e8affd71323ef4ed8aa7a5d523fc7dbeaadf975221951d902ca9b5bb79672bbcda7be8a75c34f00649cc28ad0df41d69cb49285d75ee1f04c31e93680b994d1bba0a63b534cf5d061b62fb218b57b3b7adeed705b7c4b9c2441239f1bbf0a34d1ee0dccb3d7f0ade2fbaef77842f0f714786d0846fe991d268ae895b85990736a775e142a6c16da0ce578a316637da2bbc6282a2336845c7d6de73037bc5a0d0e45be848094ee85e074129389a9858ad48343345f945bac4ad878c837275993a42cff023f7231339005a2b3d0b10543e6c236158825ed6ca911879cbf6bf0c511a4e3ffee8863f73796c7ede31fccacf6de7efab5dd9361514c4ecad6d2f41a115c6e040ede4d818fd9cfe2aa091a304fb1b1e066a7b3d59fd2e6af48eb080ddbb34bab6c183b68235c18308ad646d496778d05ff63b7c382ab2e9591952b0e084018c342920a75f8f1a148954f1e1b14dd70509d7def4a4f5a1ef216b6802c06351e5d79082d76c83ec9daeb86a38f7a9956b6e2487690845e4e5d209348eaf2aaf301239fd31b1b2f1ab9712a6d2c819c9c4cac9f1909bb5da69965b3cc23c4b2ab29df07339f8786595730246ecc339bbae4128ec5395fa5a807c3b4ae66a6acddf3919c83824df47fd31246ff05d80a579c487967b4e758e5c9b4e0d6d369e180edaccc37331a7cbdc868212cc18fbebdac1092690b7cf8e8e4461b1dde00ccf529fabbff713ba8dd941802d728c9b85a2b51bf510d5e729c739799644203ba044df8526f9c96a64812d06eee80b02281fdd0e050ebd2bc3a49be0ebad29cfd112f1fc7553007d17893048ccf7ec2d015c93ce2f347c0892217f03b3b8da513b583748dcbc8f5c9b87031de916ada00ab4177cbe22f41649980715d4271373823cb793248db2c46e91f3d616ae49e8530cb60058f204c05669a7305fc29cc28d8ef98a2707bc0eb10be4ee0ef4601b12306a62aa357e0ab2574173a5840ba40686ebb033ba8350d9d214ab4acc3df14b423f12abaaa0d358a382ca2ba6a7d371f81095f54749960fcfc2c3282919a910ba4243128b4a001acf484c32e3b064e433d40fe174a808e8c718ecca6f162440155bd5567494ab37014bc72967c55c8ba9a9e82f2e21201266c249ddd4a043acf8c72e5bf19ae1d43087ec133002494216f8533d787819aa91d688bbab0b01af7c70db229a77c569b4e66f9a7e1db30d524a7896483208f6bcc200b6b8a3f57f41b2b27626b9adb79005c39ec6d1e26ac1759b234058c59942456b732d8e8c43e222e31f6cb865bdc7ab569707224b649725d6a7a8811ed4dfbe9912010063c79766d88ecbfd6dedd2775cf0df57c1f0f9d0ed3a06c96aa8611fbbacad3d910f74bb63293c007846bbdb4929e9f6dd215d8c2c545d5d927effb639acf3c071983cb2123690fd13ff962b0f856464446bbeaab57d0b03bf959dc19f28f61d6c13256cb063876f028964f253c324c9e3f3792f140d7b43eca86825bbc786f86ac6503130636d93bf8cadb4cfa71472b85277b59a919da956be5ab29ab82c2bee1413202ef3f5380697ff038866abb7da643f1820c24644f59ebb4513e217199355c26e3f997c3f6bd020366844d6f4443a4ec6e9bc4f811e3ee4a6f4bb99c8f9f237cf8a99d06c1c6a35332108aced6f9f45dea8461fe9cfeefe00784e733423a7f865451b13b1233053e36241ec623bcc0ed043950e1898e4f0e05063ae8f528618768f002e2d0302bf76f3d2b010cfddc717dff0dbf06f0a4a81f1f763c249d9d75de52e591db3fc162015fc39b64e0091c6d919f29fbe1fe48429f3f57f8684c62154fafb15b606e7017723349a23e2fee5907af6e848d4ae004d1001260536328bdacebe5eac802b3251526f5a6a62e6e63677ad03a37f4f70dcf8c0bd837294cac815eb9dc41606a6f58e68811011f81311a39c0e20cdb0dbcde78ccff7efb0146e9556f18c06ea726e8ba763a54cffaa9d6dbaac41c2927a043cf52a913cf16d12eb4731654eb6d0ba24bde31b10fa9b0d0301fa06be40bdeedc13ae8cec10110142cdd54384d55daaf66c364175f2710b9d4d2cb7e002549a1ae5d1d17d8ec1566a4ebbd028fab48f174580ea13fba399cf68f3c655481afa11614c64a200ba274ca941be36b591290919bf26e0ffbe058dbf77f283babf3216fcad8de5677a55a517508d80873175094bc7708055b35b5bb455be272692ae2450c5a9a89e621ecc7b6f3f04bff72a2716de4762c25ee0281c40ddac4654df4512e0e2a714f92cd774b0f339aa4f06315d1529422d5a47d3299b3351e7a5dfeb9bd4a4457eb886a912ae9785c014aef2b160b3611ed421e9e93399f42c9639f5741239f58e301e0b016a28ff77622128bfbd7d18f28c0ea0849defc0015188d650ac072e31198ef24b1891f5b1d9248a83fe12cbf430e34797c3740ec9f94fb21fff8c13e4221a87cca8fcd8166aa9611f3a0c1034687da5fb6ceac4dfef7028e03f8311e3863d7a3b855dfb98692396fec0ebba80b90037267920ac373def9c3d4d672f4644c9294ed2a846771cf12e8938698cb5bb0f53bda0457e70e7a52388ae4d88f6d4c38988c7586dae1a756e35109360b07e52eaccea697986a1ee9de950b82ec0a78d3945d04ce3cc5c51190b60e1846dfe131f7722d0d7bdd4330bb0e399ef73724532e8efa22a535ec90485cfb7933b0f237d815b7335860d34a018c696e5fce992d04895c3c5268df8a94fee7510ebc4a7bb0ea4e96870545ae1e6333011d3caa1fa4e48b3f666f6dff16760cdff4142bd2af06be642d18fc0a15a7bddc2e062d63a3913ca6e713874f725b54c8bbe818fd5241e7b9f522aa7ae9bb0770d8d5753c4d760bba1a58a043e1c0b507"}, {0x100, 0x11, 0x5, "9774547458bacfbdb81fbce1c79fe0609d2244bd28ec3599051d21655f6b2baab0137e7005ab5e85e1c155e1f9dd94033000eeaa472c2492c80a43c8d4f2ca088982bd6aaa9c2a42ad7bb0c3c7b111f1aafbb084d1041a7dcd6354ca13863f7930e634db68946590eb3933a6ff4b3681932dd8ed32163efa2cede0998a706c8bd017329da2f6855f549db9edcc050332ca0344b8e60395944dd11bf2116320a2a05c31b8a32859a1a089c2c6c01de93b78685b8070f855d6c1b9dcb85719a9bac46e27bc60ba63cb7d7fbdfc987e1a667808272121dececa7025ccf7dd317f6f4ab2df9095faacacbcc8c8"}, {0xd0, 0x10f, 0x7f, "7d862c730bd032e6054da133981973bd2c4580647f577ee01c9355847a12cbec983819078b7ff5994444b6e92a78baad9aecf52ced925547247210c7afa50cbb210bb0a52a92fa328ff1a2784a5df6a0adfb1db4ab519bc3f1a978664435d2b1ee1756d17485d0a4bf845b43f97fc95ff741f598edb14943cfc8610160c041e1750dab563344fbe56662d10ba5ac4765866d0f114a4d3326fb84a6d9018d4583498894649e6e51b3e2dac368efa00d216678f6e0a0e567b1ece7c7bb6f3882d1"}, {0xd0, 0x103, 0x92, "0fef8dfb15e86ab27abfdfa654b683b8daee14bdb557d2b4ccd77b39c209b48b903e9d649d2a55541984e74fd546dd77e70968f73879b2638b59e375c65299a9c1aad344b86561116bda7b3d32fd7c598127ad45456d3204e591985388f6c45132b2813f2f902a75bfee9f07440c9f987ea51290b8ffdcd3ae220f3ccf30df7981a0841a490998166bbf83333d134fa6aa5318658b97f11f589f43c5ef3749634723fc548e93b5b6363212a71462e77091ddfe9debc556ad20"}, {0x1010, 0x11, 0x80000001, "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"}, {0x1010, 0x109, 0x56, "43f8c26e0caf9902606557aac4a9700072204940d752c30a4a622a9f7f1d5b33e6feb294b67f130a037b2de94d3bef8dabb7aaad38f9d87f708916f63c97b2c0911194df458ec99feab8c27270f47783d0266950a05660af258220250b04af838dc09915a66e9dc3f383119bd866d580d2b2d9040ee8bfffea1463e5cc3c8f54227826921aa05324b15750914f82c8af026a6471d2fdb4d48c1526978992e722a7a752f0e5cb58eaefe657c4d13dc137ea9909ca2aa35f03f88bd94f7064125b7f9eb0c695edf85c293c6bf37c5bc88c06af0448824256c03ba9e045f4d2df929e9324cbf1338de80081447de3683ac6600ece3a5e5d7d49eaefae856b7499d2fafd4253b0898933a82c6dcacad23d587d27e099165031a45873beb27c089dc4244ba5de735176afba863363cf069d80593b363d88dffe246d69462aff4e63c83299d15605bae10cba6796225231ca7df8f83f8b03c1201b400fe5ef6c648c00f2b43dd5dd59f4675ba9a7bc090b5fec355c1f84579dda5cb9432ad622a98ed477666cbd42277ff1047e1404d9db1ad5224ad6677291e984323f2025cbabe0969ccf6f1949554a32175c1c31538a9b9ec07670ce2e9339a17fa7a8c920b26711e70eeca788fbe8284370a2893828141d411c77b5326eeb94f2fff9664d6bb0078b4b337e628c1f3a1f0a6d9082012af261a0347445dfcc6fed36618876914e6e40ff6d3abb638473549fbd4a4570f3ac6b59fa32a611cd2d62cb638072e03fbfdcb0205d7316b289cd0cae3098c536c83a27c7d8f768decb063b281eabea0d1ac201638827594e1547300376036f3dbbe910fb0b7ee99c595c20bdbabc44cb0e75bb664c3a9cc3808198baaa99dd65ff203bf41428a1633ec9864826da643e46ebe8f1d5036ba8ddd7e62c78121137398c2113a5b71aa7f07a1a75519b8c9bace6b62a1cf53c30d43cf5b1901a422fb0bd05200f70a90470b438812835020d295e598c173dcb572d2490428130f53239c3c113fb9047fad33da7566ec5c77c379668ae915685939cec439149e9151ab372efbc067b1660ac5045a1f6226a23d29ab391193f9ec9bb5644fa32c637c9390849c998dd1a667cff2eef2daf58cc724a1b208f1f9f6df769cebfe0dc3a6c466ee0f8a29fc9d6ed32ae52a3027758d55c5ff2b80c8450de4c4bb80b87e5b16d28903bc2e6a4a23805f5b66feb9c4137b92c63ab95081c4486caeb878dfa9d493556547c9d6c401cf43f4a37b236a2894bc51968659f501ec5fcea172c77e5988122257ab4029015471e112bc676da69d35d78185f98276157113cc782660994a426422edd155771e322e41ef5a7432165fadbfe69641060195bf48b3395ee43867ddee4b4172810704e67642bbec9aa9f2f7e55230f39ff5151ac3049e09d9f826ccf21223f0ac5db0c695df4c9acb683e208065bc64878086c77f481bd08e3490b82bfad793f4963ff0e1ae52d49b048f5f05194c643aaeda1b82756c3750e8fc2d153fe0b3360f662340d4b8d42f891a25f5b2ebf04f5f8a03ed5a42d6ab97690d33897d9f43d15aed32e9dd654f16c96caf7256a18f7d7c340fbe0de49ad91b35e0abd62357f10e94b5d68cdb97af955b4c7924ff50e28a270e2fce9ffddb0129e11d0446a5759ed1b95023a92a799e5aa4dd30218d7464a94149b0331c37ace68f701fcf2848214ccf90c4e747f500a737dcaa096d90a9ecc7dfc5aa7635d5a0f039fcda3dae76182ceef72dbda2b7753e1505df500f79dc67a7662f856ccb2d53570caffb419c7a347bce58c8455ac88c55d531447ba8d9d83a0237a69bca3f178af6036fdb08995adf78ee7673dd522bf8b05a664daa5813e0f18670d715bf081998f998052440f7eefd3fb0b773e5327d991a720a488ac1d226540b5e74ea8db718e6b553b9a96613fc8ff046d07aa12d761944b810fe19a66660f5c3a362fa8128ce61826c7f0ef54ac5194c8b2437eaa2b5a9e4dd0c92898d513285af2f85491693d28bc7b46725a55be5c3ca3cbab962023b7a211f8a37bb3a8bb37d5a790f1763a1dcdfdb97fb1dc3bebf0dd7afeff1e40784e6d9c59f3aa97a9d6a48711e90bbd8a1954d57fb49ee4f22977c274a2f0eb68d7d179af46d50b5dfc51f107e4e0723c1e08c88df050cccbb344cb34ce972c57c5568f25adc67a30ab98db66dab5c5f7699fac922be345df6397a25bddc0c14f59a414c842e6d26de51bbad7d7b31517b3410aacfdd9c3063cf0b01390d28eebd2fe74595e8d727d78475f7667e357832c0de5a0e7ce1cc397f05404a1ba0674c2b28f171f48ac4910f0c6588b16abf84b9029c7c7af1757512b87c36e5536d4b9deef46b3c9bbe05699054189dd8c510182dd14b5dacda5caba4d2713965f36c8fa50eb9fc40f35ed0fdc63848a5e386576409679d0a4155202cdcdfa0a6e12e00ef8995efa8acc9f4ee83761349e51629acb0426ac2491ff8a6b1961df19e62d8937d268b37b9505c88892b90d474456f3677be9d97ca543a69ec50afcb8b986b31d6390221446991c3ccd30c11caf6c914f9c742145ca3b1f15a607718ecf96361da8edd246a339729b4128819ba9b1db73043b1dc0fee438fd0a34ccb30cb479bb810ef52f90b9112520de8f86a7b27545313feb11c82a010cbdca7b2a1210c99185c46138d86789690465d8b7b7fe576086a606b0e91e33af515d327b859dccce39df2ebc89b242ac205307d68818c95cdf1aaed5321faac1ded231fe30d9ada0007af58fb5f37295bfb67feb9ad05f5b90b39fc97d3c9722b3c519d6df484710a6fc882cdf4b81aadf59e02294dad1fe4d46af8e527fe2cd9263bbd2ec222bc263da3ad57e83f7defd839f07d56173fb9128270fb838d0731fb3ddc4ea564f96e32e9194b47aea36903c451a86b64033ce40cc0d0424131a3beb71396b1c09eb43460bcb1b6ec230ffb1c4fba7246bb5d147d1c5701bfce73e3113ea727a2a8abada477bbc4fd640e1eaa708d2157c07abd2dbc0e3d58446f4b80ae74cfe419bf3f7b91cbd600567e7728f7394b1bc5cbc6909419b7009e447c42627115c1320a26c78739505d80a870573492ec6a878cc13a235f97963553cf2e1f2a9868c23bb6c8c2c4d797e2128c22ab42a3dbf4e87cf96b827a648773679bdf3ad4d5f767ad95fe8d96d03f0adca70112270720ed85613e07e0ad245193590b5dc72c918b116028fe4ec85245770ef0cd46eff40773da7df9f39d01ef293e2d5d0d0b15e9b56375cfcc71433f8aa11162a6196e50fb3d3a6e6b748b7309baa58fa94afda91c8ca99ac530c4b7b6f8ac39c05e70d12f06a9ccaa6dadc91decbaa28305c3e1d85c366ca38a38ea14b78574065e2a6749357ecbe62ee9c4bdea3608f8632e098cde7215aff115276b5d5b953de4ddd0f153d8457dc75ab6e58005f09cacf65498eafad7b0e0b4a0cc860cfd9eccf185cc02d7657ce03e23f53b980fda8822987c14333ef0b9f8433cc7989a51fccbd62a67e54564f863beba3ec3cc5f4ce4512e8076f1fb0104cdc0f3174f105ade61d808948070c1d554ee045f5afee3eaced07129c93c0b7f398210c18cda6cfa83260ec34af8fad63f7886e1fe6820e00ba6ccd5dd312ce90d5717e7da52f2b42113b1fb49894e9c7f91180f15e71723ce298dfb2f26862271111bd3f32cc93fc2140571d188f219eaf364276e5c7c74ae84cc5e920c285d75f30e6a10b9c2ced6645947b9f9bacc3417e0f63ae8ffcc5d406280b67a9997fd891f82917d0ba002164dbeb456e194c3de8ef40d65cc990241be058f3190c745d3254a884757fa0ac1a541fc877f6497c1fb2d24a03778af2a33be9c62e0ee4cde65c8c957aaf2efb638226087451933c3eb4c587e7bac0b51cc23bb55cb66eae7b1681ee82508bae1c29a3e028945711023742d00525505295f31f4ee017a45ac12973bc58670bc0903c0c16f615f4e67913b59f59ca8a15be8d3aae2db0d525213d985da5d096cf5125f4031c89050992652ccb05a5a61b7124f9219b8597926923a261d07f4a93f6795ebcc5ad7b5da1c69ab2fce4441323d03c099db3780f9e4317e4e5083f888f2c6422f1e1776a4106b671bdfbc8439da19142b4cfa46d53943ac444740c78a8ad0ec3af61c91b83e9f2bec6ab4bc9ecfd873f52ba94bbc8ab8b46be6adb808eb7abffcdf69e5329dd7dd8e0b39d2570811f586c069795f477f2382caaeb1e498ffa4cb5ca5ac27147ec12c75b47fbe284dd2619c6c84811f707a3d4c5cad5f2a119182b0825c6aeda204bbde7991a5ec9a5b1eb73a01f72d2102fa01d8111800c4bed51c356f81441271b3f81efcd03c32b17b57a49c05f03b9d46c172c309313e48934699b78125d038d2cebe27ed7c144a5136966143b06573179ebc327a4ba2b053ef0d377d75fd391a07c6d51a6930c1e73b8459c69ba934081a416a5ff587fcbb601aa017dbe2999f3e5c3ab56ec0077f081b6e9e9bface59dff0c0363523a252c7bc8b6ed44f2ab368156a4585a9f7625d772dbd9c21cbf51c2cd8c2009161760f169cbfe3e91530e0952284577d76d84a555cf39cae91905ce19e2baeb20ba042f4815a457258234f27ef14655f6a3e535a3ebba9a5ebdcdc87cacd6ceca4b3f6504b13752ce646d65e9e5b64b9433259f66581b575f95cb5e94b46e7e911ca735efc0d2441c14a62b0f244d6ad37afc36913d54a0d7a1cb6d7d524f2acb9f6948b78775258aa08f2ccc49f3cfc84040a318178f944b85ddb79afea87aa16d396a7b684b7ed75c57c93e581bc3080c1de34b94a14a1c2bf8ab3cfd8db2a90334679ebfb01f59ed0a0cbad5333906ad7b8c27cb3f161ccf6989b515d04bf01c01f58b484f158ab18b431a7e275c74d6aac30d32da90a5c32a80144d1eb6166424a13413a1737518a396d5f05d5c13b3cad900080e1523775b4d92e255aa99c84efc1097d6ef3ba614cd12b7844b2ed48aa89c9baade1c6af6406a269e5518a604af5026d4ad592569189169a95e0e1d05d421cc5dc3988cce49e6779d624a6229c3f38f35982f3f48688304368dd6fe223fcae437c47c49be914959b347b6894456f8028541b39efc126960d72c50e5653291c97f7cc95f655a02bfea0ce7f3496569c7f2afdf096d77d1f8c84d2c8de0d98aed3b5cad7779d8dbbe6567b15acf74db5fd6c8665bade87840c1b9ca5e7d7d28fec269f4c605373d4de917c33b1717053a2942a348ba4c088dd615f00486670ac64fa647039c4e6bbf385362b2c67e3be591ad22454098d2bae02ad58a1d693e9ecd35b4f7bdba3cd549dd27cab575da7ec737af175c1ef9e9cf5521894a05e6f95682d5d8a621d07509be715a50525f8adf9c8a52eb4de5c2813ecc3e7d768a29e9f06dabe836a5b273c0756f0e6e9f200aee16a69521712cee75cfce077f932c591fb2350d624b3eef5748db2d6a556f3c5d47b13b3d8390aeaaeb9cbee741b39de4ff806779bf402fa178904a69e3c81b4de136c44e40b80a7f400c93afbe851e5145ab67012c40775a6ad4c2d09a5d32587054a289fd282839e1ad9061b230ffad6931c92b3ac86b8d5934a734059d244c0a84f2d281301db15803de2f2f94ce75c88100544bb10778822a6f01d0554526039fcddba78683415f7f961213dc30aed91af17c96606d892d09f2bc28eebe2723bf0377906f0f4f8ba356dc411a94e30719a11233ca34bf72237fd54d350fe133611cc19ff8d27d941b1e5e84391b8560b5d3ff9a037998a3f0"}], 0x3440, 0x20000000}, 0x4}], 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 306.744748] binder: BINDER_SET_CONTEXT_MGR already set [ 306.781201] binder: 10533:10542 ioctl 40046207 0 returned -16 [ 306.781251] binder: BINDER_SET_CONTEXT_MGR already set 01:47:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400000, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) getdents(r1, &(0x7f0000000540)=""/185, 0xfffffd62) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) [ 306.843448] binder: 10533:10542 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 306.857407] binder: 10545:10546 ioctl 40046207 0 returned -16 01:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x80ffff, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x1ffffffffffffd9d, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0xfffffffffffffffe, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfc01, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x20000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 307.634903] binder: BINDER_SET_CONTEXT_MGR already set [ 307.640455] binder: 10588:10591 ioctl 40046207 0 returned -16 01:47:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x10000) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 307.729552] binder: BINDER_SET_CONTEXT_MGR already set 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0xfffffdfd, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 307.754279] binder: 10595:10597 ioctl 40046207 0 returned -16 [ 307.798513] Unknown ioctl -2147200512 01:47:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 307.940273] binder: BINDER_SET_CONTEXT_MGR already set 01:47:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f00000000c0)=0xfffffffffffffffd, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x8000000000000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 307.968629] binder: 10612:10617 ioctl 40046207 0 returned -16 01:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000140)="bfb8f0c8f5ae29c573e346bc68c5a56f5b65453cab1a731f81a69c378a041d3661bb7f72e7", 0xfffffffffffffe00, 0x900000020000000, &(0x7f0000000100)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 308.020364] binder: BINDER_SET_CONTEXT_MGR already set [ 308.033949] binder: 10619:10623 ioctl 40046207 0 returned -16 01:47:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:50 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3d8, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251, 0x0, 0x0, [], 0x0, 0xc}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getrule={0x20, 0x22, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x34, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0xa}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x80800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@mcast2, @dev={0xfe, 0x80, [], 0xb}, @ipv4={[], [], @multicast2}, 0x8, 0x307, 0x80000001, 0x100, 0x2, 0x2030000, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) [ 308.187612] binder: BINDER_SET_CONTEXT_MGR already set 01:47:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x100000000000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 308.211978] binder: 10638:10641 ioctl 40046207 0 returned -16 01:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 308.335461] binder: BINDER_SET_CONTEXT_MGR already set [ 308.385109] binder: 10651:10656 ioctl 40046207 0 returned -16 01:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:47:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xe4f9}, 0x8) 01:47:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) 01:47:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) 01:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x200000000000000, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x3}) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) [ 308.785477] binder: BINDER_SET_CONTEXT_MGR already set [ 308.812578] binder: 10670:10681 ioctl 40046207 0 returned -16 [ 308.819008] binder: BINDER_SET_CONTEXT_MGR already set 01:47:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r2 = gettid() r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x9, 0x2800) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x2000) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000001c0)={0x5, 0x7fffffff}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x6, 0x88000) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 308.851375] binder: 10670:10686 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 308.863346] binder: 10680:10683 ioctl 40046207 0 returned -16 [ 308.882266] binder: 10670:10681 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:47:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 308.897308] binder_thread_write: 10 callbacks suppressed [ 308.897318] binder: 10680:10692 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 309.003235] binder: BINDER_SET_CONTEXT_MGR already set 01:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x2, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 309.036405] binder: 10698:10703 ioctl 40046207 0 returned -16 [ 309.055124] binder: BINDER_SET_CONTEXT_MGR already set 01:47:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3f, 0x101001) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x82033, r0, 0x0) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 309.082444] binder: 10700:10705 ioctl 40046207 0 returned -16 [ 309.088621] binder: 10698:10710 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 309.212942] binder: BINDER_SET_CONTEXT_MGR already set 01:47:51 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 309.253986] binder: 10719:10724 ioctl 40046207 0 returned -16 [ 309.254064] binder: BINDER_SET_CONTEXT_MGR already set 01:47:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = memfd_create(&(0x7f0000000080)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000600)={0x0, 0x3af3, 0x30, 0x100000000, 0x2}, &(0x7f0000000640)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000680)={r2, 0x3}, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x8e, 0x4, 0x7, 0x4, 0x80, 0x401], 0x6, 0x1, 0x2, 0x1bb, 0x80, 0x5, {0x20, 0x11, 0x1, 0x8001, 0x4, 0xef, 0x9, 0x0, 0x10000, 0x400, 0x9, 0x8, 0x7, 0x4, "b745928f1b915d72e6204f1f538a2d88ca67a0221696dbaa1d706bfc8e7db226"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 309.300557] binder: 10719:10731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 309.323321] binder: 10725:10735 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 309.335221] binder: 10725:10728 ioctl 40046207 0 returned -16 01:47:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:52 executing program 3 (fault-call:10 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 309.347381] binder: 10719:10731 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 309.357474] binder: 10725:10735 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 309.378090] binder: 10719:10731 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x2000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x100003ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 309.499197] binder: BINDER_SET_CONTEXT_MGR already set 01:47:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xc3a7302a8b04bf6a, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1544) socketpair$unix(0x1, 0x9, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000200)={r2}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001b80)={0x1, 0x3, 0x2, 0x7, 0x5, [{0x3f, 0x5, 0x6, 0x0, 0x0, 0x1000}, {0x2, 0x8, 0x8, 0x0, 0x0, 0x400}, {0x2c0, 0x3, 0x10001}, {0x1, 0x80000, 0x200, 0x0, 0x0, 0x100}, {0x8, 0x1, 0x5, 0x0, 0x0, 0x288}]}) 01:47:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 309.525156] binder: 10746:10751 ioctl 40046207 0 returned -16 [ 309.531276] binder: BINDER_SET_CONTEXT_MGR already set [ 309.547446] binder: 10749:10754 ioctl 40046207 0 returned -16 [ 309.586205] binder: 10746:10759 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfc01, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 309.689555] binder: BINDER_SET_CONTEXT_MGR already set 01:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 309.751728] binder: 10768:10773 ioctl 40046207 0 returned -16 [ 309.751733] binder: BINDER_SET_CONTEXT_MGR already set [ 309.751767] binder: 10767:10772 ioctl 40046207 0 returned -16 [ 309.785001] binder: 10767:10780 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0x2000, 0x108000}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 309.894921] binder: BINDER_SET_CONTEXT_MGR already set 01:47:52 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/ashmem\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0x2f, 0x401, 0x8d23, 0xa, 0xea67}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x1, &(0x7f0000000180)) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000440)={0x0, 0x5}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000200)=""/65) write$evdev(0xffffffffffffffff, &(0x7f0000000440), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002100)={{0x7f, 0x45, 0x4c, 0x46, 0xdd4, 0x0, 0x40, 0x505, 0x1, 0x0, 0x3f, 0x0, 0xe1, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x1, 0x9, 0x0, 0xfffffffeffffffff}, [{0x6, 0xfffffffffffff723, 0x0, 0x10001, 0x2, 0x101, 0xff, 0x7fff}], "", [[], [], [], [], [], []]}, 0x678) fchmod(r1, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f0000000380)}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) add_key$user(&(0x7f0000000b00)='user\x00', &(0x7f0000000ac0)={'\x00', 0x1}, &(0x7f00000000c0), 0xfffffffffffffd5e, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@nl, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x5, &(0x7f0000000800)=""/229, 0xe5}, 0x8}], 0x1, 0x0, &(0x7f0000000400)={0x77359400}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000100)={0x6, 0xffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) 01:47:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 309.921996] binder: BINDER_SET_CONTEXT_MGR already set [ 309.929210] binder: 10791:10796 ioctl 40046207 0 returned -16 [ 309.942028] binder: 10793:10797 ioctl 40046207 0 returned -16 01:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) mq_unlink(&(0x7f0000001940)='md5sum\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/dsp\x00', 0x8080, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001900)={'veth0\x00', @remote}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000011c0)={@ipx={0x4, 0x6ca5, 0x1ff, "021b2cad07af", 0xfffffffeffffffff}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000000100), 0x23}, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001280)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000001380)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000001880)={&(0x7f0000000140), 0xc, &(0x7f0000001840)={&(0x7f00000013c0)={0x47c, 0x24, 0x300, 0x70bd2a, 0x25dfdbff, {0x1e}, [@nested={0x64, 0x38, [@generic="748e36fb699c2dcb9261d518386e8910a4d9037f2a05ab8bb0d78b3ef5284c6f3ca443574046a842b1b3a951c046964d4eec3fb099f723", @generic="0ef138211e231271b0fcddae5dc63c82a1da4152d1af6935ac93e20c5de9", @typed={0x8, 0x2a, @uid=r5}]}, @generic="ea4652ea55a77ed8890dc865ca7a457620847e3961931ccb891fa767ebaac8fdabf9ea6b5971905ee3436afd53130053018997a38ec35b4304196a0475ecb9fef98b5a3af61a066681e05fa61222ea450c79efc4e258f89ad4e23c3ca1e5eca92493c545eabca6e8fe66fc23f98c97aacf2321cd5662a451664f0c195689811520d2a19d96f8b845e78688a205f1d394d42c092c668ec6b07d6957f651", @typed={0x8, 0x1a, @fd=r3}, @nested={0x294, 0x23, [@generic="001492025cd65de16da38eef8447db6ea4f34c95b5f6ed45a869cdcc0c3888893dc0c050b9e360058738214ef8ee2d491ce4923a573d865b02c39ed5c2a1fa744993e92c6211cc5ad7e14f0562df0bf73dc0f70e2355565f9744f08576a176a8603e0c710dfd679319a194f811aa796f638322c0109131a52188b1ffbd33aa0f441de4d81b10e0965913f027fe45363bd5e879f6667097355ffc68aac66f62", @generic="a64548cabc45014a0f916ae5", @generic="8daec9b8ebddf2cba840362ebee007bdb2f9da3c9445f7da7973889d87143a0ccd393a298848a58b9d41ced951125fd4793180a306b818c5f8c1ffc5c9dc523e27c89a63810a509818eaf33da32341b36d4f763b1e2fe6929629ace345105b2248cf086469f3851478263c172f2770e864096f632ee7f8294e464113cc29c0fecbf7bbba55102b98e80d39", @generic="3eeef6e812645de8120cd94fddcaeaee69b1edd7406da9ba0e0c8a8aa0c5a875594629ffa7a71b79fcb4b652e2bd98c099bad2ef084fbc5b2ed09c436e3a637c29d9982fb5a21cef1be040e49edd859a1f26d329dcb6404d064fc631018e286c461559072fd8897ed8d34a42ba951b17e1c804196fab1345", @generic="cf8ecacb78e91314ac5631a396a6ef77a12ba287307165a1f663d890a7454bdb020b", @typed={0xa4, 0x81, @binary="7402a385299c09cf6b19c6565a9027b628a25dd271b1c3a821d4ed130a05d60567f6f9bcacb0382860ca2ab2d34c9a35aac69061ba4a7a3aa8b4ad8997db22baf2749b354ac8d9ae28e0b5d0ea9211681fbb8cfd7b4f6e795bf0707b344eb20c2d75f0225ceb530357a956e8d8aeff5c35e280e23e2bc4208aee7d44ef3417ca8b27b29a7a0fe8a1171a4c92beb49d9560216681825f1a4522fd597b23a8"}, @typed={0x14, 0x2e, @binary="6cd287f32978f1df7f16a640d7fa"}, @typed={0x8, 0x13, @ipv4}]}, @generic="93e19a1fa9060d682b852fe8161cc4cfb95c0bc4781fd475266c12a75fa3501be038443bdc6c36d4bde76248b72ea1775e5e4c96758e4a7a1273b82601583c02015162672059f8074d13d6d4d4fe0b2fef0b6bc0e6256d9ba35be4fb2aed6d63dc9690f0ac629bddc2f1b4f7339f3af3da6f182f1e7d238c10e1df2c844004ea57d18f74b581e6c3c0636a607e12dc03241aeb0efc59e7518e98c981e5b44efc40184acc9a17391698d0bc5cc68ddb159a8f77440a17a65e13cc2e43c879a98f2171d47bac364d4c539d0a"]}, 0x47c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 01:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xc, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}, @exit_looper], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfffffdfd, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 310.013140] binder: 10793:10797 ioctl 4010ae68 20000140 returned -22 01:47:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x5, 0x400) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000003c0)) pipe(&(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x7d5, 0x0, 0x80d0}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x2, 0xff, 0x9, 0x5, 0x4}, &(0x7f0000000140)=0x98) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$getflags(r1, 0x409) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 310.227440] binder_thread_write: 2 callbacks suppressed [ 310.227455] binder: 10817:10823 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 310.297157] binder: BINDER_SET_CONTEXT_MGR already set 01:47:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x2000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 310.335988] binder: 10836:10839 ioctl 40046207 0 returned -16 [ 310.359340] binder: BINDER_SET_CONTEXT_MGR already set 01:47:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 310.383003] binder: 10836:10839 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 310.391670] binder: 10840:10844 ioctl 40046207 0 returned -16 01:47:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x800, 0x44, 0xf000000000000000, 0x1f, 0x0, 0x80000001, 0x200, 0x7, 0x961, 0x4, 0xfff, 0x101, 0x6, 0x557, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1, 0x1, 0xcf5, 0x4d276acf, 0x101, 0x80, 0x4, 0x1, 0xfffffffffffffff9, 0x1f, 0x3, 0x10001, 0xffffffffffffff01, 0x10001, 0xa8, 0x0, 0x7, 0x3f, 0x200, 0x2, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8, 0x8d, 0x9, 0x7, 0x8000, 0x7, 0x3}, 0xffffffffffffff9c, 0xa, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) exit(0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 310.429930] binder: 10840:10850 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 310.538358] binder: BINDER_SET_CONTEXT_MGR already set [ 310.551722] binder: 10860:10866 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:47:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x30b000, 0x0) accept4$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x40) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280)) mq_open(&(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x1, &(0x7f0000000240)={0x5, 0x1, 0xd4, 0x8, 0x6, 0x8, 0x7, 0x9}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x200000000000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 310.583401] binder: 10857:10862 ioctl 40046207 0 returned -16 [ 310.619375] binder: undelivered death notification, 0000000000000000 01:47:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f00000000c0)={'system_u:object_r:dmesg_exec_t:s0', 0x20, 'system_u:object_r:mqueue_spool_t:s0', 0x20, 0xb93a, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x89) [ 310.645921] binder: 10860:10873 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 310.686356] binder: 10860:10880 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0xfffffffffffffd34) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 310.772634] binder: BINDER_SET_CONTEXT_MGR already set [ 310.790516] binder: 10884:10887 ioctl 40046207 0 returned -16 01:47:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000000c0)={0x5, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x200000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 310.880614] binder: 10884:10895 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 311.013507] binder: BINDER_SET_CONTEXT_MGR already set [ 311.038929] binder: 10908:10910 ioctl 40046207 0 returned -16 [ 311.082596] binder: 10908:10916 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = dup(r0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100), 0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x176) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/59) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fchown(r1, r4, r5) socketpair$unix(0x1, 0x2000000000000009, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) 01:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20800, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x6, 0x5f, 0x3}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20}}, 0x3d7f}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000280)="75fb36d8148bc69ad0cf0b0ef98e8cda6e0e91c8d80fbc9b4e634aaf21f781dc0be8f568842c167bdb224bb0b2966fa546f1ffa793c2eff4b90495a3e17a71add6e23864f72bcbf47cc7530c3c135c728960701c17bcc0394553f196f9b29dd833318f3fe1e4fa05d994e24f304bb5c54f00751d9257c5f1648cdc73007d07bbdbd7", 0x82, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x8000000000000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 311.332044] binder: 10860:10873 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 311.372206] binder: BINDER_SET_CONTEXT_MGR already set 01:47:54 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x800, 0x400000) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000100)={0x3, 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x8, "e8e2fa5f82260da6b1efd8379bc97684bc4eb55dcf0669d8bddd3d5107f2f36f1f2169b8b914ad8b3086dacbadd6f836a8c63d576a1d350d7343f73815484aaba5cadda99047994ab7fc7c1592f50b759af087cd331aae9b5cfced5a79e82a0fe399c4957398fced64467212cc41e50342a122b6fd279a3c4148eaa01b684415509a94d06dee9f33a7589c743933e184df3627c08095d9c3e7a3aa0c6c590287e67da5fd2135ab22ecf275345bbec7fc272a0d235a7e0c3ca01a4eb87b3c12f382395030e0ef1935e1361a7e9d7d10cbbe70610f44187e11227a963f9de725f064cb2d7a6c6886f03a8e87d6c19c7d57adea5ea8c970929979cbcd78c408d34fc158744854340498efbb433de094e37bd1365f7ba6a506aef97a4d80455449a263996d82a7131b1cc5a58553e424131fb985d1f39b44c1bd4ada5146baa9f9c90643339bb6d0668e6a73cdffa0b27cbe8f91b0183f5c210af9f785063732b9ee6daf086606b916cc62e67aa2bdbe4aa2fa21f2b1622936d52011b28245f7c65eb8afcc64a554fbf67b2da236bc1eff95ee371be95b511e41c911ab2ceb4d2d4877edf6ba0a7b69b138e2d98220f81f9c57b589b3f7afc18591fb833d0d6b7b624b8b74bd4552ffe948880fb73ca7528ecfa48500e3765ebf7bd335c2115f6d0584c30604f1bf892ce704b3fb37c9b2196c2c1e39b680c4f8799affa3ed7e5cb69d00dbf4a17c0e6bcdaa5b0d59a802d828563bc478a0eac9e7f03160d03759d5e05e13d37c24adc289d10ed985359df810ed4617a15e8dd9605a3c9fa8097e8a3e69be87338e176df8a44f8b5837f7383f542aafd6db1978283f6e3ec65e9365a189f1323f4d03d2f9d12f20cfaeb6763c230cd86d7092d3a9a0378195b12d69c463d9abc510b4675bfbdd60593e2e6e24f5063681da616f397365b87f06c9a55fcce0ac31f49bd63d45273d22f7c2c839feba2ad5b817c5ae263d526b4a0703361c4afc4cf39d26cc040d507ef26ebd036d4172e5e08e413232292b2081bda3296374f2ef82a9051818486ff5f3e44c3cac84879acb8271cf91101f5439509997122a406f61a2b1ebeece5b62b57b84e0aa243673aeb8ae851b63d64a6c9c851279871bb392d6cb00026ecedde0031845416d57ecfb36cf3d2010acc1aa2502c43e67b27f274ec768e730fd3c25612b759c1188f8c6279038c61d13932c86b990b49c7fe4da7309336c7c4fd3aada659b000598d846fbfc4c475175751951190faaa6b3ec888c58782ff31ca6a8d0e6ef955774f087cdff41ad42980a520734b15890bd07e868cce20773056afbc5583610e5200852ff95cdc24c5f70dce530774265c1e3eb8479ab28c8fb11b6ed022428cdad2583c8be387f8753484451276dd0d1e7c6e0d60a6ed469e5491f16acdb454dcf440dc47217c34433bc233c5b3932678e03037cbb54a814311774d6a74e20c521ef31e734ac6e2cdcc6dd18c60f54686a897398013695d2a07e9dfb6b2997796a911252519f35c4802d4be688db4c455e1776271dd4f01b477573c4922ee3771d334420c861688b1e7c98dbfe2b5091b3040631f43a94d476bc9605af0fcb79151fcea35bf964cc4d872c7fbac3aed481bd860885cd5a20d6aa1312610756c147127962ecb2b5cf9b2624330e4fad1c8b0307f4c6a391389bcf018a4788dc0766982160910c51463964fe6066e22743256e0c24f966fde31b0d26522154841ad23176bf2e19e3aa5eac3e1fb165fdd393bedaeb24b915dfe09176b3751d730753c1284f107ed48ce9ec12c47679bcf17ec4e0e401b83e01672a7feb7559f45c3c461ac92be292fb807c1f770cc4991d12158d58b338babfabce359b1c3451c64d4a18b5ca345fc0f2213b4124cf9d8a68ed3a186a69e7a5b973129722345fd3df2999e7f6afe5107081c50d5ba45823e77fd5f50bb730c3edd3f71dbca950870561bdb4b7109d6a1ee3591b172897e62ca7f59aa35d6833aa2d8a45c5fc3106c17df35646a5de06e180cf15d69f6e08406f6140cad3e3b30bc0874fa8ab613514512a972d8cc0a5ccc755ba1bfb255beb410c2a94fd89a019e43f64fc67e7bf1b6b69097040b77258355e4062ccfa38065abdce385d0d0050067d250f47bd72c31a8cd92cd2fbade93399aa64cdad300e3c29f43218f1daf7e4b16bfa875edcfad1c475b2c4049e714310af63b7beb54027cb947554aa8d0d366a219b3592464396de4b9032bf0e07f01f5c08ec05388d2d2122249f9e450a1138e81c691d6dcf76b1ad302eae1b61dcaf6dd1559ceed7e3a6553c9fc41628e4576d5b7c6a7a1318660aa27ae40c89cbebbd2c1111ba1079fabeeb4de23de9bcdec445afa101783ffa4739d922e861f51412211142901d37a4112a37c0267b55456243ba178c3c848f29a1335f012fa49c857bf83d143a1a831fd2c160376163cd04cae7743a7bbae46824f9cad6274663fa27ab3b697ca274efd6ca618e1c6b47c047b88d424a80bda981ed2ca82675398b75bc634875ca0f527dbe0b977cebbde13241d514c9309dbb01835e2b3ef645174d22ca834a06f5bddbafa720ab98963204e7d291e6b6e6f9ae58fe09394b561b87990925051e810304a5129f9f7da395797bf359f9b57d31a1f82c87311dd6af61d85b9c32af5bb3666f2f1646e0c825c7c5b1d834f1acd137ce9b4593475c6431f49a7d8fa0711a425d398fdabf6607f27dd75e05282ec5f24a0dd55f24fd0294e33a0aefb25864b1217edb5c738d364781e522bab71f9bc10f4731a74162a0079cddff0c127a9be1d1f64cd526c1582fcc804276f7cf3b2f6f2c7f1aba7ee52d61cea1e2715488c58d2c7404b18b28f659b1fce670f8ba94b5d1420fec801d60b5c1ceb1abc0887d64a03769aec5e137d6f27899a0623ddf3e63d75ed2a5d9dc589cc155d65a31b98a23770f7e5a417e35e2e6eeb40f65fd932100550ad8f9fefe1fd9eba3851f57bb594f0fb7716563440bcc3f91f8aed50053fcd23927086327ac029523aaaf4992d2246be288d136bfb5556df6250d776b0da05a56902bdd867bf20000852125e25ba87cfd69f89ac43bdd136eeb014d016b407ffa1b6ef4f8b6658c264b5364908f17e7980d1a6cb1500980a0608892603cdfb80be05e8be36fbc05600d5b3a85267016ffaebe1d7116f118721c1c15c5de8017c1e4ee6a408791bb70b5ba8812ad153cf87fc394ce6346e1dcb88d61e8768d6918c4ac3a39e9cf338b8123f155db4d98544ec4d77842fd5340d562bbdc66d0dc063441da74ea2c931cbf34fe4075c53a2cd66fc05192177b3a3e7f2a83614abd737882edba9f5e8962a3e6305e213e6b9cca1fb18b406a59a84c060c846480c54942e622c68c81974fe3766ce197cfe7901a5a49383b753233dfac32a8bd111ab0fad6f30143005c62b300bd1f8bb839f0889413af1761a9e7fa337a24eb95f4d219f091a3e940fc9471f0a75fa10bbe238f95e9e851af1b0958ec4c9017c135bd476ef2c84d83b9dc53c7f7c27683c08131a8243dbba3aeb2324429d6cbb9b87264e0b2b8eea691898d5e794f54b93f7ec9d66b429e8cb9ea35a80596e70d3a3afb13a6cfd952f93a4169aee0c4d200f64f0b2d1f5ba386532642323986828efbf55661b5774e0fcddcb634b1283bf79d5f630d5bb660236257efa42bbf9080b91104d18ef37489d0c2030d57f765fc499b6fdb9eb685ce811d389b01a1312aecba2ad47359f2161a31ca6badbcce2e8a2b79bd153f2621fa8cc2b4cfb8f6a18d69f7b2e6fa914b8d649837551fcd9075f2780cd5e832b46cc8b194de1fe1c211e98793338903052e0651efd374fb4c65387c349d7029d2f44247f0fa5c7444e52bf2bc96ebe7d3c6b8a17f1fb483a3bd8e7e2ea81ebb7adee9cb320563d0d950ac0e2f9f30bba433d35827857e47b6216afea4ee9502147d8ada60e48fd4b35becbdce22a72bb2053d993995adcea5485468c5f7d85af259c2d4c9ebc07cdee155dbee9cdc600493ae61c859a99c823dba12c777a68fc12be9f17b123240fddb8bc9a394ec72d1d91de0025241fc89ff7da5d234d4d551415d24eb83e4617ec0f5d6a8c56eea1150a40e8d774f3a8579b192a31771ac33ec7ceca6d17d98d462cc06eea741d342e12e8b022a94f32278fd2a4944fe76cc890d8f1b98a0dd4008f7df33ab3471955852f80fb61d8b7e8d309b12d49de3ac523513d6535339448f4c5b43c11e0878b56aaf2888ca44055f40752bf80b1e1ab272eb4a3d30cf349d94828071a87a1d2ddfa6eabebe9cc062e4bfbd4600d9a39e674e7d121a721ad012fca28d2e9296866d313a02f04ef743f1d6a620d2c2340af28a2a5056e28cedb64730127b91364621ba96406e80fd0f8a7919aa408a1236d8d8379312610fe61d6ccab61e38194e8a6340d0cb72bfc6b2f70b4221a65d06822276e95f7c3785132475ac86cd0f92ab0c05b055e558cdcb23f60369f53e3792d74713fadd357acf12481a65817a0fa2b09ecf0d743534c5d961a50865369ad0d3b6c2ba14ac347cceb83cb987468e8d1ae713fe9c26dc78d37ee93103f3b290eefab0e7477739b8050f6cc6b4fddd1ca0c0922182c46f09097083e7400204781f7ee17f6cd16f56f25b268a57ab7f4aa940690ac0442616a15768a45de6e6de738509a081adaaea77f2474a0508a9f05722f10e67d8524c479912b70187d9cd5e2c967634332336ae6c9108a589edac71a9dfd4f9a01a6ce4ef4ecdf56f201153bff91048d1aa1db9194966e5bee68fff5db6dac9837ae5c15b60b832b5a329eb48d0a47ecdab848119b36dd3ab9ba0bbb724b805c48cedd81c4d067927d16675f8c52c34c7aea9bac0d2646d88ec995b31f1b07c1af08d978aefaa27ad64011ec2d0100a50c1fd696e4d17da3f537ad325f8bf43142ad94f028d110ac8a4b3799dcc747c5c1cb22099ecd4425398c11e654aea6cc129cb5b1c8019f9a079c9c2723d2af6e49076f7b1b2562a2131907b4912d4a2e4ce999f37599c56e0b90f6641e1464ac93c06494c8cda39b539dfee29a2941e0ede46fc4b902af6573dbcc6aa762b52f624ad9008b81a2fb6f189f6e7f6da7c94749861a778af2358fbd8f6aedaaf0897359dec5697c9eb234fc6fc127e96d1abb569dbff1a22098326350c127829f4999576884f8af34fb822d563ed381e9cc2bf812aa2eb76a2dd9e25ca0c0e0744f27ad31eeb97df3cbf488cfcb567462a435127c264015d77a461c5d1ee4352bf63385c584da827c37537c742ee8e42cfd003b809ab90f475e0c175f1bc8575f6c9274e4ffc895b219c74b0b929f3b1cd4a283fa82402e1127ae67008325f2720e7903c137681019309432a68917fb2602aaa6ad79cba178cc5f204473e042781d6619d52dcf1e0e3e56ed3f6793f7d6c26411085337e8fcdec4627d99f10ea0c57c7e35569124428d473de7c59ccf8efc2ff2d1e13f0f81d342f1107d76662acebea67f48831cf5ba2a3a4195fb99bf32faed6f555faf4b0d102c24c05b2ff437c952d5c22491f2bb2747d57fd20df0147e6dc109a078b7a29868002f9646d52c0f86deebbaa91ff8f8a0fceaae008a75f5e5fc36db98d4e5dd19c4cf6c6af17d5610a410bcbe61b5e33612387c90dd63949fab8b906dbdc679e231012930d107a5485d2bc1963a010807d2d15758b3982b6006a9c020282f303e9a87e5628797bf3e3007b89706aff1341a1f9e2dc42107427c70321a8aef70a62ec38a18902212813d925", 0xfffffffffffffee3}, 0x1006) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 311.402851] binder: 10923:10929 ioctl 40046207 0 returned -16 [ 311.403054] binder: BINDER_SET_CONTEXT_MGR already set [ 311.433708] binder: 10923:10929 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:47:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 311.466234] binder: 10931:10943 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 311.473776] binder: 10931:10933 ioctl 40046207 0 returned -16 01:47:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28a40, 0x40) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@llc={0x1a, 0xfffe, 0x1, 0x6, 0x1, 0x400, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {&(0x7f00000000c0)=""/199, 0xc7}, &(0x7f00000001c0)}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300)=0x100, 0x4) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x401, 0x500) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) [ 311.511818] binder: 10931:10933 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 311.557474] binder: 10931:10943 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 311.579848] binder: BINDER_SET_CONTEXT_MGR already set 01:47:54 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x2, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r2, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) sendto$inet(r2, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2) 01:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfdfdffff, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 311.608113] binder: 10947:10951 ioctl 40046207 0 returned -16 [ 311.651549] binder: 10947:10959 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 312.190884] binder: BINDER_SET_CONTEXT_MGR already set [ 312.196263] binder: 10931:10933 ioctl 40046207 0 returned -16 [ 312.196679] binder: 10931:10971 unknown command 536872576 [ 312.207761] binder: 10931:10971 ioctl c0306201 20008fd0 returned -22 01:47:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x86a82, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000140)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c40000000003ad9d9a63df394d8a93e756fa77c0c21c0850aa74873a2cef9ef01a66552fef1c6b1df4f7f84953763edea94ed17b54f02038cdbd02c040e9451a3392215e192652b430509d01250728c204a083de7626ede1435b11de1783ea90764090df6bc85622de98bdb1bdb2527714398b9f3191cd81ca0e189a01f34b0556398db21dde318ce315d6f72857974536a0a272407cc45b2643c9b7c923b35f3e59a080fca9b90717912a3cb1a8bef"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000280)={0x38, 0x3, 0x0, {0x1, 0x17, 0x0, "bd7b73797374656d766d6e657431736563757269747929"}}, 0x38) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x5, 0x280800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000080)={0x8, {{0xa, 0x4e21, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x1}}}, 0x88) splice(r0, &(0x7f0000000140)=0x44, r0, &(0x7f0000000180), 0x100000000, 0xa) 01:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) socket$kcm(0x29, 0x7, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) waitid(0x0, r2, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000280)={0x105, 0x7f, 0xe2fd, 0x4}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfc010000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 312.242507] binder: 10931:10971 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 312.251035] binder: 10931:10933 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@rand_addr=0x8, @dev={0xac, 0x14, 0x14, 0x18}}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 312.331753] binder: BINDER_SET_CONTEXT_MGR already set [ 312.350779] binder: BINDER_SET_CONTEXT_MGR already set [ 312.359083] binder: 10976:10984 ioctl 40046207 0 returned -16 [ 312.370820] binder: 10982:10986 ioctl 40046207 0 returned -16 01:47:55 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = geteuid() r4 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000640)=0x0) mount(&(0x7f0000000a80)=@filename='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='gfs2meta\x00', 0x810, &(0x7f0000000b40)='system.posix_acl_default\x00') fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() r11 = getgid() lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x3}, [{0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x0, r5}], {0x4, 0x7}, [{0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x7, r8}, {0x8, 0x4, r9}, {0x8, 0x1, r10}, {0x8, 0x4, r11}, {0x8, 0x1, r12}], {0x10, 0x5}}, 0x74, 0x1) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r13, 0x40605346, &(0x7f0000000940)={0x8, 0x1, {0x3, 0x2, 0x7, 0x3, 0x31a}}) ioctl$EVIOCGEFFECTS(r13, 0x80044584, &(0x7f00000009c0)=""/141) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:47:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 312.385981] binder: 10976:10984 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 312.436291] binder: 10982:10994 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch d894f33da6d9d93a != 0000000000000000 01:47:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x1fc, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x2f8, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 312.530120] binder: BINDER_SET_CONTEXT_MGR already set 01:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) fchmod(r0, 0xc2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xabe, 0x8, [0x0, 0xfa, 0x5, 0x6, 0x0, 0x1, 0x8cb, 0x40]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r3, 0x3357b0d0, 0x30, 0xdb1, 0x4}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r4}, &(0x7f0000000240)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 312.574280] binder: 10999:11002 ioctl 40046207 0 returned -16 [ 312.574323] binder: BINDER_SET_CONTEXT_MGR already set [ 312.580424] binder: 10982:10992 ioctl 40046207 0 returned -16 [ 312.606376] binder: 10999:11014 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:47:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r3 = getpgid(0x0) process_vm_readv(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000440)=""/192, 0xc0}], 0x7, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/126, 0x7e}, {&(0x7f0000001bc0)=""/63, 0x3f}, {&(0x7f0000001c00)=""/182, 0xb6}, {&(0x7f0000001cc0)=""/199, 0xc7}], 0x4, 0x0) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8000, 0x9, 0xfffffffffffffffd, 0x8000, 0x67f, 0x3, 0x7, 0x8, 0x73, 0x38, 0x2a1, 0x0, 0x0, 0x20, 0x1, 0x1000, 0x100000000, 0xe9}, [{0x6474e551, 0x3ff, 0x4, 0x8001, 0x4c1f, 0xff, 0x9, 0x1}], "", [[], [], [], [], []]}, 0x558) 01:47:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:55 executing program 5: r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000180)={0x0, ""/82}, 0x5a, 0x3, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000240)={0x147, &(0x7f0000000280)=""/49}) [ 312.759599] binder: BINDER_SET_CONTEXT_MGR already set [ 312.776207] binder: 11021:11026 ioctl 40046207 0 returned -16 [ 312.782286] binder: BINDER_SET_CONTEXT_MGR already set 01:47:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x20000000000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 312.825503] binder: BINDER_SET_CONTEXT_MGR already set [ 312.831108] binder: 11021:11026 ioctl 40046207 0 returned -16 [ 312.839702] binder: 11023:11027 ioctl 40046207 0 returned -16 [ 312.854396] binder: 11021:11037 unknown command 536872576 01:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 312.900358] binder: 11021:11037 ioctl c0306201 20008fd0 returned -22 [ 312.959214] binder: BINDER_SET_CONTEXT_MGR already set 01:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 312.988925] binder: 11050:11052 ioctl 40046207 0 returned -16 01:47:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 313.078727] binder: BINDER_SET_CONTEXT_MGR already set [ 313.098093] binder: 11060:11064 ioctl 40046207 0 returned -16 01:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfc01000000000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0xe0200) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 313.130663] binder: BINDER_SET_CONTEXT_MGR already set 01:47:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 313.195232] binder: 11066:11070 ioctl 40046207 0 returned -16 [ 313.222643] binder: BINDER_SET_CONTEXT_MGR already set [ 313.271413] binder: 11074:11079 ioctl 40046207 0 returned -16 [ 313.304697] binder: BINDER_SET_CONTEXT_MGR already set [ 313.329769] binder: 11074:11079 ioctl 40046207 0 returned -16 [ 313.338676] binder: BINDER_SET_CONTEXT_MGR already set [ 313.367391] binder: 11086:11093 ioctl 40046207 0 returned -16 01:47:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2402, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f00000000c0)=""/214, 0xd6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x33da62bf4f59194e, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000001c0)=""/249) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000100)={0xff, 0x8, 0x1}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x200) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000002c0)=""/63) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630400"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)=r3) 01:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xffffffff00000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 313.712437] binder: BINDER_SET_CONTEXT_MGR already set [ 313.730660] binder: BINDER_SET_CONTEXT_MGR already set [ 313.736795] binder: 11107:11113 ioctl 40046207 0 returned -16 [ 313.744414] binder: 11105:11115 ioctl 40046207 0 returned -16 [ 313.764354] binder: 11105:11115 unknown command 287493 01:47:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 313.788175] binder: 11105:11115 ioctl c0306201 20012000 returned -22 01:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x80ffff, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 313.857479] binder: BINDER_SET_CONTEXT_MGR already set [ 313.862860] binder: 11105:11115 ioctl 40046207 0 returned -16 [ 313.871192] binder: 11105:11126 unknown command 287493 [ 313.890193] binder: 11105:11126 ioctl c0306201 20012000 returned -22 01:47:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 313.911856] binder_thread_write: 8 callbacks suppressed [ 313.911870] binder: 11105:11131 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:47:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 314.002516] binder: BINDER_SET_CONTEXT_MGR already set 01:47:56 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x40, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:56 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)=""/153) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 314.053915] binder: 11137:11141 ioctl 40046207 0 returned -16 01:47:56 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, [], r0, 0xf}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) [ 314.190777] binder: BINDER_SET_CONTEXT_MGR already set 01:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x1000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 314.211482] binder: 11157:11159 ioctl 40046207 0 returned -16 01:47:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r3 = socket(0xc, 0x0, 0x7) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x5, 0x8}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000005c0)={r4, 0x5, 0x1000, "857c867ba87d4e46d773d1e4fbd027a34c606e32d8f1d7847488ac95f2c3f61ae7b8650851d8fb042e8921880f923197e837d055b74c49215151a5a0392bb34b0bad4f52e3a11628c9757a493f68c062169682fd1baa9509df3ff0e75235f286a1841db7998f8b5abf6732d0e00689bf1a189115575ce72db3691f940df770401fbe62b1b9a2cd9d4e6617f0ed89829ca6f096e9f9b8d9af2fcad510308be0343b5cfc1c090929a5d8a9649f486ecd6bdc33bad9b476df465b2d4f71a2582b51542f00dbb7e0d48f08e0f26425f6c85916bfdf2ce95664868f9582509dbe3983ee8bfac4dec250839186c795ac40e3b8e96914fba52a827f60cccbe9d0e7743c0636162db74c1327dd5ec9103c03c2cb19acf499a54ebd0a727884ce04ece1b233493a155badf6ef8000b921a9de0be2aedc7e7d3e272c0f8e044af3f4800febebb6935021a37a970497866c11c6cb352c83f19c6b315508c97ac661bff2c93136786152110ca5316834ba4a6e31f5ddc33500cfbd27d84cc51034584ffa86c9bb8fcf16051e99d26886b950e0d9457636890227cb96b7e8e0f3f5e28c81f14e920cb0733fc58dbe7142b2c97077b8c9a0344e20f8927f4e2b54f56bec06789dcac0bb47c563028b3434f909ac97eeae984c6bee537f44392bb80bb067c1fda82a7e4ccd63e33d2c839fb2416becc9b1336854897fb72589bd4cb04fa3cacb9cf753c38401bbc646b5a8fa0bbef0b9f288eddd940747a7cadf32eba2a043091c368a8f4735a957a738a6da7832d2437f604dc4c0f2a7a5fbdeff97d0395c00a489c6942015adf45ff381f42614259de7c0eb8e364c721a48320c656c47345c50b1b3fe9a1ab9782c7b9a5ec132e6961692a4aa3944e8901ab915c9ad0d654cdc96293d51a8b92c07d5e79944ea81926e018be586624f40eb230e27f27c9325512486dce5c8e2bf815d5b3c344b4de408e5150acb1dd5cf6dfd612a05ff62fe5a4ebeebe8af84ec3eb65d25d57276c692b65bd513a3ac91b6f553c907011dd80d6cfbfe2591211c929f43a8f93ae95da499c06745853d936cf758b0e2cd4c20040d30845d92a85dfe3321ecf9bd7136a7d0b12d78fae0022273051a9d63e9420e2188c99575dbd7afabd1961098689c20dc16b7789d9a30e73dbbf678366c56310a5b11a282422a3781a69443101c14ea0e9dc23a4b972c542cbf6ac40e8861a31ed71846825f9af7a7fc1da1700aff76fda54ca4e9d7c4eaa5ff6963ae1398ca5fccb906e63bd8111b7337738b1947fbb814a67c78d4c8ba0b20da8dc4fa6c7d2594dc072adde64482aa7a38b847c851d4152347171eea88fb23bdfc27147f1a8046681bd8c30637a2b7ab9937f440c28f4e8ea90f88d0b24febb574d0f83f81228571db313d7ff93caea4a9e147930f976f22c9bb4809fd859526357b2c37f0b14934a70b13fb04afa922205a8615c1385b517cf011f78853298dd9ff350e00678cf9f2dbfd6b36576d0fc7355197db5a8c761c14b9140368b782fdd29611c69f28e41a5bdbc7b387effc6265001d8a995fe4915aa8cce88331f5380edbb90b3dd222c3f512dde2fd27ca29b5c77be990fb6b208e2a2a7929929ebde4792636018ced824e417ffc917f789c36f193f917248dacae8b37b710b34370cf8cbed1c14d35bb296d33bc3cff46efb261e12d68b4cb287a44261951e716c16c15987904d2b03d018f4a66235ae5efe2bd2a11be2b7fad0469dec04c6b64b9fe83d1d6ebcd9f36623c8fa699e82fa0f66267410d080cd42a7228a30864a0203d0698b7957454ebac7bc96758c2ca71835f341c06bb15527cda81f865d9af218358e0637f24430000dc50aee678feff4fc5c7c45c3d9f9d9f6cb3608a207510e40e5f04d658b1083d314cb44711b0bce7303bab87066e6a57ee47be0b37d1caae86042abb1dbd763ab7a70009702ab2a9458389bd6b4a1da4f83450e718c42d13f8d59d725a90e0fc66dad54bc0a33626809a024db8048a1c7e28bcb788f8af098c239d5429c60fefd8c3b85da4f7548de377cc6f8487805356c2607ba7c454781405ff0481fb4e88143ccd156e8986cb6c8b951f51769914c67aef668dbe93037b878add783265e9dc7af93383dff0d3467e8aeb924a180a2bf79ac67376f49a62e08dd5ea0f36b111b6ab4d829d586806576dcdb8bb6c099604c48a15bef1850279b5636ed7ee15831223b01172e616c41b70b10dcd5389d18ea09a9ceccff88f47ea49ce18d1da1e66f00e2fca5657771df773f8216d50472ed2496d472be81e20ecf4bbae7a7e53f3f6682e572b50c4473c860c9aad88323ffa2997492ae8b745ea15b65d261a0f2f8bbef6dff97fabd3302ae876a59a106a428ccdbe75cd3747392b31d26066e331afacb4ea5eaf2717bdfc38ba20b7bcc047ea53dc053046efb59e91487d933139bf8745d0791cf3fd96fb6fa28a78b28e665fb32b6d00f2a28c210cd4c4da94c20b6fde2af48596759fae6b25e0f120938aac76f4ae7d911740d7204e73853ee7339a0c6328567b8f4942a1138a7bd72a079264440a6e007f5c3f7df6bdfc53fc271f7005a1afaf1437e0e21cdb57f3435f8f14cb7169e89b073e5143308f18772788ca3ce23260d155f256a2434303c16e55af50085cf02fb36bc8e4cde91aae879414dfca8a1d3b27a80a0d2b55ff4b59d0174fdb843128c761c90d9a89d9e12672289799f0b07ca228b554fc92cd70baac3307c307deb0a988dcf0b4d6e6c5b1543c89a5a508e2cf409a9b2a4faea23ce77d7e99e4b351d2dbb9aff5d85ebccab71506854bb3d0ad20e9aeec75c78120d74b73e371f29170f08b509ef05287d92602ea52ee9af5ef442697f04203507a94688e3381a934cac8757a15b8b5d9f12fa3ca8192f45d86c45ea1a1ca479e63da5e60db3c5b7b94cb3def9b9fb7a440751beb1076f9969fadb6160b83764363b5dd04081d363af2b0124805b8d1ed76e36e059eb8e8728699886a4e5c86b33d9bffbfd74512eda640028c5455f9ae0ff1f208b80eb45dfc6c2735ed64edde399d520564cd03d29e957ff823af6823fb6b43fd669fa0a1d9d52f1d966b18797bc25ff88f29389ac67041862e1bf9be7fe977895f3b25d623a2aa4a41fb05b90e1f9b6772c4c6f5d78bee15197d42a50a6a3ea9cf5d2cf0d8de756738271859e662013fee3d919de5647d0fc8fba5534017b645f28f4422bb586731ebae5a9513a6e578b88936d321211786fdd473b2fc2f7ec63d5a98663102839632d179fcc3450ca9fbc782aafc180cdc34d2030725a9abd77dce3af177036dc7674d2d1d04f3a189eb031986b7ab817bf19f4682b242dfd18a9f92d6e85dd5f33a254c5c99edd71d8230cf2849a6e7fcf08c44ba4d49fe271553d55b3048538c072b8001417336fc76b98e109d7a62e431416115fea9a2f4b414e13bb381b25b4f17f2c7b21036b5674e3aa7df2b1960acafe3400246ff422af0fa8d8c1c1385c932dc67132e397fe64f6ad841ec8678335baa8d4d22fe65f29000ed9de2981a6a19c89c7521ba1a2e0085f352a1eb10f112083ecb0ff99b309eb933c69ab87aa2966c5f00731e7a4dd13feeaa98491c07d2740ce950308b1ec06c0514bcbc41d5ab76b0997aae17aaf1ac6a41ebb2786e918e44b4d84c92f4ae982fcae6c6f851fc5424df711c8e496f5faae202540bb8bad5074407def37786f909cbdd4372bdf4efc1161bd0125333d45c9e5ed7eaaceffe3e8c3db858af778e56eda84789c6372ba794abaada6471ce69276d37ee2bbed0c0775d5f4773704f2dbd53916d68a884c4cadbadab11eb4ed3ebc6cab713210469aa2115d56d4fc0c040679567bc336320dc0105d6873ddda1cd8ea867dac3e1ec590637f28d9aac6745682274dc203ae32aa0286333f5629f831ddabcc9d33cc407b91e21b9cea25fc881bf827c098b84012a0789c568397fa40721e7959b55eb4877fc7eb673a7629154e28b180c8b822b84b8a34fe4b6449002d1d6bf1850811bd8247d75d6e28449b652eba086ea75a6b6183bd0854b7d9448f58ef4f750943b96b70f1d8e911b0349343fba124fe8ae297f977dad5a1b2ae364404731a7ecf095e10e6dec99055f22f409bc25ecc28399e6b32032218b6ef9857c5bca3f51513f8328a89f63456d94359f3c59dcd5b319e64a4a8df607d93fce820caf2b3706aaad384ba4c23730c1b905dc5f7e9e56823f98063c770a67286485f400edb06ada291a2a5d990dea211bb0935ac4235f8f02adab1bab49e1a74d53b53e36388ccd95dd771431162036782ad4bc9aefd53e6e856ff375818ae2e16b325f498eca006c3279c0f5c59bb88cea1a7203681a82f7e2cd214ce94f18cc15e6c29ad8a52aeaaa3350d25327291d3cef88b4c6a2d6f2527efaca342635c743fda9c5b5849f5149d989b912184dc29825605650075a1004e15d7c3bb34d653b112e1f3939deb59e57eab36ed7e7253aecbee241679ead8bff1957dbf0129b639b4a69a09bcf2bdb61b862ec7135f2d778b0ee1ec26dcecc97084a4548c19fed59116020dc920c5ed14396c2e51cb18c77fc704252d7bd006b1f01609607ac65f5db9d0bdb0fdaef0f949365b3afb12bbd1fa8825c15b48d8cf9c7c07b2110476f641a3c80bfd6761dfb48699d7315b6fc390300143a79a6c9c6e71cdcebed8b4cd8254511ea13dbd430b4b6e920499e9f95802590d0d7f46f5762c354442067adfb5e5c6e5174847d7a889151718ca93621a5c479ce8d1da096ef567002e5e60f2c4dbc7fc0f8ac21205a93b6e5b7434d882ec6e08c2817b113095d1a393458337a4c9ec804d8c67789bf0e9096d87e489cb14bbef18205830e2e4371a9bee4523d3ffe1a8b1c2262e29da09243fd3be985bf1056b40afc60ad36f63467c3e7cec8452ab4797dec5a28244d8f7d015a00a9fa0f4a5c298a0c2b5ec1a5495cf8be1ee961d733e52aec052460838a11698be19d21a4c2c2fb21301f025e382b0df5fc70f9c2df3d5d2def3f3454b0c04ca04b39ce5567092103140222a86cf5226528710aabc172c44a8bfe17de96f0caeacb777cc7508219184c3b1cde4da63e9f8d46ea00b9ea015208644ce470f4b3c1721ebeec71fe20a028c46a399fc542e86c5a32920eab0432d1ac0f8ce82cb9a2aa1c22faed4668a097a2e5759851e9a39717f9c74cbfa2d8a7d9a515a6244ecb37e36621bfe7a6e8c3720f265dabbf40e2755775a99cb5555661566d8ee6ae6c0703e1d50cde9b1d2c17c3d55987fae5af3a44afa8fde48519bf4f43f7ffe94824194d85c57e5e49d764d89af5b813891fe234edfffa8174bf9a36a8ca8349b7a060500084bfe54343e015731eedacb3f48138f1d09d24b4831c90375110a4bde41b336790acd466773587f6f49e1a5e016c166162c5db649ad7e73e5af86d1fd66ac3e168c2dee44bec941f8bfbe6a588d6538ba23f92aeabb1efcb9078645e470fa2ffb54776fa19c8e06ef5b76418dcae9f7ec2e81c1be99161dd4e55c27beb6d6e6d0bb575cb19ee89fb7a747992c8ef2d0c0ec81b99544d8c05bf36f07f23bca7c99f412ef93a6b2dea350ed14a2a9352b7954465207055c481b307e2e1e6a7ef2502c73c4c44acd2585275f6dab9c382a2cdb9ffbc77bfcda98d9dd48313751ad1d8c0aef88f77d9897850336394c3e2515e8cf6e809e5f46e737301af3a6aa12670047e8fa3030bdf67aed686f69f7adc1ca721c7e1e472597159d7327305d8ecfcccfed1eb7a51f7"}, 0x1008) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xfffffd7b, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000200)="609c04c1493112369382e7c61811347e0d787c3c32fd6b4e819b98987469aa146d1b39f460ddfbd84503bbf9cb038adefea3bfd8eab766a6fee937ab40b7ecb3bb7d638be7fa496b4e966955cce3c16d0120c01e272c75dcadd48d"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 314.261188] binder: 11157:11159 ioctl 5411 20000100 returned -22 01:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 314.339850] binder: BINDER_SET_CONTEXT_MGR already set 01:47:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000001600)=""/171, 0xab}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x3}, 0x40002020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 314.379026] QAT: Invalid ioctl [ 314.383365] binder: 11169:11174 ioctl 40046207 0 returned -16 01:47:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xc2c, 0x20000) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x30103, 0x0) r4 = dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x4, 0x1, 0x6, 0xa, 0x0, 0x4, 0x1, 0x119, 0x1}) seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0xff}, {0x10001, 0x9, 0x100000001, 0x7ff}]}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x0) [ 314.459446] binder: BINDER_SET_CONTEXT_MGR already set [ 314.505909] binder: 11177:11192 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 314.532355] binder: 11177:11183 ioctl 40046207 0 returned -16 [ 314.532523] binder: 11177:11190 unknown command 0 01:47:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xffff8000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 314.554354] binder: 11177:11190 ioctl c0306201 200001c0 returned -22 01:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='&lu '], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 314.581301] binder: 11177:11183 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 314.619929] binder: undelivered death notification, 0000000000000000 01:47:57 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0x5}) fcntl$getown(r0, 0x9) 01:47:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) rt_sigaction(0x33, &(0x7f0000000140)={&(0x7f00000000c0)="440f1b06c4e2e99c1b420f0f5e1e8ef20f2ad2c422752973998f6978d6f1c1835e000000f06743d9f6c463657ff900f044006dd2", {0xa2}, 0x90000001, &(0x7f0000000100)="c4c1f959aa078000006735feffffffc4a245905410eff364f344f6c70ac4e22900900374ddad4686eec4c2f9200ceb489846f70e530000000f955500"}, &(0x7f0000000280)={&(0x7f00000001c0)="c441216d05000000006546852841dbc00f4525000000000f72d2e0f2af652665460f381d8d0a7f00008f6968012cd6c402fd9f066546634ebc", {}, 0x0, &(0x7f0000000200)="4083e2a6c4c1f97f393e66400f3a0d3a4dc421e7d093e9530000c481f159a965566666c4a2791874c400c442853ecfc44271a81740d9e066450f1ba47802000000"}, 0x8, &(0x7f00000002c0)) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) socketpair(0x13, 0x807, 0x2, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000340)=0x1, 0x4) [ 314.725580] binder: BINDER_SET_CONTEXT_MGR already set 01:47:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 314.752155] binder: 11209:11212 ioctl 40046207 0 returned -16 [ 314.778111] binder: 11209:11212 unknown command 544566310 [ 314.804189] binder_thread_write: 3 callbacks suppressed [ 314.804199] binder: 11209:11223 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 314.822526] binder: 11209:11212 ioctl c0306201 2000dfd0 returned -22 01:47:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$inet6(0xa, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0xfff}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x90000) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x4, 0x3, "275e7edfc964cdf69db1e3e9d5a148e42fff3a38528d97708d740c2d7a6b87c2f591b597e3e7aebe6f9b"}, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 314.858291] binder: BINDER_SET_CONTEXT_MGR already set 01:47:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 01:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x80ffff00000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:57 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 314.880430] binder: 11209:11222 unknown command 544566310 [ 314.930097] binder: 11209:11233 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 314.930816] binder: 11209:11222 ioctl c0306201 2000dfd0 returned -22 [ 314.944498] binder: 11209:11212 ioctl 40046207 0 returned -16 [ 314.969256] binder: undelivered death notification, 0000000000000000 01:47:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x43e27129, 0x1, 0x2, 0x800, 0x1ff, 0x3ff}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:57 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 315.019705] binder: undelivered death notification, 0000000000000000 01:47:57 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:57 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="d26c730f9f0513c4f7dad48761f75700", 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000001c0)) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:57 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64=0x0], &(0x7f0000000600)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0, r0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) move_pages(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000100)=[0xcf, 0x7, 0x8], &(0x7f0000000140), 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sched_rr_get_interval(r2, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:47:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x100000000000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 315.181500] binder: BINDER_SET_CONTEXT_MGR already set 01:47:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 315.222334] binder: 11259:11262 ioctl 40046207 0 returned -16 [ 315.255593] binder: 11259:11276 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 315.279427] binder: BINDER_SET_CONTEXT_MGR already set [ 315.297892] binder: 11259:11280 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 315.305910] binder: 11259:11262 ioctl 40046207 0 returned -16 01:47:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x90000001ffffffe, &(0x7f0000000100)={0x2, 0x2, @rand_addr=0x66ac}, 0xffffffffffffff1b) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 315.345960] binder: undelivered death notification, 0000000000000000 01:47:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000100)) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@int=0x7, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0xfdfdffff00000000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 315.526693] binder: BINDER_SET_CONTEXT_MGR already set [ 315.544909] binder: 11299:11303 ioctl 40046207 0 returned -16 01:47:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000000c0)=""/154, 0x9a, 0x5, &(0x7f00000001c0)={r2, r3+30000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 01:47:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) getpgrp(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=r3) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 315.628763] binder: 11299:11310 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x7fffffffefff, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7f, 0x20000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:47:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x400000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000100)='K'}) 01:47:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000180)={0x9, 0x200, 0xff, 0x0, 0x0, [], [], [], 0x7, 0x1935}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r1, r0, 0xf, 0x3}, 0x10) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r5, r6, r7}, 0x85) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 01:47:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) syz_open_procfs$namespace(r3, &(0x7f0000000340)='ns/mnt\x00') bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r4, 0x6}, &(0x7f00000002c0)=0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000400)={r5, &(0x7f00000003c0)=""/19}) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)) 01:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x506000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 316.308572] binder: BINDER_SET_CONTEXT_MGR already set [ 316.311193] binder: 11299:11358 unknown command 536872576 [ 316.313972] binder: 11299:11303 ioctl 40046207 0 returned -16 [ 316.319629] binder: 11299:11358 ioctl c0306201 20008fd0 returned -22 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 316.405349] binder: BINDER_SET_CONTEXT_MGR already set [ 316.414664] binder: 11364:11373 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 316.421832] binder: 11364:11377 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 316.438715] binder: 11367:11375 ioctl 40046207 0 returned -16 01:47:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0x5e303289b8d2a05a, 0x3}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000100)="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", 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={r5, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000600)={0x2, 0x3ff, 0x7, 0x4000000000, 0x9, 0x1, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) fallocate(r2, 0x0, 0x1, 0x8) 01:47:59 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000004c0)='/dev/input/mouse#\x00', 0x20, 0x22b02ea5b5a366f6) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000680)={{0xfffffffffffffff8, 0x100000000}, 'port0\x00', 0x20, 0x40002, 0x20, 0x8, 0x9, 0x90, 0x7ff, 0x0, 0x2, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3ff) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x2000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="070102008000c0ffffb0f3a80118c12be28089bb7894e93203e60d03a814d84bad322575053b210d9453dc45bcf1251fe138c5e4718d10a6d60cb994723dd942998b538e365e155929b162bf3ba2a9aff426c9121329e102151ee221707d6337229202bcf70000000000000000000000"], &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x9, 0x3}, 0x8) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x9, 0x8, 0x7}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000600)={r6, 0x401, 0x30, 0x101, 0x2}, &(0x7f0000000640)=0x18) rt_sigaction(0xf, &(0x7f0000000300)={&(0x7f0000000100)="c4618857f1400f6701c4e1c9da4600c4e1796f650cf326460f84212e4defc44215168e9503dfe52e66430f1a022e266f67460febe241d38500000100", {0x3}, 0x40000000, &(0x7f00000002c0)="f247af26f346add3f83e40393bc483f9637bc32444d9f1468148004ce80000640f6a47e38b4d91c441bd7d870c000000"}, &(0x7f0000000440)={&(0x7f00000003c0)="8fa8008f00002e46d01966f3a72ef0418069890064660f3a22a6c2000000f73626400f73d6f6c46291abfc87e4470f0f78019466430f76c9", {}, 0x0, &(0x7f0000000400)="400f64bf0000000064815bfe5d9701cfd33ff3490f2db5e8914def44dcedc463697d52a684c4027dbb43f4c4a2dd06c8664c0f6eabd50ff2eb0fe336"}, 0x8, &(0x7f0000000480)) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x7f, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @local}, 0x26, 0x20, 0xfffffffffffffffe, 0xff, 0x401, &(0x7f0000000200)='yam0\x00', 0x0, 0xfff, 0x2}) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000740), &(0x7f0000000780)) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_ENTRY(r4, &(0x7f0000000880)={0x90, 0x0, 0x6, {0x3, 0x0, 0x1000, 0x10001, 0x1, 0x200, {0x3, 0xfffffffffffffffd, 0x10001, 0x3, 0x7ff, 0x0, 0x84bd, 0xffff, 0x100000000, 0x10001, 0x0, r7, r8, 0x4, 0x9}}}, 0x90) [ 316.479101] binder: 11367:11381 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 316.511170] binder: BINDER_SET_CONTEXT_MGR already set 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 316.536589] binder: 11367:11375 ioctl 40046207 0 returned -16 [ 316.565927] binder: 11367:11392 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 316.581123] binder: 11389:11393 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 316.599269] binder: 11389:11396 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 316.618636] binder: undelivered death notification, 0000000000000000 01:47:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xffffffffffffff99, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x730000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) 01:47:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0xffffffffffffffff, 0x435, &(0x7f0000000800)=""/251, 0xffffffffffffffff}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/enforce\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000001900)="0b252753450756d719e918dd7605f682c6557faa6b0e52de16c7f7e323aef6ab2972e1acc3db904155f64c647daa2f30bb691a8bdee748a20d52ac3aa638f10aad29b0e4edae8c7e8138985cfbaf373f760b0210e126244bcf9667f53294f6778b6cfcf1f529d7b0b7b59cdd87497d188c5e305d284fed0090751d86c6e474df2a33e42ea07c3f390755f3e07be8f8214f691d28174466d580e5f01362", 0x9d, 0x0, &(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = memfd_create(&(0x7f00000000c0)='(\x00', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000900)=""/4096, 0x1000, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in, 0x4e22, 0x56945256, 0x4e20, 0x8001, 0xa, 0xa0, 0x0, 0x3b, r4, r5}, {0x100, 0x9, 0xff, 0x3, 0x9, 0x2, 0x8, 0xffffffffffffffc1}, {0x8240000000000000, 0x3f, 0xfa, 0x800}, 0x10001, 0x6e6bbc, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d3, 0x33}, 0xa, @in6=@mcast2, 0x3503, 0x4, 0x1, 0x4, 0x1, 0x7, 0x101}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/122) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000100)) write$input_event(r3, &(0x7f0000000080)={{}, 0x5, 0x1ff, 0x800}, 0x18) geteuid() 01:47:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 316.789008] binder: 11405:11411 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 316.798140] binder: 11405:11416 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 316.814736] binder: undelivered death notification, 0000000000000000 [ 316.843736] binder: BINDER_SET_CONTEXT_MGR already set 01:47:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x6, 0x1ff}]}, 0xc, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0xffffffff, 0x0, 0x10003, 0x36ce}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000140)={r3, 0x7}) [ 316.872128] binder: 11414:11422 ioctl 40046207 0 returned -16 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) 01:47:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101082, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x100000000000000, 0x2, 0x28, &(0x7f0000ffa000/0x3000)=nil, 0xc15}) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:59 executing program 5: r0 = memfd_create(&(0x7f0000000300)='*\x00', 0x2) bind$vsock_dgram(r0, &(0x7f00000007c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x203, 0x200) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251, 0x0, 0x0, [], 0x0, 0xfffffffffffffffd}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e20, 0x5788, @mcast2, 0x7f}}, [0x400, 0x0, 0x100000001, 0x8, 0x8, 0x101, 0x0, 0xd3, 0x43, 0x454acec2, 0x7f, 0x8, 0x379, 0x10001, 0x10001]}, &(0x7f0000000800)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000980)={0x9, 0x200, 0x1ff, 0x3, r2}, 0x10) socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400600) r4 = openat$rfkill(0xffffffffffffff9c, 0xffffffffffffffff, 0x8002, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000080)={0x2, 0x1f}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000840)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r4, r4, 0xb, 0x3}, 0x10) r6 = geteuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) tee(r3, r5, 0x4, 0x8) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x8001) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8001, 0x0, &(0x7f0000000200), 0x20, &(0x7f0000000600)={[{@nobarrier='nobarrier'}], [{@fsuuid={'fsuuid', 0x3d, {[0x77, 0x36, 0x30, 0x3f, 0x66, 0x77, 0x0, 0x33], 0x2d, [0x77, 0x7f, 0x7b, 0x65], 0x2d, [0x35, 0x37, 0x65, 0x77], 0x2d, [0x62, 0x77, 0x62, 0x31], 0x2d, [0x0, 0x34, 0x36, 0x75, 0x77, 0x36, 0x38, 0x77]}}}, {@appraise_type='appraise_type=imasig'}, {@uid_lt={'uid<', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x67, 0x66, 0x34, 0x77, 0x63, 0x7d, 0x66], 0x2d, [0x77, 0x77, 0x31, 0x36], 0x2d, [0x63, 0x36, 0x31, 0x3f], 0x2d, [0x77, 0x73, 0x31, 0x7b], 0x2d, [0x39, 0x73, 0x30, 0x77, 0x7f, 0xfdfd8524d115158b, 0x7f, 0x65]}}}, {@smackfsdef={'smackfsdef', 0x3d, '-:%'}}, {@obj_user={'obj_user', 0x3d, '/dev/usbmon#\x00'}}, {@fowner_lt={'fowner<', r7}}]}) 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 316.945415] binder: 11423:11432 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 316.960594] binder: undelivered death notification, 0000000000000000 [ 316.968331] binder: 11423:11436 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x930000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 317.035526] binder: BINDER_SET_CONTEXT_MGR already set [ 317.063509] binder: 11439:11442 ioctl 40046207 0 returned -16 [ 317.087655] binder: 11439:11454 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 317.095969] binder: 11439:11451 ioctl c0206434 20000100 returned -22 01:47:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 317.110116] binder: undelivered death notification, 0000000000000000 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 317.139289] binder: 11439:11442 ioctl 40106437 20000140 returned -22 [ 317.180013] binder: BINDER_SET_CONTEXT_MGR already set 01:47:59 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7b7, 0x80000) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000005c0)=""/4096, &(0x7f00000002c0)=0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x354d) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=r3) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x1, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="c70000000700000003000000259b942f50d5f50753a558cccf7409dd97224221d56eaf91c423a96438fd1d2dd0d148d064e34b35bb9be95e476681e05ecde8a81140fd12c9230eb166959d0d6686e3de0d2fadcc3f010070d897a5df9bd3c630be58493d5ab4130000d46adfdd95308375d6082445ef7b40b6d9afa367a6f26263d2067d0f3be326db875b9bdae03113621c7b94c6382e3c5735f48ff190c0c2757cbd2def7ae578ed70e0625266ef4364a0c078808f73e726db8e78457f79b1feac87bb4ce416a0ade48d1f69fb7654f7613e"]) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:47:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x20000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 317.210777] binder: 11439:11442 ioctl 40046207 0 returned -16 [ 317.211597] binder: 11439:11451 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 317.235368] binder: 11439:11467 ioctl c0206434 20000100 returned -22 01:48:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) socketpair(0xf, 0x0, 0x401, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000002c0)={0x7, 0xafc, &(0x7f0000000140)="71bd1ac21703ef02835390d4c7a6903182c5cdaa38af4afe20b500e4a8ccde21e53eb7298ae851ae2bebd5885a1762f417b5011750ae1b7f2a", &(0x7f00000001c0)="4f5b897a750315d9dfb9b06884369218563ccfd18b9cd0983f9f5b65578d323724095e8bc16051e5e395042456faf90808f063d8353145e0055f20eb51887a91f81460405dc60eb28caa237ade83bf78b2742d7783c2c068894607d735ec37a52b7bb60d84cb31e520b487dac302e0994ed532d5035607f7a6bfb21b8ae8f1afcf824a5d2d5567e9f9c2f262f339201379359b4c66da3711a9e764d60e92021e42fb744a212851f81160511dc15d0b9a87af35ad0f2d5770da615e046808d4ec4d9dd08197a199365d72f158da1f09b106c5a3d1dc3196047a7daaedecbafed18c", 0x39, 0xe1}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7fffffff, 0x101) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10010, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x4, 0x0, 0x8001, 0x2, r1, 0x4}, 0x2c) pause() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x208000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x23, @mcast2, 0x1}}, 0x2, 0xffffffffffffdb25}, 0x90) [ 317.299248] binder: 11439:11451 ioctl c0306201 200005c0 returned -14 01:48:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'ip6tnl0\x00', 0x80000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r1, 0x0, 0x40, 0xffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 317.430830] binder: BINDER_SET_CONTEXT_MGR already set [ 317.448965] binder: 11487:11491 ioctl 40046207 0 returned -16 01:48:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 317.491516] binder: 11487:11491 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 317.501824] binder: BINDER_SET_CONTEXT_MGR already set [ 317.516999] binder: 11502:11502 ioctl 40046207 0 returned -16 01:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="343afb9c78abd157f9c07d200ac8d60feff39d0cd0dd3127e234923888fc1b2971372592b351a4ad21683ed9dde1b7c3175223dd3c91a39b7556af0bdc29f23a909f25a6b427889101fb75cd9aad74d5a15b62fbc5b63441392f7ca3d955ee34cd395ba2fa156af88c1d7910cf724c83ee6a38436ae7f070ff1d9651def700000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630c46000000000000000000000000195fed5077b77505f82c26eee494bdecaa147b9e8b64b44f1d5910269de94533b54a3e5855774c6d1a756316e5b450319a4062c5aa5babc7c42c66caf99b3e9291346574c63c40fde7b0b2562b99c5c5f6ae1133c3e711745b36fff813075223cec648961945d969b26575036e8914e2e7d228f44a5fd27e44a1c4da9611aeea7173d2cf552c08089e04a6bd5c71443bf48d73019cd112532a09f4a703382211ba"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0x9, 0x3}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200), 0x4) [ 317.571493] binder: undelivered death notification, 0000000000000000 01:48:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='v', 0x1, 0x20000080, 0x0, 0x0) 01:48:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x7f933887b000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 317.665834] binder: undelivered death notification, 0000000000000000 [ 317.725307] binder: 11517:11522 unknown command -1661257164 [ 317.731085] binder: 11517:11522 ioctl c0306201 20008fd0 returned -22 [ 317.742270] binder: 11517:11530 unknown command 1175216911 [ 317.775404] binder: 11517:11530 ioctl c0306201 20000040 returned -22 [ 317.800745] binder: 11517:11530 ioctl 4b4d 200000c0 returned -22 [ 317.808086] binder: 11517:11530 ioctl 1263 20000240 returned -22 01:48:00 executing program 2: syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="4872f3cf645d94cd259aeae6889b022b2c0c4a88eccb58f1b53915b350b62cb2d6cbee2e4acf787c2056e0eb559a2811c2ae271163d59f0b166b09c6ad138bd7f1188abc4ffe71ac59673d04a8a461d81237c94134dab24a67a49869342d62cb49c3f8e4eeb3e5071c718a46d1", 0x6d, 0x972}], 0x8000, &(0x7f0000000240)='\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 317.829158] binder: undelivered death notification, 0000000000000000 [ 317.851528] binder: BINDER_SET_CONTEXT_MGR already set [ 317.856206] binder: 11533:11544 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 317.868312] binder: 11530:11530 ioctl 40046207 0 returned -16 [ 317.882682] binder: 11517:11545 unknown command -1661257164 [ 317.913227] binder: 11517:11545 ioctl c0306201 20008fd0 returned -22 [ 317.925715] binder: 11517:11528 unknown command 1175216911 [ 317.931562] binder: 11517:11528 ioctl c0306201 20000040 returned -22 [ 317.941713] binder: 11517:11528 ioctl 4b4d 200000c0 returned -22 [ 317.951386] binder: 11517:11528 ioctl 1263 20000240 returned -22 01:48:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r0, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e002, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setrlimit(0x0, &(0x7f0000000100)={0x9, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6420b3e49d8f1b11399806db69cd2e0a56b4cc15a0d700204c81efe9b08835b8160e18c3a41fa218cf2e4a813e9103"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r2 = getpgid(0x0) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/unix\x00') kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000100)={r4, r0, 0x8}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 318.328860] binder: undelivered death notification, 0000000000000000 [ 318.346989] binder: BINDER_SET_CONTEXT_MGR already set 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e22, @remote}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x5) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000280)=""/14, &(0x7f00000002c0)=0xe) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x4e21, @local}}}, 0x88) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), 0x4) r3 = fanotify_init(0x2, 0x400) fcntl$addseals(r3, 0x409, 0xb) 01:48:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r3, 0xf}}, 0x10) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 318.372839] binder: 11559:11568 ioctl 40046207 0 returned -16 [ 318.400445] binder: 11559:11568 unknown command -458022812 [ 318.414518] binder: 11559:11568 ioctl c0306201 20012000 returned -22 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 318.499846] binder: 11580:11585 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="f6", 0x1, 0x4008854, 0x0, 0x0) 01:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2002, &(0x7f0000000000/0x2000)=nil}) 01:48:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(0xfffffffffffffffe, &(0x7f00000006c0), &(0x7f0000000700)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x5, r2}, {0x2, 0x3, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r6}, {0x2, 0x3, r7}, {0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x6, r9}, {0x8, 0x1, r10}], {0x10, 0x1}, {0x20, 0x5}}, 0x6c, 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r11, 0xc008551a, &(0x7f00000000c0)={0x1, 0x10, [0x5, 0x8000, 0xfffffffffffffff7, 0x100]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000a80)) [ 318.587219] binder: 11588:11593 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 318.669400] binder: 11595:11603 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 318.696403] binder: 11598:11608 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockname$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x200, 0x1, 0x3, 0x8000, 0xffffffff80000000, 0xff, 0x1, 0x2, 0x1, 0xfffffffffffffff8, 0x0, 0x3}, {0xffff, 0x6, 0x1, 0x10000, 0x7, 0xfffffffffffffff9, 0x50000000000000, 0x3, 0x200, 0x10001, 0x2, 0xba, 0x4}, {0xbb, 0x7, 0x2, 0x4e2704be, 0xffffffff, 0x1000, 0x8, 0x8001, 0x8, 0x6, 0x7, 0x600000000, 0x80000001}], 0x82}) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440000000e7e9167c53ef9b59b47d7cb92e00"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@nfc={0x27, 0x0, 0x2, 0x7}, {&(0x7f0000000280)=""/164, 0xa4}, &(0x7f0000000340), 0x61}, 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) timer_create(0x1, &(0x7f0000000580)={0x0, 0x5, 0x2, @thr={&(0x7f0000000600)="fe310a385f256d616fccb44d06cac4bdce880588e63277f200ebabaffb245d3d92b93ca8ff61a7e82de046ba703414293a3ddc3e9e74ebe75229e8c93f2ce24936379ef8866269b123e882764f3c9d83375fbd6a1a46810191e753c3bcbe83db6316e86fbab502a9657ae8bb2e604b139fb6b21adbd72c7876ab461963c1e98d4081297842fd3f3a9c9e8557ae172b4993c966964beb9582b3a026785398fa7e7f3394a028ccbccc59c3ac1f8e2e6fa2e2730da6b7805d9e077c39a9232cb8e59dc134e7b265b7c398ad66e2674b29b6", &(0x7f0000000440)="da09e1cce72871eb29b60bb4640af34547391b7f7bcf9712f2471072240d9bd2fdf6dfa60ac5bc72bd91aabce8ce7b4d52217eaa6b7be7b19f01dc9d4e96b5664c728fa2103bc4bbaf6271c250da4899d4fb33b5665d380cd7fc3768c82483293cc595b285dfca378edf3177b24c707a1e263430cf5c3b5eb5029ace698cab6a5d9bee35f7d3dfbae6c745cd"}}, &(0x7f0000000700)=0x0) timer_settime(r3, 0x1, &(0x7f0000000740)={{0x77359400}}, &(0x7f0000000780)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 4: lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "069a520b571fb04e0e2f318749282a452831293d"}, 0x15, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = syz_open_dev$mouse(&(0x7f0000000800)='/dev/input/mouse#\x00', 0x7d, 0x2000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000840)={0x1, 'gre0\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 319.125662] binder: BINDER_SET_CONTEXT_MGR already set [ 319.127224] binder: 11559:11621 unknown command -458022812 [ 319.131003] binder: 11559:11568 ioctl 40046207 0 returned -16 [ 319.131405] binder: 11559:11568 unknown command 536872576 [ 319.137711] binder: 11559:11621 ioctl c0306201 20012000 returned -22 [ 319.144356] binder: 11559:11568 ioctl c0306201 20008fd0 returned -22 [ 319.148383] binder_thread_write: 10 callbacks suppressed [ 319.148397] binder: 11559:11624 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20018017) r2 = memfd_create(&(0x7f00000002c0)='ip6gretap0\x00', 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1000, 0xfffffffffffffff8, 0x5, 0x3f, 0x20, 0xffffffbfffffffe1, 0x2, 0x1, 0x9, 0x4, 0x1}, 0xb) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) socketpair$inet(0x2, 0x0, 0x101, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000480)={0x2, 0x4, 0x824, 0x1}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x4}, 0x8) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$TIOCCONS(r2, 0x541d) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'ip6gretap0\x00', {0x2, 0x4e20}}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) [ 319.234358] binder: 11625:11634 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.248378] binder: 11626:11638 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) socketpair(0x10, 0x80000, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="22b85bd3a05206211937466f961c5cf14499e6a1bc39a6b76652704af66d26b32c4faf237788d66cfb4caf7f93", 0x2d}, {&(0x7f0000000140)="6fe326f419f17bab437baff8719bc9a568b750c12281e369f0c0cb4490517378a68d41741bcd1ae5c99102c451288367a87d6208e4cb46229aa03789db3aeb755c2a8404addef3a58f31bace", 0x4c}, {&(0x7f00000001c0)="919e69a43b5d4b4c288f8aa27a33186b2f29714d3fa0b7a107045429f0fddffde898e3f9d19209c9c426ae93b641044488d9db305b045884a6eaa6cb55af317c7f7d29dc26abc9328fbf1273604583d8679b75c202bf4ac80608", 0x5a}, {&(0x7f0000000240)="b227e490e03c4257d8f0963ee7b53f6cbd81", 0x12}, {&(0x7f0000000600)="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", 0x1000}], 0x5, 0x0, 0x0, 0x1}, 0x20044000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 319.293850] binder: BINDER_SET_CONTEXT_MGR already set [ 319.339499] binder: 11635:11640 ioctl 40046207 0 returned -16 [ 319.350899] binder: 11635:11650 Acquire 1 refcount change on invalid ref -419430400 ret -22 [ 319.357706] binder: 11635:11652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 319.379712] binder: 11645:11655 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 319.397453] binder: 11635:11640 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.407276] binder: 11651:11657 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300008bb4c9ac0303ec75d6c6cfbbe4154503dc675e78b26159e30c1f48e00f9b144e983cd3c97d63ab0b9e765def4431296b366cb0cbb7"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x12b, 0x0, &(0x7f0000000240)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xc565, 0x0, 0x6, 0x401}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001040)={r3, 0x1000, "9393f92f8b4b73fbe3e059deabc5770970130c95084d688fec61688d25ed3cf26a65235776eaaccf844cedec2a710e32615418c92bc26059e1bbcaf94ddbf19c1fee468a2e7d6c8d15fc349d0bfd785e8e8c151159ed90b7d6dd3206fae1484af943d62dd8c7ed7c22f82c7f8416875b09c66c16adf8bfdb412fd6257b759f6044c0a86b8c3961c1de1712c701610d2f36a54e2291b98c50d5d65a1ed638b19ab0a54bcd8f33c06e937f46e6574287a53d6231c855556378713624e6f3130a5889cb65be99f39ad25936bb9a689418f402d37eb0db9767140cca84fa90d9ce4401781f5dede2091945c45eb17b3e309112bec59dbc8da4028201e4565925198c697f378f3273dcdde407655bae256a32e6a06af666f313987e0d1c1f735e4b57d3a7a1ebc67f00b4ff677f8fc256bd982ec81b25f24553387befa988db5f69e1111c3bdf0ef9a8ec3176f857dcfb82d9e6535534c197a8103df446522ce78d44b0b3604f4fae9d16e2c58e345b9a22c6a3118ddd8f71149b7188c034dc938f5afd83b591f3cf7abd3a2036301486ad3ae31330a2fdb6387486c16d0d96fa75b189199ef0a0aad9b76900fa10eeaa86ae577abb282dcbd38e22d0061d3416aec8baa5f8fd3e9dcd2cb84bc60403a0b6a487a2bfa4a0db9d1d43f86c5fdb3d0711239637c89a48fa31c874205f0d240d3ae6abdb9a38bdb455787ab6e97488ce2ce072c8f14a2ca54e4b5e132a78893cf9c8720d76c4fad8cd5145537af8d3902bbe4f6b90396d650b1f82bf4fe3f2a350ba9fe9c70c114a77c08f651354d880cabecaa80b7b5d12eed05fb92c912b042c6a3dddec6a1195167d91f2685bb1a8166cdf82e08034938cf096d2f118a4f1fd58bc48699db73d8a774b53b422978d8d2cc76804c73b4199e75e75eaa5eac5f1af154ce15353295b79051a840b0622cc28299e5f1f6a434d71ba5f780a0e59033e9f2bf7de3162af959b07f5f237f480f12da794ef1a48f5874f4f8a33bc72b78f26bba5f5fe780f5b8e704279a300fb64300e4cdd029d7b3456bf6ec1e96c3db671b8c9822798cf082392f798bebebddf31796bcdf82b47d5be600e2cfc2d0c8f113b1d46ada517857045073d82e2c5c52d30a7695fcc31040ce0bb0f10c792ff3c004628a18272d5a47d5028b236a5c8dafcd6a9162b903c1e40e1528569938983686499205f94efb4b51351aab76daba1cc105f47ee7a1de3eca08dc6e38fb6d6d5e9d494cd11990cb5464f63fcc4a4faa70fe99d6b3df1f7db150ae02fbb5647ec5a491b74bc8991e7504a0fccd60deaf45bdafc405ad1725cf67f8ddf08207d5e5ff6c87a8142b70c8c60975309b69fee7aa67b47447524d0628f14fd98917f0b370504b5b97e48842c1ec2166f3b45b7af756fbcb33092be85c826dde30e94d20b031676233da1645669369bf657556258735bdf01d0023381a11f6c16389b5aa637a0874e18dcdc9524dac5e7b2870f79bb14da5d624c7449a8f4266a6785d1d183067c102a716cbbf91621eb2836059b8e22d24be6f6048a7435ec1c51a47435945e6ca40af307b56921b14a065275b2913f6fabf303df2e9c8ea47fdfb917910a38153fc0715ee5741df2a2de21660f56399fed94595c9938f3b3b6648ec1b42133152ccc560b2fed8baaed85fe5368b85b0a441b42bd787c4e3b3614ebd75f6c6f12bdebc3dab7a728a44ce8a35dde948a546b1815a825315195abc6ff088c32e405bf90c8d8f3f91ca22a5ffa83d373469e9d17f3332a17e3b4c68588260b029ecb35b84a16c98beaf3050dacf4f1754764e7dd9d1a6e64c23ada95824d4089d50b759dd8f725b9969f5e44df2f4ac17f960f9e68670f519791540e6e2c0478332436ebd38eedeca9f08b9a75d1afd32082b066eadf2da56654d85ce0ff87c227f2da6e79ee9c4932f3cc4eca10412dc0a541636a0133b1972e405b4170bb603656f51c380b1db17e5469ad106180f0d66a194ba02d6df53caff1dfdf678eb1d9ac759111a9844c6f987c9061656bca4cc3514a0c385eb4571e3471ed62ed8918eff9f9d1560f2333bce7d8e1fb36a75bea30a1d864677e8bb75a23be8c3273619bee77ce5cf8882d163aa66d0ef1299e21f7b76bdee3d329d8f8714c55cceee702272efe447d39e4bac1b17ae3000743f89ca7144095576bf313826c0bebbaf0c9a79fea2a7a06b8ccf17984fdf3bbd11a80996e3b873ab72f31dd4f16354f77381457229485d26807cd9ac61da17434e754c8a9585613c98cfe206c81d5c64a44c052ca404864405cab2dbe3973e2a129c3dda2fb90bbb5492b68a97147e2b50ebd1d3f00260d767fe0c76abb2bd03a93b9419082b311d8e8bcee7ee2e4876de6948ab75c27831727d828e47af6b18324926c959c1dba388be9200596f9c937f1cd4452c2a17f66a12586e79ff32cf8c4e2fdd8fff29ec8b39ca1f072056fbc9aaba1ffbdd885702d967c8acde36c134e3047d46794eb3ce37ac867222f253ecaee4ec29bcc6e7e175df6c5b50e28f82c1d6aec77c0cc741bceac88da50701a00e46082cce8bdfbb7dbb7e04ba0750e5be1bc470f5bcc9b6392f0821030d7c190aa49726134a4dde18f2c60228a7bed1450088a4cac68862e8c55c0d12040406aa09ede72e44107cf9aaa145ef71d2a32225e6c39a50b9e1af22e7affc348ed16c69bd5c8b4265b148d0b98f432c778c4ac25844e51bd9fcb8d4ef46f335ff4707e8cd07e6e5c01638232c02eb6040a1d4d7e6ae5018dd8f083b8286c3c1da35e920c5b32e550ad05dab43147c4ba6f78543845867339ada6fd66f6a3ff2983eee01b09f5b171f23260ad027063dbd9d6e64bcf6cb31434610d75e3197fbd1889e042f058b30383b874dc2ed3ed7ce89015fb86214f238db2894a59b23e2717f226efc0fb9bf4895cf3afa7bf81ab5b4aa1bdc5e94a737455da9a4312be0110fcd3af183f9888e2d50a00fe7439cff9b847162755355e7cd553dc812d11727e15434f4c0885902248e00638c1d96338dd11b5df73ca4f341a5107b6ff18e7e6d1d10c88e7405dd78f94762b6ebb94626eb034d65c026b568cf1dc22cd43aaff8d1cceba0921bac46c65546b96e46746493827e4279238e90083efb396f40149cb7017beb24942ea841e42f29b4ede46673c3507ebed9b99d96d8425782979c82c9693386b94eab88e6e6821217339bd3d30719dbc078a5aaf20df90e6f8d0c26d609ea8f6f0cb3c0c8af1efdaca03e1abf575de0e13ec8f6dd97972279d246db6d467bd28a0b5c5b23870ea4cdf37ebf9f0feeeb39a64a825fde422ad2e3d4506eca17a9d6ebaa10ad26468277ed1504144a717ad2ad46c5d9e72222e997899e7070ab1f4c3b375d9cb189190550a9f9c7f2fc70dd4faabf1f468e08832f3641d3d9381c731c50710d1325256742743c88e191ce3b3dcc1698017865c467c250db722960b01e04ce5b852ffac4931be5095a61b6672a8e951c126268bd625d1e6e7179ac968990784ab984dabb31f346b29dc5164bde85ddcb29942b6e33cf50d0211fdbb1248af27e506785740a23e75521ae28a2933b546dc62d8558068aa3bc900ef0c1909eddde1e10e47eb03ee0feccb83aa84c8bbc0c5b25e2bf86e6174b751a7c45fc1f16a210ac037e10c9cc2ef19ed31614e5cc3182f13e9766325cb15f9f4a0258d9608d30055858808132c52bb0d2eb2a31cae7fb57ee7e4975a30833500cab1ae8ce139cc450faa8208afe28d2b01175165fe2425cbd0b76dfdc58b402b63025d569fa09c2762338d3e06da027dcc3aa61be2aa1545105885231677a758b46c96b1cb697f8bc02b3f356d23df77cb697db59fc13a80111ec746019fe2aea0f695f0c957fae7ffee0f02e39bc68b65199cb3598b6197669299f00678b1c491c29477f152de07fd4b46aba542d96d002768d4a10407d3bb02402f5a440c240444eea01a9a47f9bdbcc7b1e263ae278144030971cc9577024934ce5e27ab7dccec6e4dda03b84dad0a3fd59da9bf3c9560f99a5fee4683eab0aa3932562885811b19ddca2b3a50872333a0553cb2b6fb2a803cb6e864e64d564b7674cafab1fdf9eeb0a6a06f9048eac54250a6624313b7411c655bacf4e2331839dc16a0b5ccb7dd039e6f0e71ab07a267edc47af3c5c7aa835484c249569f79942aa755a0ec87dbb0ed47123cc4e2a9c668be8e548389d9f4503d8bad2538c4273c78d4d33b7fdf5781b853cad51bbd64c63166ef829aa286e43138831af3522d40771d8dbc2b20ad858cddb80b8dd6627e1f9495776d83fef808d93a4e7a705462c8d9e56fe0734e8df404b41cedc090c4005f7297ac2d3f6241c1d3cfe28eae98f9fe77901b4c87b4091a402a217da0f73b790f3bb5494bff73456e31e9ff4cd7afa67a4ede10207f65679ec38cee208b4d38b2afb5d160b92d048fd1efcd6e6a562cbecf05185d1d98f6abd250455b623f4da435c6b5ae7659fe9a88b64c3afaa14e26a3d4a9ac3d6f1ce3d6efd0da28f604d1161b13a11ccd82f8e80e2d6e7ce7b81a19525db35655d947d25eb3a5e6e6b483538fa48a30a3c5f9215b3dd9499dbe59063215ba2d1c839b58a841740ac9a4d6eb8ce4de7ca6832382421983ef065ccaf2e0f1422681599ab6a832580742f5eac8624603589ad1ee1191b0ecd9257849010e1f4f67779499658dafde77423fa44eec951310c77415d2e434c230a7afff692c9cf7975c29c1c1dfe472495f8463912dcfa61316a180d3c4128318a9ff0ad1d02c3b9edd7a43b97794a58fb11ca7a2b7b3b224873923a003bb486497713df79d56ecfb0126c14c99a0b0d2197dad03d30f8a2ab30ff9f4071fa3830dbd1a91a4138fb22ea6aba5c78be9e4b9dde3879c6f089b84f2069381280330507c86ed30f8decc561e0a1b1baf83ab2e9db445998e149cbb3b269e1ed5276fe098b27d41404b2a9f340ee4e79e8d80ace1d210484e7b16da1166cf71e11e8aaa7f718dc98f834d8a182e2b24a9064769fa21919c6345c6e8cbb03a303c5d005de3e171a413344b6ad795d1ba5819ab687afcd2da026f8cf325bad22ab5ec564c167b232e4416cb63924a319048faf39797329a0bb28128cfe043b4140c24ea67ed418eb2da5432f1cfad0da92691a3ad3e777855ce25447718c8bd2accf76d68968c87150540a6283b561061938049c40a08e925dcb82dbcd4f6a4db4739aad0910ec94f5bc49345f4391b72a716dffc1df8cfdbf01302f79dd795a51463988a342cc298bcef6e0223b69382a1b35069032b3cbe91b20bd1e5eff9e98a19d9d7ec6dba5df6acac93660e77e3793767bd85ce7833f0b6a4293abcc43021982fced384a7b9f48cea32bde7559f4b0a148f7c968da16aab50d083003d589326edff841374ef50ba9a9f309d0fedd52244b4e03671162e43d81164f8f10e93a2b76ac2812ee895308c108e7e62139ec0b6fb230107080cc1bd4e86148d4a133800506189128b4ed902826996ebe76d1467df51b5a3d5b532ef04e0e03ebe9600b71bf7408697a4369cd8107d566d09443aad0ce5781c2815081a3e0e3b4424c327f8c47335861c7315567d96d5884d91992f34223b98f66eda35c5c8fe2ef6bfc0df07efc9fc168ef17d3a574f2a4aa315b532d6e3754ae177a725c3b94fcb064bc2a6fbc992aa8cb3329331899a995d325785f040c9e72160bc8c5b159687fc4524d816738cc2a2e44ad5df84501a05510cb25a2117c28f11dd3951697ea37c5b911569c6857f37026e"}, &(0x7f00000001c0)=0x1008) 01:48:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_unlink(&(0x7f00000000c0)="fb00") bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5473, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000140)=[0x8, 0x8]) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) [ 319.448640] audit: type=1400 audit(1539827282.140:68): avc: denied { create } for pid=11653 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 01:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000240)={0x6, 0x6, 0x4, 0xfffffffffffffff8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 319.553251] binder: BINDER_SET_CONTEXT_MGR already set [ 319.563500] binder: 11668:11672 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 319.573135] binder: 11668:11676 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.592620] binder: 11670:11671 ioctl 40046207 0 returned -16 01:48:02 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xa002, 0x0) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x5}, 0x2}}, 0x18) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000200)=0xed01) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000500)=""/251, 0x3, 0x0, [], r1}, 0x48) r2 = socket$kcm(0xa, 0x100000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}) 01:48:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x3e, 0x800) ioctl$int_in(r0, 0x5473, &(0x7f0000000240)=0x100000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2000b) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000140)={@ipv4}, &(0x7f00000001c0)=0x14) sendto$inet(r1, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 319.592958] binder: 11663:11673 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 319.600315] binder: 11670:11679 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:48:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 319.673449] binder: 11670:11671 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:02 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getpeername$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r0, &(0x7f00000000c0)="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", 0xfb, 0x1, &(0x7f0000000240)={0x11, 0x6, r1, 0x1, 0x279, 0x6, @broadcast}, 0x14) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 01:48:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 319.764371] binder: 11689:11695 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 319.779835] binder: 11689:11697 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) exit_group(0x3) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x0, 0x29, 0x401, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 319.860815] binder: 11696:11704 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 320.025619] binder: undelivered death notification, 0000000000000000 01:48:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000100)=0xff) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x480000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0xbb730d8ef597a896, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x8000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r4, 0x6, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 320.316799] binder: BINDER_SET_CONTEXT_MGR already set [ 320.322153] binder: 11679:11679 ioctl 40046207 0 returned -16 [ 320.322775] binder_thread_write: 7 callbacks suppressed [ 320.322787] binder: 11670:11728 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 320.424366] binder: undelivered death notification, 0000000000000000 [ 320.425698] binder: BINDER_SET_CONTEXT_MGR already set [ 320.472766] binder: 11736:11740 ioctl 40046207 0 returned -16 [ 320.494704] binder: 11736:11750 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200002, 0x0) write$P9_RREAD(r3, &(0x7f00000000c0)={0xb9, 0x75, 0x2, {0xae, "6f73e022bd9adef19747eb6c34ada00392459fa3ee2a78b1c6a91f37a7a6cfe21aade290959435377a19ac709977d21d8e71c3055564a35cc7f0a57e2474e790493f380e5004e7d24597382bc6042e4b9b4af3f5468b24237c733e4d994e85f68cfa440ef3d247fe7f8a2cd87d351da02ec30d6343d21fd556fc32060e9f107b772dfab431b03e176d4757ead676c3077b92e6adfd9a27523da8b725bb25ee19820ba112632ac22b4d9a22ccc040"}}, 0xb9) dup2(r3, r0) [ 320.521908] binder: BINDER_SET_CONTEXT_MGR already set 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80800, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x2]}, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x10001, 0x2, 0x2, 0x4, 0x401, 0x1000}, &(0x7f0000000140)=0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000080)) [ 320.566440] binder: 11736:11740 ioctl 40046207 0 returned -16 [ 320.585930] binder: 11736:11757 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) lseek(r1, 0x0, 0x4) 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x8, 0x8, &(0x7f0000000080)=""/159, &(0x7f0000000140)=0x9f) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 320.851321] binder: BINDER_SET_CONTEXT_MGR already set 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x40000000140000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000100)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x240, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xad6, 0x480040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 320.887094] binder: 11779:11786 ioctl 40046207 0 returned -16 [ 320.909700] binder: 11779:11794 unknown command 0 01:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 320.940893] binder: 11779:11786 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 320.947149] binder: 11779:11794 ioctl c0306201 20008fd0 returned -22 [ 320.970524] binder: 11779:11795 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000040000"], &(0x7f0000000100)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xe23) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 321.049260] binder: BINDER_SET_CONTEXT_MGR already set [ 321.055508] binder: 11779:11786 ioctl 40046207 0 returned -16 [ 321.076026] binder: 11779:11813 unknown command 0 [ 321.076057] binder: 11779:11813 ioctl c0306201 20008fd0 returned -22 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 321.122135] binder: 11779:11794 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 321.137781] binder: 11779:11822 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000200)=0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000240)=0x401, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r5, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_dump={0x40}}) close(r6) close(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) r7 = getpgrp(0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r7, r8, r9}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r3, 0x7, &(0x7f0000000100)=0x7de) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x101, 0x4000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f00000000c0)={r1}) 01:48:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 321.329415] binder: BINDER_SET_CONTEXT_MGR already set 01:48:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101040, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000100)={0x1, r0}) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) [ 321.361858] binder: 11836:11844 ioctl 40046207 0 returned -16 01:48:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 321.517670] binder: 11836:11844 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 322.119186] binder: BINDER_SET_CONTEXT_MGR already set [ 322.121002] binder: 11836:11882 ioctl c0306201 20012000 returned -14 [ 322.125584] binder: 11836:11849 ioctl 40046207 0 returned -16 01:48:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) setsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f0000000140)="4aa01b5b428728e8fe7dc3155bc432b8162f3b28703746c8641cc7c57bcac6c0b1e7290b0d5e3bdbae6eb3bae284d8fa51", 0x31) write$FUSE_OPEN(r2, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x4, {0x0, 0x6}}, 0x20) 01:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getflags(r2, 0x40b) 01:48:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:05 executing program 5: getpeername$packet(0xffffffffffffff9c, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8000000000000, 0x2, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfb, &(0x7f00000001c0)=""/251, 0x0, 0x0, [], r0}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)={0x7}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xf, 0x800, 0x80000000) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000140)) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r1, 0x800000005452, &(0x7f0000000100)=0x3ff) socketpair(0x1, 0x4, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x8b) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x1) 01:48:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 322.300972] binder: BINDER_SET_CONTEXT_MGR already set [ 322.331054] binder: 11897:11899 ioctl 40046207 0 returned -16 01:48:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 322.404922] binder: 11897:11899 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioperm(0xcf0, 0x7, 0x0) [ 323.078865] binder: BINDER_SET_CONTEXT_MGR already set [ 323.084282] binder: 11897:11907 ioctl 40046207 0 returned -16 [ 323.084985] binder: 11897:11937 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x40}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0xd7, 0x3}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000300)={0x0, 0xf52e, 0xb2a}, 0x8) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = dup(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0xe4ce, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r6, 0x5}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1f}, 0x10001}, r7}}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:05 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) bind$can_raw(r2, &(0x7f0000000340)={0x1d, r3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x38e3781, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x8, 0x0, {0xffffffffffffffff, 0x2, 0x1, 0x3, 0xffffffffffff8000}}) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x8) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0xffffffff80000000, 0x2dfff4ed, 0x6, 0x2}, 0x10) [ 323.131160] binder_release_work: 3 callbacks suppressed [ 323.131168] binder: undelivered death notification, 0000000000000000 01:48:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.225180] binder: BINDER_SET_CONTEXT_MGR already set 01:48:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioperm(0xcf0, 0x7, 0x0) [ 323.248849] binder: 11945:11953 ioctl 40046207 0 returned -16 01:48:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.312510] binder: 11945:11964 unknown command 0 [ 323.320014] binder: BINDER_SET_CONTEXT_MGR already set [ 323.336965] binder: 11945:11964 ioctl c0306201 200005c0 returned -22 [ 323.354931] binder: 11945:11953 ioctl 40046207 0 returned -16 01:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_context(r3, &(0x7f00000000c0)='system_u:object_r:lost_found_t:s0\x00', 0x22) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x8001}, 0x28, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.371941] binder: undelivered death notification, 0000000000000000 01:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000100)=0x100000001, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x10001, 0x8000, 0x1, 0x81, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000200)=0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000240)=0x401, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r5, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_dump={0x40}}) close(r6) close(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) r7 = getpgrp(0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r7, r8, r9}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.542495] binder: undelivered death notification, 0000000000000000 [ 323.569100] binder: BINDER_SET_CONTEXT_MGR already set [ 323.582519] binder: 11989:11995 ioctl 40046207 0 returned -16 01:48:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 323.641637] binder: 11989:11995 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:06 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.719595] binder: BINDER_SET_CONTEXT_MGR already set 01:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/118) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 323.769785] binder: BINDER_SET_CONTEXT_MGR already set [ 323.775829] binder: 12007:12015 ioctl 40046207 0 returned -16 01:48:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000380)={0x0, 0x20, 0x1, @thr={&(0x7f0000000200)="85960e212632e6ec12ed610665525d065d3911f0106767aae2c06b9e8434b94590d7f692e393801aaeda94e111cfa7de2d395781578bc935efe82a16a62899729c5c7ba8e5575225b1ae5a5c2e", &(0x7f0000000280)="7f5997480dfe8e0bfa4c2a641b054ad0a31811469248199ce5a5b924fcb52422ab03eebb238cb18ea3c4c2752ed6966f9b92bef9074956a9bcfeba2484c7db8ae89050a8a7ceb4223547f870a64186bf50edad088d23a0be3715777504ac76468c690f3b6b6289d4434d336adbf12202a375cf32036f0d957921deb9d9d5f565e3e516c7f0f718e6ae170f091a854841c1c10c2aef8c7e1ed835a5d66b2792f93001465b37f8736a3de382b3c5c260cfe353549bc16dfbe1ceb5dd7b04deb59d45055d0850d0f2d1ddbe7bababde5c667fb6a9ca50ce21c91598f7"}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x200000002000, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000140)=0x1b, 0x4) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.813757] binder: 12007:12022 ioctl c0306201 20012000 returned -14 [ 323.820522] binder: 12012:12018 ioctl 40046207 0 returned -16 01:48:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000200)=0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000240)=0x401, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r5, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_dump={0x40}}) close(r6) close(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) r7 = getpgrp(0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r7, r8, r9}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 323.890283] binder: 12007:12015 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 323.924645] binder: 12007:12015 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:06 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7b, 0x8200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000000000c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) pwritev(r2, &(0x7f0000002740)=[{&(0x7f00000002c0)="eb0627ee8e679f8c36d323cf42907d50c6af79667e7afd0d6019fef6fb6c4e52733d541bf9eb998983356567cc2a22ed63c6b1b8601ea035640b86", 0x3b}, {&(0x7f0000000600)="26038127382b791b8c2ac5a223836414d3c3f8190ae1388a65287e558543095c293ca4b44a3f2f07ce7e71f5be2beb7e5c0b804a6f5a3d1e1be83db9d20eea57f53b983867c45501768c8a17200006de7ac9fb6920f634e0863518746299f0dd90937d0d1309a1a3a39b0a582f8cdcdae7309ee7e36b28fe1733972ba4730370ad086b59b97fbdf0a4ecfd78db604259ff3acf8253d2153a13de771151f88ec6557e0710022cf2de26ea0cf64a62ddef2c22b60a5d87b4858c78a5cc9018514b97ab9485ad0433ef283baad935ffe94f0a9feaa92e1e93d800c9931f28c1f0b0f94e9bd765feab6aa5c75b250e3a8e39326c337d04117af322a36a498c422f7e7aec42fcec43c12d9a83485bc719c2941075f6d2c16a445b2ffc55f39bbe18fa110cef27fb5cfdca6c212307db30a2c662e9c756f98bf2fa4220465fa9e7087ad4f66f3ed0e55e5f0bf6083277a0049ab7464e0d1341012bf11d467ff5d6ac191fdf7b76417adf7a439e67e79630c6a84a9184b66f7aadaa648ee87f707e3c9c1fb7cb06663f6e1b94ac5a7d24ddb6a5b46256c7fbabe70db4fd9e5439499f0e64186caaad6fcec53f97f46be8608350199947f265bdc3e9b21cf644d1bfb82b155b5337d5cb68f8fc3428b7e43e923eac629c43baeee5a93bc62fde197dcab1abcafb3b63c2d7c57105f519755850ea93fe7ee7c85106d3edeb2d3ec067989c315187978a34212a6ac19cd7398a298131d7d27d9b2cd6c94e8703fb1380ac52cffc7b1dc150d1e4e865d079c2dd4f954ad8bc688d79d6fad8cc3a21fdd79cf119d6261b72f3768b83c555abc776122a6737bc21f63004fe9570028fa162f42a9e396e86388d5c8e56b7c06a0259ea80dc18f88557790444a2c2f3ec2a9f8df0e4ee45cff59e827c28d584a7aa5bfc98a8a0013b60a45d8903d1652d8c0e35abe04d9abd8c50ad5d993e15bf5540281ad85f828da1e25055fb570b5704d83e13e396a75afb07606785bd7426d1ad999f5bb34237a3fec97f2c935fcc2ae7ae3f4718bc55c377de8995393e0a3e5cd6c9ec7a4c4f0d79fceba3e8164612031ea5689a0f8114ba302dbdf9e277a19d57c5bee85be41e3fb9aea30f8d2df08ad5c12dc55d7f81ce1bff04f86038fafdcfb7f1b9a5aa3b5428d1ad7b85f83ab28e48e3e6af216638e37cc133f2495c8c10cf5d4c542a2dede6992fee0fe2eef6f48c17a934a964b75e9e82deccc9a864f605a0940b2ff17de98c8aabaa5b281a54fc8ccb3ff4e155437166c5c9cf1ccd66f0daac443f5be799c49d6e352d8fb2d6d18f18ded121bf0468800c04ddcd90a9ecf12f5aaeff8d7c9e7be0bd0a95025947fa53d5c307805c94f3623fa187cb8188a5684c16d4a9b1c5f56d3de5a40d4ab95627baa97612195d2b861083aae08d63a19de0b701ab849387348e7753de6b3be25925fabedc3f3c829754ffa79554383faf8d743ed8a4e34ab43eb33659c86c20122031af8637b5e2cbc6726b82c88223c909176d677856c533d77ab5c5ae7b81ecf4096c13199ad7a395fa518b9d214761ce77736d0cd168ef71b2b1f5284120e4e4de5e4f17505accc5486d17782664e926cfd53b80ac2685dadf4a55b6c6011bb2cc80c362d1f25b246c3977b09ed44834cd6eb84f1c3da0e7c6a6b8bf7fc700c8b732d1731d8af31afca3a1dc3d084c39d40225be9ad9839ca63fc2bb472660b6933b5b1bd2553b4ac0647f823660f3d82d3d0cc5ff56e74e694015bc6677eb3842b55726da9b7914e741a1a6f25958631b4dd39c1d2f91b49c92df8c6db03b5b6c08ae091ed19df3e3b77cf9439a65e6c7dd0e313a948dee58d8e5a937cee709897b9f3f29a0beda1061d0f824206349c42f780663494198f15a1ac1109be01fcd8f4cf10e8f033e15d78c8f9bf5ce3c028268febc83eeeaa8fe703105bc56e2e232a39bcacb4a66125008bbe72a7bc8021d18fdba5fe8fab5d243d9a5ebc168a89ef03a85a587bed4dc1a0ca780a6c6ed20a995104c78535f1fc7c09485836a9a055234114f30ea4452b6871ccc1b2bf5a4186ba30b99d508f3982df4e63df59e8b61c44079a54d440a36c75bdc3190a71124e8a67eff9673dab87c0e029fe7ba83817d2bc51fb66b37a7059612bb2b932a4f1cc448d0a7a49a1772360b372a85da523c1c2a336f812d3ccc7e9c0aea5af9844c84fe8fa788e511c4f4977028ed473aa2259cd32e76245a6e4e9f1bfede322d643597dea37e1eab894f4cdb0cc0d649d531ea5ac542d2e77d63ae7b98207814e078421d7b92f443c771f51bc9fadfc1a58054d7ed913e52a871b549cb21bad786e57e0afe9d6b1975dcf94aad788955cee085265a65389bc5fc6ff5d9d60f174700b97c0173998b958e9475af32013a436cb3e272a5eabce908f553fbde0812239d00c1e29b397af8a801b0f98a45bb69c570d1e142206bbe91dd0c0dcbd90c0deac55385979ac0fcc9778efe106a73f5db02a36cd0eb8b575057366c5573d29dbbccace65c23f626cc97da735e659d6ca6b763cc4a4577547a82440b2caa98ec15a0c6daaf44e883f2de539e25b61557a2bf484f0c08674724e7709e66fa0d39f80ceb3d6f8ce1c0e53ad75eb336590700aeacc5e41fc59ee2a8aff65a93726605c39ef757215f542d9f09e7a0ce8132b1153601320eee8662d6dbe2a60910fc390e432fc677e78a7758bfd246c0fa0027a3581a5f6d643d963f430edcf08fb918211e18b480faac60dd8ec268230025d603f792d90028278b5dd177329bfff6c65a9d8a71151bc2a65fd8352d82a3dcefe767d432a3f4622224cab317a34376c8ad6a87b486f911aa5345b5acbc1491b371832762b1a6687d6f3d7c1fb9ff83425356028b98ab1fddd4c2d172a7a8e4ecebb6f03813ab13f3e8c2d01777d04178408d6cbfe3736b3ab878e3978e6fd966bbed0ae4e50c4460246efaaf499fbcd5a156bb2ac484764ac3ce2b21e77739fe18c35674169277d2a1656b8803521d50d0555060fb92fba91ad234d1acd08f903932202494edddf1388964e0251b053140bdbfe744d2e21ed3ffc92ae0ab36990c3dba5420e5362993569e0574252f980547d7390af6b48a714b03e525c6c1a472e760ea9bfd5d5adb75af3a7d037968f47e8a871cc79a1ca626cb56f440804b9d482ec8c4be8c77f02afaf00408885af9e604404c19d05b6dd1423c6d7123fbee08d0bf504bf6809f2d1cc4c303144a2f73f7c1ed4635fdf21f707d59fd6c3624c6fbec4781b41530d0a1d985cb45e5aecd512ab30b5414a3e24c15d3e095b14922d08c2aa2054847c544bda49c5a9fb94084a5a4e2d5bbee227f65223e7abe790e26a7b51cd5ce8030249ef4843205abfe207a6b3d5f0ead14c3d0266ff8d4b49ca095d8500d7eee26ffdf6999e62f5613e1650d17dfbb44d6ae1bf67dbdc57a90c9c74f8bf6c98e7165c3371aa4428449ac4635e1ca7001f10ad45e7b25dd44cb2cf7fea9d95c3a67a597578ccb84436a3f8149f02bfc64c3167dbbafb58f9ef5b19875a32971f889cdd467f07a8e8ecd0fa6af4e35e536c370baea05302cb2144572a48aaf0f9f7cad33cc278a451906bd50b9fcacd30f619640c5e9da1842c24df7ea15d192ce69520c7d4fc4c6d4af371108092813ee66fd237d61ba2d4d8200f51e162e78df57f9ef5949a8431cd0d656863c4c588efc7100d1354fcb23e1a2354c0d5f45f96a413965a681cd147b99bf52d4f9aa9152a3cc46d9711ebc9b3733267e3047d17d2b3aa067e83861205c8309438ac5f7d1bd8d4f43ffa11c61f7c7715178032a3f85f7bab2535f1b35ba8e4cc6d5ba98b9934d3b7018bc06dbbec3d8adb46bd56d790d267ccbf633952c2889f953f32f6e385268e71c05b7638ed36f27e26385c9a43c99c1e0f64c5dddf56b57c2fd71c1b3ae809d8986cc4822308be678c93bd5c8e4e0199e3674894d50685914205ba362d2f98dccfd2d7af1594e16578849be9b13433e51ce97cc496abf853178b899c0464cfe9a620f0378fbcf9581183de857022c06bbb41351c24c0fef719b49229467617c45974ced8f27a17cbceb86abc13404e6807f3f1aa3907c810a52656ae89a36d1dca6930f68e14006ea2a7a322b28988cbf1fec0dc5eb3e7a93d4291d93fe1a3619315a32ad87250e8cd28a3b8e6129a9e2b8e1a1069caa470d6626a9a4a8363570cc6d42dc6faa229456ebbd5788d16e75c4bb2656290137bb617f983da07d1e517f92d32a0478967741192e4ea2eb4e16731899c99ceb4ee3273a34e49ab956865a8616252c816121506fd685ebc824e00ed0788e571155567aba46a9276006f7e202a0804bf941b64e88003ab95ec5120f676cfb3b4a7913bb4b603c57c3f9cdefc44964be0ee9f72901866e2836c68c292f1ea9284a057ab8dbaea241085c326ec958c367d6befe1118f655608fecc25e9e093d49234e50cc4d1ceb861ddeffc2418c128ea54d13d8bcb77665eafa98b156cb2170eb6819d8907855a98a53b90ca2ec03e4016cf2722c230ded47c3793601318833c372671bcefb3c60977875059984d753a90a8c07d168e2094eb802854807012f44a4cc25a88e899e62438c3260f2597ca7317e8cdfabd3de086657b3a0ef573448035b6f13d7bc9ee6ebf033d410613aee63520d67c02b9f4c0db6a29040a471f2571cba0a0224c05be1e1e6e98e3c6704c6c12be73454cfa42cfc2b772fc90a454d35e5bdc153a2a07bcaca73f6406a622cdc9984ef9cd519a3ef194da13ecf16d0e668ebb534eec5c04d5871514e340ec2ceb58da493835ba693a7f817a92cc1ebdf5ab47ac94eee5be9efd990628c607ad6998ae92f2fc46fad968f8af7d113d6c6cc727cfdc263855ca7b4cec7f0056d8157c0e77b81af4507cd5d653912d373083b94c08a6f698c5ac52391582aaf805eedc68f30404717f7b4203d1453d4b45cf171b90219db2b5e9695b0e842362fce4657d4b7222b2162783f26de98f73b06a7aa73a9ed142197b2e54d767d42d4d5e5aba139e547c8a3d2d4dbad0c81fcca79b70b6862d4bdd923e46db04f9387ae0777618bf52ed1a59c0d40b73d9ec02741c424d4d2eef5ac8fffa23341a0bd8e4e140c643ef1b7eee3633c922bb9465416cd698a562b9ffe752f72cec0313720553f70a0fd13a6ce1dd100a9608a643c89fc36cbf389538996477962a36e7739685bef342814016a505bd4cbad05743622fac641f228915f71dff34805bb0a00c753e0a43489f0ae8cc65df611f680255c05632983dee2b4d12521cc10d1d2842132ea21195b2bebf9cf61db7c78004cab09b1154e1f46da394133cbb9a1e88c18a8e71fed1473dcb462b621d4ab50075fbead7e4175e42d0565430adf04eaae33cab760f1b18d5899e46d803af0a9efa3e1e702d05ebdce3d56ab2e57160e039be19a15b71ad743222ae69df5f35fac57960100ed38bb03058f66bd5f6f1d4d07ec9702dc3845a84c7e56d67b44fc2ca125d0aa4a29e1eac3f3c577808e0c53bbd7f909d763e1418fb6d4e3c1174df22b586331fcdef58cb8ab0d67ae264c8f24bd50057020867e01c51083a8f0a35df629ae91d5a4dfcbdd479b3f2edae20dbb12969c5a9617abac131ec35fd5a172ec7c87cf6af4d74920de159204d4c435b30098e6852a718aade8cf4d8efbb02c399cfb390f74441ac48932ed3cf74f9ad79438e0dabdccdd69c33805de9067b4fe95a6aa8372711a91832aa727412ca7c747392e2e877cb18b6a9f56de530d2542", 0x1000}, {&(0x7f0000000300)="ca7d0b537c2b3c9730ba4e96b63311284ae85672ef7b6afe030b73ff7555e4b3f0e3796dd8d313", 0x27}, {&(0x7f0000001600)="c1a6042b4e232b0e9b33432b6efeb49a76c5f77b958517fecff88d9af5d4195019e1d743", 0x24}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="7b173cfc5b8db304a043f185c491566ba6038f20e747601e9482d1134a47ddaa50014c59a56685cade5bc5e67b2c8c12de1d8e781d02ee9ab8f294689f58c658466f55d722f1950eab82c0840bd009afcdb44ad50dfe895afa12755fa783c7c820aacab71dc768af21dc7014d5f71936e8dd433b4e64b39495216b21086029c2949314444c6247513606bece8c3517b376039a0ffa02f2942d8b53d13e5bc77695b327f8c676ee4a8597758b3da2b1020847eea63f95481230ffd8e8a9a52d39ca3cb09f5203e7d28bc4590b1a3bafdc98cf168052cd9735aea4b0cd4b97bd15908f176be06887438d47178e137e416c98989dadea6cfa062c50", 0xfa}], 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0xffffffff, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000140)="9495fd382b2fe2521b92e1bbfa8985aa5fbd05bf8bb24540b3cb3a51c7edb329dc8e559a64bd86750421eddb20f4becdf5b05f511374dbd93cd6efa7baf4ddb5ab134064b17ad75ae845631731ce22cd2db86d01f1386167a408c0ea4d74184eb0c045cf9b687f5b02f3969527e5f93842a144b54d5ba1f26850c359b256c16e3fcb0a1932da2b1bfcb0058316f3d70f8ac15344c8eb54ba96f7d4", 0x9b, 0x1000, 0x0, 0x1, r5}]) [ 323.994827] binder: BINDER_SET_CONTEXT_MGR already set [ 324.009964] binder: 12040:12048 ioctl 40046207 0 returned -16 [ 324.055840] binder: 12040:12048 Acquire 1 refcount change on invalid ref 0 ret -22 [ 324.071038] binder: BINDER_SET_CONTEXT_MGR already set [ 324.076676] binder: 12050:12057 ioctl 40046207 0 returned -16 01:48:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x0, 0x1000000, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x8000, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$P9_RREMOVE(r2, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 324.510243] binder_thread_write: 20 callbacks suppressed [ 324.510255] binder: 12068:12074 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/vsock\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000ec0)={0x0, 0x80000, 0xffffffffffffff9c}) getpeername$unix(r4, &(0x7f0000000f80), &(0x7f0000001000)=0x6e) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000f00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000f40)={r5, 0x80000, r6}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) r8 = getegid() fcntl$getownex(r1, 0x10, &(0x7f0000000880)={0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000c80)=0xe8) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000001040)={0x2, 0x5, 0x3ff, 0x8, 0x4, 0x1f}) sendmsg$unix(r2, &(0x7f0000000e40)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)="910cf555a3d66431862eb760874aa60caa3e1734d5dc57c1df44cd5c2d2797164ece3069968c9663deac06efcc06b927496deefa7b6502a4d5ddaf58534b0e17937a816e7fba56b334caf6b46d339c4c77b4eaa45a398de85978192e464f3c0504485ffbdf98d1d357ccfb2ada26c60c68", 0x71}, {&(0x7f0000000180)="710c8aa992c9c69cb69ea817941b4e4634fd8ecfcf6e2584128c20179704bec09f63704c6c3584e6f6df539abd402ff6376f8cb971b416dbb5c36ae8140d89901e97ea53b4f0acf31e67986f75", 0x4d}, {&(0x7f0000000200)="34b072512ea57d48c2066b03bf22cd1abe46d7", 0x13}, {&(0x7f0000000240)="d9489d72fc0f08147bf08ef14445c4882ef5aaabba84c27fa9b2f7a5ba82b84094dc477e331779157669861fe2840a413a726f3cf3fe86607c07501feea12de2bc6b64278e98926fcf6ea07be0e7e1c78c2e7bc2aa682999160e13e68de2bc", 0x5f}, {&(0x7f0000000600)="b9aa617f0dc5997b0c5a83911df3e09df30c3da27f33d347c7c52aab8a56bb8cc219b65cd18385f35328edd7bd6676a3884062b265abcb26c300439b8b749463dafb0337213e7446835aeacde5e12d7a314bbf13399c7c7809c891a3141cd16dd64893dee52439d67315670a5b6637767a246aa66cfb9cf76dcd22b4b1382a04253b5be07451af3b9326dfd9", 0x8c}], 0x5, &(0x7f0000000d80)=[@cred={0x20, 0x1, 0x2, r3, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r1, r1, r2, r1]}], 0xa0, 0x4}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 324.627016] binder: 12078:12084 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 324.657179] binder: 12081:12087 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 324.702348] binder: 12090:12091 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 324.718759] binder: 12090:12094 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x8}, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 324.768916] binder: BINDER_SET_CONTEXT_MGR already set [ 324.775048] binder: 12040:12055 ioctl 40046207 0 returned -16 [ 324.782703] binder: 12040:12099 Acquire 1 refcount change on invalid ref 0 ret -22 [ 324.791260] binder: 12040:12055 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:48:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000200)=0x80) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000240)=0x401, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r5, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_dump={0x40}}) close(r6) close(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) r7 = getpgrp(0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r7, r8, r9}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffffd, 0x1000, &(0x7f0000ff0000/0x1000)=nil}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x0, 0x7fffffff, 0x7, 0x6}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xfffffffffffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000140)={0x1, 0x7ff, 0x10000, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x2, 0x9}) 01:48:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f00000000c0)=@access={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x8}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x200000, 0x0) r3 = dup3(r1, r0, 0x80000) r4 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r4, 0x1, 0x1, &(0x7f00000001c0)="4d1066a3c1db0d53b866834506afe1af156a05817cef329c41bc10c493a0c95b6a38503396a14a4ac03fdc19e991f8e2347d9787ff26d03add2ad8f58c62470c290f91c7b1c8a4acbb195d9dad3e3f64689e2fe5f6a5b233ba2266aa4515a35a9e709e9bdb5a828810cd2ad1bf6d90eae85b5d88e5a312c9865e7f6767500cb88ea845823e29ef5b14f7c58d9be588e76dcbb7a84c135ff4d78911ef5b0efd68fcf6c61af8c747c21881bc392e71", 0x2, 0x7fffffff, 0x6, 0x80000001, 0xdf, 0x7fffffff, 0x3, "a7b12d386b06fe3f2f73749278570b7aea5f21c7d02cbe29033cf012b7a041ebcd51cc02536c527c998cc6cbf5aae178ee65385b62c228723eafa8e8a492bd2e8b10fd3be27d296e9f217e0b9013ead9ce14e34b9c193fb73e7c48b401805d3225ad4596eba3f71f33619cfb46c429d018c3b5e0974fd5abb184f20f17cbb453625647707d8f8b7343aedaf62798362f4d4e6f327446eb7220a08ceaee18466a8f7db7cf093ed012452ce1d89563ebab86614adefed38314dd9798229ee3b0e5c7fd33a94762a17fbee82b5c3dfdba1759a9d915b543ebc55073e14e12bdb61211aef5d9278ad7bf"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 324.834988] binder: 12100:12104 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 324.846616] binder: BINDER_SET_CONTEXT_MGR already set [ 324.852088] binder: 12103:12105 ioctl 40046207 0 returned -16 [ 324.866395] binder: BINDER_SET_CONTEXT_MGR already set [ 324.871712] binder: 12106:12106 ioctl 40046207 0 returned -16 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 324.957563] binder: 12112:12123 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 324.996630] binder: 12111:12122 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:48:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x100, 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x90, 0x1, 0x0, 0x8, 0x0, 0x7, 0x1, 0x8, 0x5, 0x8001, 0x100, 0x1, 0x9, 0x2, 0x0, 0x8001, 0x6, 0xff, 0x84, 0x5, 0x4, 0x6, 0x748, 0x7f, 0x55, 0xfff, 0x4, 0x5, 0x0, 0x50, 0x3, 0x9, 0x0, 0x6, 0x8001, 0x8, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x20, 0x8000, 0x8, 0x0, 0x0, 0x20, 0x3}, r1, 0x9, r2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x440080, 0x0) write$P9_RLOCK(r4, &(0x7f0000000100)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 325.004455] binder: BINDER_SET_CONTEXT_MGR already set [ 325.022239] binder: BINDER_SET_CONTEXT_MGR already set [ 325.033199] binder: 12120:12127 ioctl 40046207 0 returned -16 [ 325.041717] binder: 12117:12125 ioctl 40046207 0 returned -16 [ 325.045637] binder: 12120:12133 ioctl 400448c8 20000280 returned -22 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 325.066486] binder: 12111:12135 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 325.089121] binder: 12132:12140 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:07 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000080)={0x8000, 0x80000001, 0x8, 0x507}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f00000000c0)={r2}) [ 325.189251] binder: 12146:12152 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 325.309747] binder: 12157:12163 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/59, &(0x7f0000000100)=0x3b) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2056670f3266b9800000c00f326635004000000f300fc76d450f23236766c7442400890000006766c7442402a8e6e3e46766c744240600000000670f01142488026766c7442400010000006766c7442402440600006766c744240600000000670f011c24baf80c66b83876c68166efbafc0c66ed23c2", 0x77}], 0x1, 0x0, &(0x7f0000000140), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000200)={0x1b, &(0x7f0000000180)=""/42}) 01:48:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/ashmem\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x2, 0x2f, 0x401, 0x8d23, 0xa, 0xea67}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x1, &(0x7f0000000180)) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000440)={0x0, 0x5}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000200)=""/65) write$evdev(0xffffffffffffffff, &(0x7f0000000440), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002100)={{0x7f, 0x45, 0x4c, 0x46, 0xdd4, 0x0, 0x40, 0x505, 0x1, 0x0, 0x3f, 0x0, 0xe1, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x1, 0x9, 0x0, 0xfffffffeffffffff}, [{0x6, 0xfffffffffffff723, 0x0, 0x10001, 0x2, 0x101, 0xff, 0x7fff}], "", [[], [], [], [], [], []]}, 0x678) fchmod(r1, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f0000000380)}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) add_key$user(&(0x7f0000000b00)='user\x00', &(0x7f0000000ac0)={'\x00', 0x1}, &(0x7f00000000c0), 0xfffffffffffffd5e, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@nl, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x5, &(0x7f0000000800)=""/229, 0xe5}, 0x8}], 0x1, 0x0, &(0x7f0000000400)={0x77359400}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000100)={0x6, 0xffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) [ 325.756665] binder: undelivered death notification, 0000000000000000 [ 325.764078] binder: BINDER_SET_CONTEXT_MGR already set [ 325.769387] binder: 12120:12131 ioctl 40046207 0 returned -16 [ 325.780888] binder: 12120:12131 ioctl 400448c8 20000280 returned -22 [ 325.788112] binder_thread_write: 6 callbacks suppressed [ 325.788124] binder: 12120:12170 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x4, 0x8, 0x2, 0x5, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) [ 325.877494] binder: 12172:12181 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 326.029148] binder: BINDER_SET_CONTEXT_MGR already set [ 326.056919] binder: 12189:12193 ioctl 40046207 0 returned -16 01:48:08 executing program 2 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40002, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000100)=""/184, &(0x7f00000001c0)=0xb8) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') 01:48:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 326.102860] binder: undelivered death notification, 0000000000000000 [ 326.137987] binder: 12189:12193 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="f6", 0x1, 0x1, 0x0, 0x0) 01:48:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251, 0x0, 0x0, [], 0x0, 0xfffffffffffffffe}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x643ee823) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 326.243105] FAULT_INJECTION: forcing a failure. [ 326.243105] name failslab, interval 1, probability 0, space 0, times 0 [ 326.253500] binder: undelivered death notification, 0000000000000000 01:48:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 326.326119] CPU: 1 PID: 12213 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #67 [ 326.333432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.342797] Call Trace: [ 326.345401] dump_stack+0x1c4/0x2b4 [ 326.347277] binder: undelivered death notification, 0000000000000000 [ 326.349052] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.349083] should_fail.cold.4+0xa/0x17 [ 326.349102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.369935] ? print_usage_bug+0xc0/0xc0 01:48:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 326.374019] ? graph_lock+0x170/0x170 [ 326.377842] ? mark_held_locks+0x130/0x130 [ 326.382094] ? graph_lock+0x170/0x170 [ 326.385911] ? mark_held_locks+0x130/0x130 [ 326.390166] ? find_held_lock+0x36/0x1c0 [ 326.394263] ? ___might_sleep+0x1ed/0x300 [ 326.398427] ? arch_local_save_flags+0x40/0x40 [ 326.403038] __should_failslab+0x124/0x180 [ 326.407298] should_failslab+0x9/0x14 [ 326.407833] binder: undelivered death notification, 0000000000000000 [ 326.411113] kmem_cache_alloc_trace+0x2d7/0x750 [ 326.411136] ? _raw_spin_unlock+0x2c/0x50 [ 326.411232] binder_get_thread+0x255/0x880 [ 326.411250] ? binder_open+0x950/0x950 [ 326.434679] ? ___might_sleep+0x1ed/0x300 [ 326.438851] ? arch_local_save_flags+0x40/0x40 [ 326.443951] ? rcu_pm_notify+0xc0/0xc0 [ 326.447858] ? __might_sleep+0x95/0x190 [ 326.451849] binder_ioctl+0x272/0x145e [ 326.455749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.461306] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 326.466955] ? avc_ss_reset+0x190/0x190 [ 326.470953] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 326.472070] binder: undelivered death notification, 0000000000000000 [ 326.476756] ? kasan_check_read+0x11/0x20 [ 326.476775] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 326.476792] ? rcu_bh_qs+0xc0/0xc0 [ 326.476832] ? ___might_sleep+0x1ed/0x300 [ 326.476849] ? arch_local_save_flags+0x40/0x40 [ 326.476871] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 326.476893] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 326.515628] do_vfs_ioctl+0x1de/0x1720 [ 326.519561] ? ioctl_preallocate+0x300/0x300 [ 326.523993] ? selinux_file_mprotect+0x620/0x620 [ 326.528765] ? __sb_end_write+0xd9/0x110 [ 326.532838] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 326.538392] ? fput+0x130/0x1a0 [ 326.541680] ? do_syscall_64+0x9a/0x820 [ 326.545665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.551210] ? security_file_ioctl+0x94/0xc0 [ 326.555629] ksys_ioctl+0xa9/0xd0 [ 326.559090] __x64_sys_ioctl+0x73/0xb0 [ 326.562988] do_syscall_64+0x1b9/0x820 [ 326.566885] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 326.572260] ? syscall_return_slowpath+0x5e0/0x5e0 [ 326.577204] ? trace_hardirqs_on_caller+0x310/0x310 [ 326.582225] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 326.587244] ? recalc_sigpending_tsk+0x180/0x180 [ 326.592004] ? kasan_check_write+0x14/0x20 [ 326.596256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.601109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.606306] RIP: 0033:0x457569 [ 326.609507] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.628428] RSP: 002b:00007f2e7964cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.636152] RAX: ffffffffffffffda RBX: 00007f2e7964cc90 RCX: 0000000000457569 [ 326.643433] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 326.650711] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.657991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e7964d6d4 [ 326.665354] R13: 00000000004be858 R14: 00000000004ce4d0 R15: 0000000000000005 [ 326.696444] binder: 12205:12213 ioctl c0306201 20000040 returned -12 [ 326.790887] binder: BINDER_SET_CONTEXT_MGR already set [ 326.796858] binder: 12189:12197 ioctl 40046207 0 returned -16 01:48:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = memfd_create(&(0x7f0000000100)='/dev/binder#\x00', 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000600)={&(0x7f0000fff000/0x1000)=nil, 0x9, 0x2, 0x8, &(0x7f0000fff000/0x1000)=nil, 0x6}) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x920, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_dev$rtc(&(0x7f0000000340)='/dev/rtc#\x00', 0x1, 0x400000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000240)=""/251, 0x0, 0x1, [], 0x0, 0xf}, 0x57a) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:09 executing program 2 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 01:48:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x18080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x1000000, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70dffd, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:09 executing program 5: r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/105) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 326.915119] binder: BINDER_SET_CONTEXT_MGR already set [ 326.920896] binder: 12248:12262 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 326.930794] binder: 12249:12263 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 326.942604] binder: 12253:12256 ioctl 40046207 0 returned -16 [ 326.943037] binder: 12248:12259 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x80041, 0x0) syz_open_pts(r2, 0x1) accept$nfc_llcp(r2, &(0x7f0000000380), &(0x7f0000000440)=0x60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0xfffffffffffffffd, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) write$vnet(r4, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/37, 0x25, &(0x7f0000000100)=""/199, 0x2, 0x5}}, 0x68) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {r5, r6+10000000}}, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x84400, 0x0) 01:48:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 327.012760] binder: 12249:12263 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) 01:48:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 327.703239] binder: BINDER_SET_CONTEXT_MGR already set [ 327.708635] binder: 12253:12265 ioctl 40046207 0 returned -16 01:48:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='/dev/binder#\x00', 0xd, 0x785a90f6949312c4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x7, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000008700)='/dev/admmidi#\x00', 0x8, 0x20000) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000009780)="a4d985f68ff249f3b9d064f343935b6d3889f5fa4f7760951805f38932a66a92eac011f6a2fbef3132c1e385882cb073b5ed155b7009d389248fcbd6b72ce0d378645e218a7e4fc6546db99d56e27cf6c35a9ef70115fb4736fcb775fd64ca3c4a3212d0d33a73f620602ea7cebc0361866d1c60606892b1baa396a656ca066e43dee61e45c137b57d80a2715a8dacbe578bffa97a6aa26cb63875ecea8c6605a4f433e9dc94b026bb817eeb806fd43fc1bdcfd57cd435dee0b4d1112d6abd26", 0xc0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) sendmmsg(r2, &(0x7f00000094c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e24, 0x401, @loopback, 0x3}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="d78f8048b41c68fe207b5e1e5a828db50ccff869d1fe00db496b7300e7eca9556d3f74d0159defeac8e2f8ac31f55adfc5834970d2fd36705ef9984745837f9dcbd40665326e06bb0f00bdd4e76f2dcedda17cf8eed6d3003787d4a79e48445b745e9dfe270458c7962582c85965e65201987ddd718147e5528e06077e0dc3c196a4217ebce002e3cb2ab15d77c4acd9e59415863dfc7a1d011dc4de6b", 0x9d}], 0x1, &(0x7f0000000600)=[{0x20, 0x1, 0xffffffff80000000, "828364cf7f34dc47cb4126b7949ab41d"}, {0x48, 0x119, 0x1, "90b70a20f180fd36ccec66de3e33958c0f6355fe7a4c86e98f58edf250de1782aa7e8b73a9ce5347cda179d3daf3e7f9858c5f83a3b920"}, {0xc8, 0xff, 0x7fffffff, "e14c040941da72733d9882dd6d4803aee91262f78d30a866ee5a540e6bac0a02562090a4a1a259a850a8403cb206e3e03a96b1d7f0bb30b46aac0271a7e9015b05a46f13a32eda3169962e865b132c276466136571eef2acebc580848d51612cb07d9c1c87055287794847deea7579ba44b254e8f66a9c9028cbdbb0eaeeac791f805af7d79c2d1324339ede8021b1ecd37523398a7d787dbabf2f6781f53b7b31875263367233fb7bda13188e71dbadc0"}, {0x68, 0x511b83d1d7e335c, 0xfffffffffffffffa, "c29c64a2800fd377b1c3a7449716b7a9d638795c5a7b95844d05ab6453cde8d6badaaaf30118cae33af8a160e367cfb7d3151ca9f29171d6e53c20e6400a6834df8caf2541b99b6b405e6ab3835c0c30e0"}, {0xd8, 0xff, 0x7, "6dd90daa33e84c84b7a333f43e729daa99ce737cfc702ec12bdb997020c077d5a35609c393df6ae1d12a64deffe96bd41265c355d42afcde13fd3fcd3e596b2f7808f817773b787c2a48dfc432c0f37ba7b9babde9558b523d751cf09d0473aea8f5b8bd18f38865638227ab0019ecc47c55ac144c82e8241cd71818a13d5b1bcbdef93a0411ef276dfbd333f720f9aa475a5b3b275557c83cb3b95bf9027eb78f6fda78113f92caa244e569eecfa29cea65f16f1cf9d30a81b731861752847484"}, {0x1010, 0x101, 0x7, "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"}], 0x1280, 0x1}, 0x9}, {{&(0x7f0000001880)=@xdp={0x2c, 0x0, r3, 0x32}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)="dd1e4e58cff387c934ee88a500a80409601d52c8b39938a549f6263553625d58bb112c0c11401c0e534dbd5e8c7d4024f35433f2673c5f93ef6e07f0eb78001ed0a20af7b43840a861b7408b8b94c82195279d7fc677107185bbe94e5f063c31346349a32b43f2c8b8d7d2327a9bd33ff8f0c8fe9095c3f33299204e592109ec282f097b36a1db7c62fbc08f2ac46eec385d8d1f9b1cb83cbbeb6805a4df5892f346b1d09335270035d616", 0xab}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="52a3f100e67422e4fab9e1b127eca954b1bcdc3c9e0d2710f72110d40cd8408a170dc1577cfcf1794840282db14aeb392f8454e84f30", 0x36}, {&(0x7f0000002a00)="4ef4498dc51881015f3b7636243ca19ed4c5b69df12d1fa1dc8f86a2937e23229fc97015bb67e07a5352aef7d3d96bcfc4e0a508fff02abd6e48595164dd0ab8d18234144aa70364baa0464aac717ec93d96940ae901921668e206cb5382cfe4f1561b9a0392f6a4ed3b", 0x6a}, {&(0x7f0000002a80)="4c56d3b6ca8d4d085655de823e8b0cf8cf0dc15737f5d8bb7e8cd19db8392948a74466147277b7cb86347116876465f92a1f077191690fd74a6efa3e4b2cbe55f43429b80f4372468cf2caece953eb6f5f6e1bf056a58ebeb5163bcac6420603ff2b04afb90c32f182b68c4573f199cb7dcde7f0bcf5cf0ec20bff09e256e5cc365575d000c7ba56d7", 0x89}, {&(0x7f0000002b40)="7b3db213341fe599321bdf28979ea6ca45e4118bc02172bf745eb6864e3e01da2bb605519298e4992d8cca482d925f9a8b7c80eccd605a4335d4b7dc48e7e704453155e221d604f37d4b58a4f07f455e2a2267b6c899d99fe014316ce060c55c2abe92a205f758d9947134dc4026eabfb7aaafaba609109e92ea25372cd7fdd8e9e27ad00d621e7030112f0ec933bbe96e9e52aa77e5183114c9510260709ec8a8ea8fff741e7a54615dbe3e886f3c15fddf15eae8e75c31861d4a8a1c5d12c2a9fb3c3b908c1af05c7644fee51fab8f4435614e41bf0563d0d7942dc8e00b13a10c1df2d59d086ef9f2aa", 0xeb}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="32fcbfaeecc747aef2baa5428473d468df150277fe9d079ef78114ef95447650b5bca20f1dd932cb1a83", 0x2a}], 0x8, &(0x7f0000003d00)=[{0xc0, 0x19f, 0x3, "eb69106b40291ac3986cd0ab98fb28c8c826617ee8f9b428def5af4ff3391b324a550b467f82cabb85fbbd60488b838df7736ddcc8d7042735b90bb6946c2a484539ef01033b4ef779bf11a9b831dbe1cc1d2becf06d7c3489f372517c9fbe6490141f35510fbac439cf5743d712b063a64bdff7b54fa3bd0e92b4cb9b6d61c2cd3b5d5a2a04a134dae136a38b3a95a2e028f80960760dfd7184afa78226e437ace695ab3bb68ba60b695242ee"}, {0x110, 0x10f, 0x20, "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"}, {0xe8, 0x13d, 0x1, "93046817e0c65c4bedb8cb71d015f6fbbb3b7b4f96f1d6e5c0f35595c72ae59733e78ead5dd10d4b86124b4c9f83f94c14676ba0f7e0a048b7f3db34bfa69277a5cf24bc714ac97180ffbca4a1304deb8b392aac569237d8d32dbca8df2546daddd7b3ba8b69da2239f065c932cd8fb39dde598c914810a8f69d4ac83e307013ffb0b27c9ae82894029df7c8dab403072febfd9991c51addabf4160eb726be560de24bdfa4ef53b410a927caffaaf2cfe417012d17256f3c4b6ed0c531e1f803759890e807da66f6412a3175e5e60d4df0edf5047e0d4c"}, {0xf0, 0x13f, 0xa97, "468ba7d07cfe59a148b0b804acb39f48f95c39985ffdcc09b8e71daa0a02cad9992335def38b1d45f5c636533e2087508eeca55207b8813551dd5b778efb375bcef1c71976d267be181e3b93f27d490112b956b6f2c6e8f33729d8f575b44a99768b8034116966f650ab559c77fc3f22f9f4eb3a29930587ad8f4060579a32d7bd3e69ba932397e187d1129d8b19968006a7886d8f6b3f7d818ebab1f736c0e35eecc634bd25a1ca3543c9aa9f3cddd01f6d175eadb300c991c7cd405f6e159d94264f8c4a56a34f222b2f46f2c06504d764f6bcaca8d8a75cbab3f948cb58"}, {0xb8, 0x106, 0xe01, "12cac6b04cdd6c9ac2f59d9e16aab31b8f27f7e96a2e5d860f5c929f4cf50a19ae29ffcb50854aac27fa27850acae2c17558b4882e80d1534912cff94d54a7d97329d419c6fe8d97774eca0439e481f476f1672298d99eaa5eab079e8149a38700c58f79acfb74f5795cb4e709acb9e12bbbe101dbc110abe9cf6c6a9753e409feaab0c1c2cb40b5e8fd6a5e688b1bf9c3e9f7ee6bc50030244e4102fc2532373c5b262d53"}, {0xb0, 0x119, 0x152, "a8cb52470b67dc80a6e822869b513feeb4bf93ac6cc634cb70eff1b4137410bddc8cc30e47ab983f39f33d1e60773741425a3c0574d324337b02ddb6982114fa5569a197c34c6046b600e94cfb0af0c1f51438dc13cd26143fe68b2deff23a1467be7926926fa2f2e09a38a86fcef83a1c0ef721541bdd1d3fdd7ef1e55ecdbfd2269650303c7c0c1228b321f052fdc0c6844e6061ca57beab5fe1552e0dcfb5"}, {0x18, 0x10e, 0x100000000, "b8f2ce99e9103e6d"}, {0xe0, 0x1, 0x4, "e1d888df0c1a217c78724e1ba465a00e596c8074b43d3a73210d77f3885387425de6d4d743d4f7a1becbd32df23094bbca3c801478e494beccb9b15aa01f5e74b32e6e982a17f46c7c6608ea6f9cabc82161f4d9b262220939d14fd0b7d0c117fc509bd9653f3fc7bdd62c2a1c1b458e2c0fb333b7d178fe38dab120ecc8349e75faaa0fff80c3f799976a05ba4d157a42b2b79500fdf10f272e8cddc745bb9a4332cad420e2da6c99396ef14983af35cc2ccf0a34d5d5d7d345706b83a7687907dee396cf425e846babbf2d3f6b0d"}], 0x608, 0x20000000}, 0x7}, {{&(0x7f0000004340)=@l2={0x1f, 0x5, {0x9, 0x7, 0x7ff, 0x0, 0x8, 0x1ff}, 0x7fff, 0x100}, 0x80, &(0x7f0000006540)=[{&(0x7f00000043c0)="9d4c87c565dee8900187ab5da06b29a06d76a0ae3082cfcec534fde3bd0cc76a1f46edd5a72f1bd110a8f109d38438361a9d322c1516b0402de73610be32682a64b9f9216902fcb4f3fd12d6136862f5c2bcd1794964a94d1cd5da8d2432b423a1bc3b4e23a521fafa4c9b270a807da6d3978984a76188eff8ab212296792e5d29f222e9ed67d5b256d03c52855697c4eee875ef7cf9251a5260605345fd7604ae33c6eacc57eb82207f93b38e4632cd05dfe13b37c2a9ddeaac97f7e41d836c84a95fc1c6c8f03f1f25f00b48d25890df3a2f1c22a6e6f8a0193b38cfdfa05c1fca245218d8", 0xe6}, {&(0x7f00000044c0)="a0dc69407b79998a9870586a569e36544054dec7756ae89a701d40fada8accbc12a0cb9cc1e6c503dc2a05b64a3cb54fd4ad42add0a7a5ad7f9f53d020d5cc8f8bb94c431fd61e29caa6cf2bd53dea8664ae7fb5b81f1e9f565e3ae507e4492a3e26a47195732312dd28cdf14ada8494001833538cdbb01066227187a2d1", 0x7e}, {&(0x7f0000004540)="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", 0x1000}, {&(0x7f0000005540)="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", 0x1000}], 0x4, &(0x7f0000006580)=[{0xe0, 0x11, 0xe200, "44cb3540cbe54137b8c1cbdfb32e0f5cd717633460bd0eca165b64c3be5be7f24e7dec5c6522edfbdd3dd7eb29015ca84e5926bbd7ccf52c01ba99b559e2842d7ec48fa8373c2d16d27d63badb4403c939a160502b740a80034dabc6d6e16a9c0f273bf31affe3d9780da3f8683fca526862001f25cf7b971cc4d39afd0596192bf945699bbb6042415f7fffb3b4f3d8c1def193f2360d747f9aff72e3460c741e31da31ef89fdbe99108b2078fdf31187b7cbff7961d38f2a3b8993ffb76bdb5be901bba4165af6df9711"}, {0x48, 0xdfa4ea9b7be59fcc, 0x81, "60d4a7083d346a88e6416d2604bd85faec37bff1f67a131b3dfb2dfdebb70dd7b9011e52be451d5f7d2b1e2264bf2812dcd4fe2d8a6e49"}, {0xf0, 0x114, 0x7, "63d68fb0ae97e1f9768804744de3badc27d796c0898a1ea36fc7df6a80e0fa9eb771d862444b1a4b42e3297f20b91113d92b65ed43cd4dcf526101a9825fc5afe1bbf7301e4082b200751cecd4aea2215752887ded6638dc930eae9b21e8b29949af5835e3aeba23f1e8d5f3c68245b58cd4adc5d4b746e5c3b8bd3615d22dc739ffd02789edaecdfae7b4a124b400b5562c8ad8d1ea90e9aa68d62268f5ac341c7beb2f465f31e0b38f817a3e1b22ddcba832e3d39defb0e97409371250fe2aead1791daccde4d5034acd73198a0defbea653e417bebe4eefcf2321e7fba41c"}, {0x108, 0x104, 0x1, "a1a22648ebf5d3c9b4f863e3a92a731f6381f1fc3a1ed52136cecf2022c62c1ba41a7d70dd3a8d0ad9f287d227a2fbe149fbf02fe02d99f986b96cd181e75a501419e20a0cd1355ca9feac1655cb835d739f253a8753e71ee2f213210198919b87a1cc8fc3977d71ad9baa5e2e9c59ca64aa7da9e378b97dbc1646d8d559865a7f6b14be0ee390d6219a81364057097c17a4adbfbcae476f268906a758e5c5a95361f57242e900459cb9ac6b8cb7e86e5b37e0162e34030202f361b93c869f11e65cf0214cce2541c074536f10b29a42b3aea749bab23fa29f4330e96ab61ba92fdda5f37292408a69d12dd2a0a6a5b3f5debfa927ff8c"}, {0x90, 0x0, 0x7, "ca0112aae4b93e2cad8a71d22b2e9956c2a11b871c7b1f0e5247f81b4e84855c211e25085631fd6d33f9842fbb07fa4fc650c856a1149b61b1e12fbc3caf893d4e6f00aeb5db1ad1b878b0e7e59d25557d12059a18e38b377bfbbcf134b449ae7b9604e4629930bc1c107c816a4133b8a83590a647a4fb54005d4a41402713e1"}], 0x3b0}}, {{&(0x7f0000006940)=@l2={0x1f, 0x0, {0x3ff, 0xf7db, 0xfffffffffffffff7, 0x10000000000, 0x80000000, 0x100000001}, 0x7, 0x8}, 0x80, &(0x7f0000006bc0)=[{&(0x7f00000069c0)="8b470c8eb9508b568a7fe1c7f2181aaebf817dd9d4e518d49af557012a33a38318a7752a8f703f13506417e7304f7ad46665f278203acc3f5a905a1a816da18c68960273aadc55b91597ea22ba0dde4656ec69085719d5b917ddd0d0040c", 0x5e}, {&(0x7f0000006a40)="3de037aaf947c840361b960afe6ef96658307607811bcfe651a65213910a451d396a536391d341b595f9ee7a8b9e58607057fb53d1fd84c98db0cdf98494c6f7a35af18febad3f30dedf661ba8d4ac306d923e0338bb678aec309f48975dd8d325a66ee1d5aed547882f71e43b085cddbf07d88efdb9274a804e20b951c9dd681cf5f8c7ee0a43005a9a3497d4e90d8ccbd14cbab8ee6b65e835cf6c87c2bfc9778ca8edb5637857e72b078a460a1c0808f1ef0772cd476cd157b62179729a19d43f8cbc64bb3a6f1b2c975833b0ba27c56632d9d7e0669d", 0xd8}, {&(0x7f0000006b40)="cdf5f8cd355cd83561218068f907fbe7d26adcfdc448ac31a7adde57ad765026a95a1ec4a2470db6d67c5b962d6a4ce1829e4e95d77f879be9e99ce60b701f854c25a79dd70b4ba308470b84a0132346f9b844ff23dce39152f01b915bedc01d21580b6859731a3bb591feaa0e3a5f", 0x6f}], 0x3, &(0x7f0000006c00)=[{0x98, 0x105, 0x400, "28f92deaa105f5cb5575e87000a6ee600e1beca642e623289c7b47827c3760b676446c206d7957ccdd6dbcb3a8ce729ffa6834bddea647ef6db70edc5225853fbd4ccfe8e08365a391b034e5eb750b7ce26aa011a0406bf4591ed44ce80a64d5a1296b2f9d28d9f4ff6955afa702e1c40ca34e2feac7ac8505caf73a57656abe4ee77c23f22056"}, {0x30, 0x11e, 0xff, "a3ca19b10f282cddbc35d2f4e8268ac86744d0d76581330369d78e3e43"}, {0xa0, 0x10f, 0x5, "856c76152521663c4ca9170b29fdec4b23584fd5c7f90e03ca836cded4876615fa2ea5b49b45ad9626508d6ea8aa302846107b2bff9e6255c37b72548a4a1588df0b63e8dcbbb395484ad570b3773b36a3be042b589b6b4efccc7c6a8bd08c3f06612f7db088035d93f0dfd856bdecf6b065bff8bfc6d9c823d9c08eb02c980050c762b952a59eeb4a5e47"}], 0x168, 0x80}, 0x1ff}, {{&(0x7f0000006d80)=@llc={0x1a, 0x31f, 0x2, 0x7ff, 0x4, 0x10001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006e00)="5369ce4c62132c5d9ff9c730c97afd91e5459b66c559827f510d00ac212338e6f0f0ceb09eb03a97885ac3e61b57c29ec58ca435a460d97e2f31a6d06f36bfdfd84e7a703b2f445fbcb25e22b385acdd46572ac110b71cc5a9c5e0492ba27e83eeeb8f9a4357932545cd952f6adcffe58e5e3d816d10e1000f919809f64257f83b4dff57a7796cb9d649c440a9627952efaf207880d4c08d02377192331ce434be0d9a82ab56290b2ad3f672779a9fd4c4751070a0634d5ae7c2b0abe0402542d0f4e719dab6cd87170428204ce35f8e528c5b3ad35f2cc2f494aa0db216c1cbf6f489197e5e4c0d097cb35809471e40b4138fb30e1399", 0xf7}], 0x1, &(0x7f0000006f40)=[{0x70, 0x88, 0x2, "74c83172327b218fc6e307b98b9f22db6e47ca47ea3b4641b69d8089d9e30bcbda2311286b60d572a33ed2571dd165fb4a9308504c38c8c5b8403a2c0f87cff07ad6cdcc081b570b9bd0d88c6f86da303f7cdf7d7449845fe3277e7c"}, {0xe0, 0x101, 0xffffffff, "1b313557da80e539a10a066e592a2a627160491ceb28116b1b735361f9088ad7f8dcd9cda8d92b3fb7d6e5e6bcac7ddf280a60ca44154141a4acfded4ad6b3239eaddedd33ef5ebbfae6a504a5fed224e1f93cfb067ea94cdb256bce0802f52d6f46d130ce93ea7a25105fea31f887b6667de4c855b4199ca2e319dec3159fb0483f56fceb327f6d2fc0bc3c627865a5e80155d5c489cb85a0cfba704216d87d21ee34a0ebbba039cd52242df16af241fa58eabcc8473ccbbadcbe0e2c003de1e42c01fcc883627561"}, {0x58, 0x11, 0x9, "d90e86c5bf2465f3f614ba88bab0dc5653083ad50b4520dd7fe9da7440155ca497a8d0dfd955279252a93c1d6e11b4285d250f622ccf1287419277864db8763d556d3ecb70"}, {0x20, 0x119, 0x10001, "bbb1b4b6a1bfd42ddf293a"}, {0xb8, 0x104, 0x9, "aff3062a45795fdb01dc8f0da78b6c6b02b5631ab3f49c936cca505d6022dbee563e3d382aebcc67534cd53ce095dce7cd48364dcf18938d36668929280ae1ead2cd89cca307424bf610e05d1a4464391523b8da6cc54d10427b5c3a31aa4019f0db16e6488c4b5b18609cf4aa88fedbf5403308ca2ad98929022f59e3bbb08852a808f2b4096e1a61473b4a4a1ad498068e3bebd12195e7ee9643c3c7be77ec8fdf8d465384"}, {0xe8, 0x84, 0x8, "4fd774068f3cb0a74c528c613553b5b667b9e80ff11b5595d0dc3fab51336f02b4c36e5c99947863afc751a8e7fef36df7aa359969fed85bc05bb410ac8b0f316cfd7d480b8d3ea94ba689c8e31b4280a430778ca036fb8045cc77419f09335b58e52cd2839e8ffdbebe295a0cf5db372e5412ad985a6bbdb8c5a1222bde465c7cf85dad9663544e3ec79d68c164f200f75a20a92f5659ef8c6a10343102544998c1b7b3467821e66b5557da25735b8509e6121002b120e9ebbd2158902990663aff96dfbce41ab02d55555ba27354d4d900610e3b0ac057"}, {0x100, 0x117, 0x48, "3bbfd597451090fe63b7767b206dff0171d1de2744932ff5462ca7ac4c1cefbfb82905de9b68518119c0781e92e449a6152dc93a872d4df1f3ef84b9de16005c0d979028c7fc7499703bbd90827d899ad15948dcc94e706a6169ce27a47b130a27c6e40535c297714a34975ff492029447ef86a1fa9202b92688a182af6067157710ddea641f117fe28982ea37d50fa10ca0b1e61c4e6a6e21aa4ab595a5251ea82434f61a0e60f64ff946bbb39db378e94297cc7fa9237318a8a2b72e4e8958908a96f47daae1b22afaf98bc7e1f8bfd8fde847e56582b0dfc788be4a2cc4f64db456b50e7fb9b2057ebd"}, {0x90, 0x0, 0x7, "2a913b374f3ca22237afdd539d4e8eaf58245b08ceb808a2227e36412d87b5e578a32ad5639dcc9933fbd9c54e81135a837fc5da35601d82c332647c0a1341657a9013da7ff5b6b8519aaf747f9e56cb6ae11009a17c422dc2d0ca09cb28f9d86311468e6d08414bcc6d4faa30b948df1f8c162fe24ef8aeb4"}, {0x98, 0x11f, 0x5, "ceb33b934112032fe5b7708d418992a17cbdaa47ec1d96b6538081974cf047d1698804bc68038f034d5ddc1955804effa3fd7a697fe806c7997028bbf7c303be2af22235e9209463c466f3bdd81943cf8484d9d5570e351db3150e82df255e4b8088bd96bc12a2f15a5de80e1c9a6ce2872fb40679f8d7395dff0e81771a26d4335ef5ef"}, {0xa8, 0x103, 0x0, "c2cc660537432ab99ee38a27b052677ac05668f7582898dd0dc09d16865b6c83dfaa36acfaaf393f35b213a955407060b3627f177e2c386996c01d0368af59f517c78da470ccc96e51fe69cede3f7615f4bffcbb06c8a0bf3fe8f410aa46e48462b8cc6ec07c0ee08d724f825d5c89fb45caa4aa87c12ce2a8e0e3ae2a93c2b89eefb02ae4e004cec8405120d9a7f547209f93fe8a543a"}], 0x638, 0x8c0}, 0x4}, {{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000007580)="3152006eaec7ab40f9fc6209cac35e6fb4ab9d39e4a4bf1aec55065372e1a8d6e4b3961ceaee9540887aabe4fb95b6bfbb2d479c969e906c16fb6eec8d286f7dd9610c607b0832c4b14091003053e8fc94073730acf8553d2ab8d94c1ca18cbcc94b055f0fd6dafec61055bf95c2da1e3748c43d51aa4cf241a24e28cf5511e0c272424df64de42bce0b6e2dfaae05ee4db46bc6aed3fde9", 0x98}, {&(0x7f0000007640)="26c80130b19328fc5553a4517b2cc6a5e142be5a78c77659729d9748193772f63ee98e7e8637e212ca7348127eb85d9292bc418f68640c3829b8bd790cbe772e20b49b02925c38f3be2e1f497b0a389f24aa8337cf39a9505ac155e9220af16a9cc9b24e13d4c56099bdcbfe", 0x6c}, {&(0x7f00000076c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x800}, 0x756}, {{&(0x7f0000009700)=@can, 0x80, &(0x7f0000008940)=[{&(0x7f0000008780)="efa1a1496274569abf9a268a08dde41fc2ba31e97220e9b8f5edbfdda3590815aced06b05eb460510ab76c7e4fa2eb81d9b9f85a6a4ec3782c746450c9e6a98014804880b7114d28c8cfc29f3a4f3798339cde6c975d18f6ee1a9c31faea5131ebfbcbc4a55e1b571ce466eadb929d4094a70b7806d435b2052630e6f7ba5923149a1cd15cafcf54ec", 0x89}, {&(0x7f0000008840)="422ae5b3c912cd2d2a4e8babf3c8b47cea4187c44029cb118e28e80f7d5261190be6287f2617db41fb9d3b909549671f3466813328af2e94ba6531c80cd2d553cbc2c153f5dc65ad67ac3c93308d86c00564dd002956df82dc9150aa3775f194c630dee7776f292c51c5ae8452187b511f55547d300d8607ad4248f7496edf1ee03f1dbd065ac4154d18f1b45e890a3f4ae6abd51078d9a7f79d4132048b51482531ff9a1835219c3cf5466632c6594da5a3ab625b069b0736ffa4621de2708adeea79d3b32e", 0xc6}], 0x2, &(0x7f0000008980)=[{0xc0, 0x18c, 0x4, "62a6326d16c1714541b5eafe718d7082b1bbbea88146a6cec4b8a2257d8d1d4871d246c330403fad19cc628e92b89d88e259171171ce9eb4944fc23cc13610426f9bf305e40bb7bf517785ae357b6d18a40f4fb1795f373c10336e2be9ca42df8530ad199760e340740c4644768963ab34294257f83e8a401cdb49a48fbeb08fa86a36657d72b9e61f8e700f6a2ed4458fc959a270a89b501c74274bde54fa6e626ac293ea46e0c7a55628"}], 0xc0, 0x20000001}, 0x5ee8}, {{0x0, 0x0, &(0x7f0000008e00)=[{&(0x7f0000008a40)="ef28395f5dacf18f4398c2b85675cde8deab8b1915392d39a2203836f2b700c33624e31bc5fcd748cc022ddc2777b01453b680d9c6b329c3cc7c4574982767c47369755577f9ead59422fe47592958c2554c659490a58e007a663301938d5879a21c6fb76c1d5ce298b0853036f1c8690ff6026a2cb112f3b96b217d1d2c753b39b1082bd9cf23bef6", 0x89}, {&(0x7f0000008b00)="eefc8bf8ce43df4d088a62fc01a5d9eea8809887ac59136fd3f50f94b65421761e49be870bd68791a8b4edcd13e967a4f23effcfad784650fa9e07c89277a6eaa18ccf74727aa2769760b4091eadaed40a5a50f2f215", 0x56}, {&(0x7f0000008b80)="e8cb58b818a27e8e333206d320853eabbe3125d776100c765db522c4ec884cb4acce8cd3f1390fb9eb46bddde5049e0dc5582d22742649785cd9abe907026b9bf1ca7ee3d9962acab9e8dfabad940d4816c186cd1f1aa92d46cd049283c307e173f671bb15eb2592796785817ac3396ac511db89f2ab0886a310049866c43f3b8742cf327ef28549b9bf5713bb529054a812a248cb77df7ddb9573cb6afd9d7263b1b655d74e9207fb16ef0fecdfa0a059c885211735a5d2cd3215a430ea11ba1e4cd342435ac4ed190d08095e14d217553cb5627a0dc39c9bd7", 0xda}, {&(0x7f0000008c80)="a9ce55d8f42d7a2cb6c93385f69d588fd25e616c6ca67c26c6682663c2dfb7e115967b7b6c6bc97024348240d6be0a9624be0b53470295c84c10aa78fe74e559503358431f15664b825651ede619cef916caa4adea58ccefcd82b349a9f74d864f3b048a38111342029659e38aaef178d05c0d0b9a66ce004ebe76a80d", 0x7d}, {&(0x7f0000008d00)="1857a1335da24e727642f8cfd790", 0xe}, {&(0x7f0000008d40)="b5703b7ddad8f57c0ba98f0257aebada21e55c5455734caa027d548ceeb0237fd97968c0e4f06ab4e53c4a7cf57cf7d7178d2cf1dea576a79e562ef0e8294c44c3509b267d329b4be7ba6fbf8a58844157998b2f5ca81f5f8fcf2a8f886109c47ab6481ec63a7644ee524593b025791680ef7437d566e8aa44b46405e6d1d1e7d67f67cbae999ca9d3f6a9c1304e61baac2d842b630cff7db464b25b9023962e1e20de", 0xa3}], 0x6, &(0x7f0000008e80)=[{0x110, 0x11f, 0x309, "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"}, {0xe0, 0x0, 0x6, "4978647ada063143cf86f43a40d1dc738b5fb59723fa8cee15236372ab7ed551f2a496db00d2d16275fd8686786308245ec6e3f7984dc768df14e71edefe8cdbf91acb812855f01c943b5305a40734e8bf809bb5d1d986c6bf96932fa1054c9794409994b87fa0e699668cef5d721e509eb9cb30ef06e906f0edc70e9c2665aab5a40d450a27ac087636ba67a6528bf10131740119a4bcb410340fa3c361b421e5d60f29696d6379a3fbde3da3087000da05f956a63abecedf4c6effc269c3dd08bbf91238d82407189e438f979719e1"}], 0x1f0, 0x11}, 0x6df4000000000000}, {{&(0x7f0000009080)=@ethernet={0x6, @local}, 0x80, &(0x7f00000091c0)=[{&(0x7f0000009100)="9be63452b36ddad1747a111f290986885e325b33ed31f559ba917a73494af8ace09284c5373122a82f3e0b1814a16ecbbaa79c8a0c2709898ecdbcbc3d77de109f30a9385ef2214a40b22d62850c2ca4a656dc76350125b0acb4144a80fd1adfd2f9e58a33b05936dc9055fa6800264cedea1867e78d70104a22961a58d4dfa5984d7bca67", 0x85}], 0x1, &(0x7f0000009200)=ANY=[@ANYBLOB="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"], 0x288, 0x52d4c7d98b9f9ce}, 0x5}], 0x9, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140), 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x801) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) 01:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@loopback, @in6=@local, 0x4e20, 0x7, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x7f, 0x0, r3}, {0x54c3, 0x2, 0x7fffffff, 0x8, 0xdf0, 0x8, 0x8, 0x7}, {0x20, 0x3b, 0x1f, 0x2f}, 0x4, 0x6e6bb5, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d2, 0x32}, 0xa, @in=@multicast1, 0x3505, 0x7, 0x0, 0xf6, 0x3, 0x6, 0x7ff}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open(&(0x7f0000000240)='./file0\x00', 0x6201, 0x100) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000280)=""/255) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 327.827154] binder: 12301:12309 Acquire 1 refcount change on invalid ref 0 ret -22 [ 327.840779] binder: 12301:12313 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 327.859157] binder: BINDER_SET_CONTEXT_MGR already set [ 327.866480] binder: 12301:12317 Acquire 1 refcount change on invalid ref 0 ret -22 01:48:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 327.911581] binder: 12307:12314 ioctl 40046207 0 returned -16 [ 327.940532] binder: 12307:12329 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) [ 327.972817] binder: BINDER_SET_CONTEXT_MGR already set [ 327.982701] binder: 12307:12314 ioctl 40046207 0 returned -16 01:48:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x7, 0x20) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x100000000]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 328.050956] binder: 12307:12329 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x160) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xffffffff) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400040, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x103) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000300)={r3, 0xc0, "c8466aaeb6b6c21d6ba061bb73fa27377d3860b1d8b22b946198f403fd5d352b6f68ab84bfa4a2a4e24874c20fec7bbfffdab0673e058857b737ce4d27eaaf103e230554a50c4e5d9c11e8986f2e5fdc39ebb6dc7b344eaeda9045075e3e3ae0a4d5d88a8c481392a17ae3f16a5c8ae463e49ec4b6054e3da15b30f3e006d20fc072d93b5b5e4da92a9b7d812904d59cc14903880bc8363e06bed2b72203894b2a282d24ce2e718f3ded531b890e0deabc9caacfc511879a93a9176cbfd92102"}, &(0x7f0000000400)=0xc8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x31, 0x0, &(0x7f0000000100)="1e1fc23caa5711258a5ba3f44adcdc152cecbf2b4468d69ef207b82595e66d43f479bd34d8b6cf3b1a76c6b2931748d8a9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b2e2187"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/netstat\x00') ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) capset(&(0x7f00000000c0)={0x200f1526, r2}, &(0x7f0000000100)={0x174f, 0x100000000, 0x8, 0x8, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) [ 328.273712] binder: 12354:12364 unknown command -2027868645 [ 328.292618] binder: BINDER_SET_CONTEXT_MGR already set [ 328.307787] binder: 12354:12364 ioctl c0306201 2000dfd0 returned -22 [ 328.319063] binder: 12359:12365 ioctl 40046207 0 returned -16 01:48:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) restart_syscall() r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x202000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 328.414759] binder: 12354:12364 unknown command -2027868645 [ 328.421251] binder: 12354:12364 ioctl c0306201 2000dfd0 returned -22 [ 328.438004] binder: undelivered death notification, 0000000000000000 [ 328.483990] binder: BINDER_SET_CONTEXT_MGR already set 01:48:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) setpriority(0x2, r4, 0x7ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f638c40000000001800e1ffffff0000"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 328.525552] binder: undelivered death notification, 0000000000000000 [ 328.532670] binder: 12384:12387 ioctl 40046207 0 returned -16 [ 328.555912] binder: 12384:12396 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) 01:48:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 328.595987] binder: undelivered death notification, 0000000000000000 [ 328.619955] binder: undelivered death notification, 0000000000000000 [ 328.692142] binder: BINDER_SET_CONTEXT_MGR already set 01:48:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) 01:48:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 328.738211] binder: 12408:12417 ioctl 40046207 0 returned -16 01:48:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000340)={r3, 0x8, &(0x7f0000000240)=[0x2, 0x5, 0x6, 0x4c, 0x7fffffff, 0x5, 0x7, 0x50], &(0x7f0000000280)=[0xab, 0x7fffffff, 0x1, 0x5], 0x30, 0x7, 0x200, &(0x7f00000002c0)=[0x20, 0x7ab9d8e5, 0x1f, 0x9, 0x3, 0x6, 0x4], &(0x7f0000000300)=[0x7fffffff]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x3e, &(0x7f0000000100)={0x32, 0x4, 0x4, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup2(r2, r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="963bb27d8820000000800000000000000020000000000000", @ANYRES32=r4, @ANYBLOB='\f\x00/dev/amidi#\x00'], 0x2a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x200) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x22000, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000100)={0x2, r6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 328.780023] binder: 12408:12422 unknown command 44 [ 328.785489] binder: 12408:12417 ioctl 540f 20000100 returned -22 [ 328.816526] binder: 12408:12422 ioctl c0306201 2000dfd0 returned -22 01:48:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) statx(r2, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)={0x0, @aes256, 0x2, "50848675986c8b62"}) 01:48:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x13}, 0x9}, r3}}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x100700, 0x10000) [ 328.951880] binder: 12428:12432 unknown command 536872576 [ 328.958091] binder: 12428:12432 ioctl c0306201 20008fd0 returned -22 [ 328.980138] binder: 12428:12445 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) 01:48:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5a73) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:11 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r1}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7480729b9b4aeb7e38fdbefb0000000000000000000000000000000000170000000a9a302a9eb96b09691018073fdb990cdd"], &(0x7f00000001c0)=0x3b) accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r3 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r0, 0x5e303289b8d2a05a, 0x3}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x100000001, 0x4, 0x3ff, 0x9, 0x4ea, 0x0, 0x2, 0x4, 0x8, 0xc8, 0x2}, 0xb) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x7ff, 0x6550a914, 0x0, 0x2b, 0x8, 0x1, 0x6, 0x7f, 0x1, 0x7b}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r1}) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x20, 0x0) 01:48:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00200100"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x5) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 329.192728] binder: 12463:12466 ioctl 40087602 20000000 returned -22 01:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b9c00900000f320f20d835200000000f22d8c4e2d19ac667d10e80000f01c9b8008000000f23c00f21f835010009000f23f80f01cbb8d31b00000f23d80f21f835800000100f23f80f01cb660f383e37", 0x50}], 0x1, 0x64, &(0x7f0000000140)=[@cr0={0x0, 0x21}], 0x1) 01:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) 01:48:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000200)={0x8, 0x7, 0x0, 0x0, &(0x7f00000000c0), 0x18, &(0x7f0000000100)=""/24, 0x9a, &(0x7f0000000140)=""/154}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 329.325856] binder: 12474:12476 unknown command 73728 [ 329.334278] binder: 12474:12479 ioctl 1 20000000 returned -22 [ 329.365483] binder: 12474:12483 unknown command 536872576 [ 329.372442] binder: 12474:12476 ioctl c0306201 2000dfd0 returned -22 [ 329.382681] binder: 12474:12485 unknown command 73728 [ 329.390627] binder: 12474:12483 ioctl c0306201 20008fd0 returned -22 [ 329.412854] binder: 12474:12489 ioctl 1 20000000 returned -22 [ 329.419132] binder: 12474:12485 ioctl c0306201 2000dfd0 returned -22 01:48:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c400000000000000000000000002c5af76fea8e03ee2811fce7fb3f1e3a00a31851cf3e0938260230233bf660214e7692e783cd1c659a589729862f429b96dd18b0f259ac4301854ff39993ed7e27d9035592e4578b781105956d13db377d440ea830a4cba1655e0000950a92b95afc47b7e2ce9e41b5f714c3ea33f8427be1e0929a9d4b489f48458da36490f9ef99c1b8598fc8410ef20fd10b31641f13e22105f2e164ebadc395547bd9423534b0ab296e8b6c36eb"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 329.427682] binder: undelivered death notification, 0000000000000000 01:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3ff) 01:48:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="100020000000964e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x14) rt_sigtimedwait(&(0x7f00000000c0)={0x5}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40000, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 01:48:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x3, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, &(0x7f0000000000)=0x100700, 0x10000) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) [ 329.639604] binder: BINDER_SET_CONTEXT_MGR already set [ 329.646406] binder: 12505:12506 ioctl 40046207 0 returned -16 [ 329.796068] binder: undelivered death notification, 0000000000000000 [ 329.868720] binder: BINDER_SET_CONTEXT_MGR already set [ 329.890165] binder: 12522:12528 ioctl 40046207 0 returned -16 [ 329.898178] binder: 12522:12528 unknown command 2097168 [ 329.899493] binder_thread_write: 1 callbacks suppressed [ 329.899503] binder: 12522:12531 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 329.914344] binder: 12522:12528 ioctl c0306201 20008fd0 returned -22 [ 329.923983] binder: 12522:12531 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 329.931515] binder: BINDER_SET_CONTEXT_MGR already set [ 329.937136] binder: 12522:12528 ioctl 40046207 0 returned -16 [ 329.937481] binder: 12522:12533 unknown command 2097168 [ 329.948627] binder: 12522:12533 ioctl c0306201 20008fd0 returned -22 [ 329.955653] binder: 12522:12528 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 329.955726] binder: 12522:12532 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:12 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:12 executing program 5: pipe(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001c40)={0x10001, {{0x2, 0x4e22, @remote}}, 0x0, 0x5, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @rand_addr=0x9}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23}}]}, 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x80005, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x9, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x4000000000000000, &(0x7f0000001b80)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000240)=0x81) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b40)={0x0}, &(0x7f00000000c0)=0xc) ptrace$setregset(0x4205, r5, 0x7, &(0x7f0000000180)={&(0x7f0000000100)="f722ef04588f9ff3a58b13dd68f26b7d39f146966cb10a52ba79161f1a7761007e8d9cf398cfff5cb80740c95c927e37badc343e3f121e15a6a5a48e6c905fcdae865b6264b6e88b269adea87ca3a540f4697ab01943eb0bb4538b4d869696fb011c68b61340e77c9b0d0b529af493a9c2ccadde6fa5c84a521a2f80", 0x7c}) recvmsg(r3, &(0x7f0000001b00)={&(0x7f0000000280)=@ll, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000001800)=""/104, 0x68}, {&(0x7f0000001880)=""/239, 0xef}, {&(0x7f0000001980)=""/4, 0x4}], 0x8, &(0x7f0000001a40)=""/169, 0xa9}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000001bc0)) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000001c0)='team0\x00') ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0xffffffff, 0x1, 0x40, &(0x7f0000ffd000/0x1000)=nil, 0xff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r4, 0xa, &(0x7f0000001800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="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", 0x1000, 0xfffffffffffffbf1, 0x0, 0x0, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000140)="a83f9cc947c1313fa3cd507dc722d3ab459f15055a79b7da096c5f99051c455350f563ff9e9c5fbbc039b981ebdb9f3f210470f9f9d75d3c0b42ce8dd6039bccd2bb0d5effbf18c7ffbae9ce87a52d3a962076b2d8e94e6a1399aa83c442f14e7df70e9d4aea9f44070eb27ce40b32bb32f148a2fd3696550bd961aba84d1aec8e", 0x81, 0x80000000, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb, 0x1ff, r3, &(0x7f0000000240)="fb5b80", 0x3, 0x9db1, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x89, r2, &(0x7f00000002c0)="9b589096e7a3ca053cbd372e479c52c18e9d75eb6a97e258edd3360744f044acf509f5afb9aef9737191624093be3413d2ca72ef917e60", 0x37, 0x10000, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x20, r1, &(0x7f0000000340)="0686ac38021ccef5304f29455d71fef80f36abb35160d1cae4fb5ecaf08fed23cc8c963594ee73fc31c9fafb483f5e1521bf9bf35bb4cf644955c5164b4186c55e7fcc13b66b673a3da7276e600e38089c0d118dd21d378b6b20a7c739ce682f759a050d4326589d2c7d9210b238ba25184970bd5e7483749e0667e1", 0x7c, 0x80000001, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0xf, 0x7, r1, &(0x7f0000001440)="74d062a32c0d089f10854f926e9e6820caefd4f1784d1fffc38e17adba3d62649a03c542a147a3cb0c308f08072eb1f52fc34b432f06ba1ad7099f5d2b", 0x3d, 0x7, 0x0, 0x0, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f00000014c0)="c367192e0fdd0023753a08afd8aedd604d4d8c52000df9ada98543e09146b9ea8a6a4f7a6f7bdab31d5e8fa2e77a94dfd364da5412dc95d64c540f846fcae200f2bcbe2ad8f31767a368db9024fb909689f89367c808a89909c46c28bbc6e0f218b093cdfa14554eef5e06f0d2bbd3ea27e1e081baba43cfb5bc0a7d3c2030fa6889d4df400ebdc0e51b2ccbbd73438c660522ca6df2edb3e24d8f0dde8a5ab793f69ec7e2778865a1fb499548c13215fa52ab762a7f1d6f2f0254ebcf0a3e36659029f31a47b5", 0xc7, 0x101, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffff8, r2, &(0x7f0000001600)="9033c08880fd044663533d462b613b024d77a934a97e85c470afc2176353bd0eb1930db4447c2eec7182c1bedee6f607fe5fc0a9c4f681ca28b2f740de204b3021dbeb023d6ba5dc06965879e7d636fd977f", 0x52, 0x9, 0x0, 0x2, r2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x840, r3, &(0x7f00000016c0)="934a3b0be6", 0x5, 0xb0, 0x0, 0x2, r2}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x7, 0x81, r3, &(0x7f0000001740)="0d04ccf2248bf9a3af67c19da0cf48f1d16f6ede86d066ea50f8f03852f9f564d1143d55307d5bd977e09a22bc99527d51635033516c7ff503fa7519c702de0157ad00eb1496762ece67cdd42d53bcc28b79df5af5b8753d457b446c37", 0x5d, 0x1, 0x0, 0x0, r2}]) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000100)='\x00', 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) dup(r7) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x5) 01:48:12 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x13b, 0x0, &(0x7f0000000100)=[@acquire], 0x22, 0x0, &(0x7f0000000140)="c5713d4f709202f81cabde81d8f871cdad4652dd132177e9b32a3f6502111cf30d25"}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$TCFLSH(r2, 0x540b, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', r3}) 01:48:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 330.168691] binder: undelivered death notification, 0000000000000000 01:48:12 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x100700, 0x10000) 01:48:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 330.258897] binder: undelivered death notification, 0000000000000000 01:48:13 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:13 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) [ 330.440671] binder: 12566:12567 unknown command 0 [ 330.461468] binder: 12566:12568 unknown command 0 [ 330.467010] binder: 12566:12567 ioctl c0306201 2000dfd0 returned -22 01:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000000200)={0x101ff, 0x3, 0x70e006, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 01:48:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e630c40000000009c2da31272865c875b7ad86a2cf98dbd275aadde24e24b06ed212675b7ac8bec17822653d003706baab4ac13fb2af9e6eb9837fb66ef2a2b45f570cbc0c3e50b9796cea93a35ae445cc9307b5ac6fba0726c198564c0dc8ccd8d"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x20004002) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000009c0)={0x0, 0x0, 0xffffffff00000001, 0x403, 0x10001, 0xffffffff8533eed5}, &(0x7f0000000a00)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000a40)={r3, 0x10001, 0xfff}, 0x8) r4 = dup(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x3}, &(0x7f0000000540)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r5, 0x7f, 0x8}, 0x8) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000700)=0x2, &(0x7f0000000740)=0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x0, 0x20, 0x1, 0x147, 0x28, 0xffffffffffffffff, 0x4}, 0x2c) ioctl$KDENABIO(r4, 0x4b36) sendmsg(r4, &(0x7f00000003c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="a11b2e015064cb63da2289e61d7f6ba0e5a13d407885babddcacb6543f01b9df6a5307f185ba5ae2e61854ad14d757a7aa7aff0395674f449523828b25b4d4368ad7d9c6d2fd2ef911a9deeb7fc5140d914976330f1603f4214881701c2861303d", 0x61}, {&(0x7f0000000240)="00cd101e0ccf2c38da1b064efc6ed931858d3f13698bcdd0567651141de8260a44bfd60af58c796801601dd64999037846e0cf43241e37aa11", 0x39}, {&(0x7f0000000280)="a00b85ccff77623ac290e1f23b60ff2da36525f2bcf6fc787f5b67ff66af5ce986e1272c1693a934911da9bc21ae25c1a9210211a4983ed1015a827d3d5628d16c6c21185f8004832cc91d5f0fa9c79455f0670119bf0f2f1f3971bd4f255b31108f9193b515fb80a0cbffe50f3cca1cbec6ae55a4e564b7e7d1edcd9705810b8daed098cea9b73791d096544fb0c2d62de7a404d61d8b6986", 0x99}, {&(0x7f0000000340)}], 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="d8000000000000003f0100003d5e0000eee4f915f551c818eb23de65dccf52ae591146263017a9a3bf93ba40432512a655666769b636565b7a76b2e467ad6132dec98ec4635c2461bdd49e2b18737b0a62cf37e7108afa8d4439dd62e5f2c9a844e7462d480980f036cd469d2faa9d3f27fbbf191d912f22a83274c218d65e686d9ed78e131ca7b09eaff5e98cea71201caf55618d21e5eaca13bef6ccdb85222587b944c3e2bf6e2a00eb7c4d46af564c0f2b2df2b735544a6158587d20708ab9543e313517c80aec728097162a8898d33ef2e02e555800b8000000000000001f010000fc000000b50b2cd2fb90963613aac221eb704ff86d975d0afba4f5b220443fa970d2be983998d581bf2279bf7f0133fdc4c4736e480e6564e24c5e4e192c2bba47d3387f37e69756c3c3071a0fcb3314ce23d3e76ce8a5787325934b169861b0484d820ae36b32d21d5c5e66b0f79a2e0d24e8e5e84a15920a2803f1394d0891c94991ee75795358466fab5b25d8be48dc6776c9799c1997fe832c08e39e0c381acbe849c9093eaf817131f1d8000000000000000f0100000500000012d2b3f5b5dff2ba4aee068ae74be7ea078fd054cc03f4cadd63fb8dd011129a8c88d213aecdae4aedbed3aa71b4498ffcbea2122d80b5ccbd8c9c162fb9485b06793d569e2c7c7384fdd811798c9966037ddb57b906e0e6a930b426f36254a368fdb74f722ac7a5173a6d577d41259e50955db43a044fd88f0c3056892e309d87b20a5335162e7d648f7354584b2f80a1130da4bd1190712fa5254cceec19615171d8b2dd74eb4c60f4693bbb99674ea00c384fecb6ec19cf31bdea662a74bd00a45e0000000000d800000000000000000000007f0e0000d52b40deb8283201a7be9a5a06619c31be233efe0a7ee9056e0c7e1f6c3930d4d842a83fae390573a1d0013fa4447ff093e81e9324e7ad8471159d3f41aad1c41cdb854dbe578517dacad5e893ce202949cff9597898b3492112e6e3ecc39e57afca3626123aaa8dc8677eedf652a3290ca7d21d0a80cb5844dfd9334cb5deae31e8f1eb5e734e81de00a6e3c3db8d4a9033de03fd7c40c024a98cef2351f44ed1f1afad0d9c8156f497cf70c2a1df9a7e1b7006e76d8e43800ea7d53a42fbaec700000000000000e000000000000000140100001eea0000fda58b59e7287b46d2b965a3d85a3178a0e8aaf788858274ff605b9b58620099c6940c44522d7c8f9526bfd8686ac6bfd3a19736c0235f81998e2421dc19e2ef04ad0e347a5a0be4e279d5df3dd2419eb760f5c53d4eca3e92b82941f4ea0811b1a3f96c8dbed70fe94dc123dbe5abd7169c4df14fce8abe15bba85afa8689573cdbec20cdbf9bc6e94f616cb84b61e6276798f52a1e3137e090b097dc6080065a9cdadcd21ac41e73c458b0b148f63401249a3e98db01002d7d995ec0c63173a5a2c1049ce6a03d65000000000000003000000000000000010000003f0000000332cf01710a9e87a519c034638eda59c4c25bdb4acc44b36b7ae176eb6e9600d000000000000000010100000100008004f48a57b541f108d9cfa3e68d0d84cc61dd6264a809343fe18226b9629658fe4e93cd4450a8aed7f7ad3ba4779509afdf42be64e4a1a2066781de6eb5cb08bef4f4ef70284a41135876af17f3b49431712e1e854f22411e181c7453a97a0589a02db719b2669def2c3e29de181dab2fa6a179004306a4dcab8dfc021df2e1c54cd54cd39cf1509d6b541ec328792e8326541912062dfe85e7cdc8900dfcc6beacfe18e58ad7f4349d1b3c4f9c2eb7489ab0da32de821b8154c99214955a0000d5daf781d53602411561103aec"], 0x520, 0x1}, 0x40090) accept4$vsock_stream(r4, &(0x7f00000004c0), 0x10, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000340)=[@decrefs={0x40046307, 0x3}], 0x58, 0x0, &(0x7f0000000400)="1180d6fd06681234c3a061cc84a0f715695ac803fec0683ada41f873e3a3bc40a62c4f7b285081e733f147a7ee28f397870c32bc22424b62ef857b5042e19e360055bc737903303b4705cb50bfdc3d8055a78974f5c45f7d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f670c4000000000000000c726be7230"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) [ 330.486464] binder: undelivered death notification, 0000000000000000 [ 330.499840] binder: BINDER_SET_CONTEXT_MGR already set [ 330.542197] binder: 12566:12568 ioctl c0306201 2000dfd0 returned -22 [ 330.689590] binder: 12579:12589 unknown command 1074554639 [ 330.706611] binder: 12579:12589 ioctl c0306201 20000040 returned -22 [ 330.760653] binder: 12572:12574 ioctl 40046207 0 returned -16 [ 330.774900] binder: 12572:12580 unknown command 0 [ 330.806345] binder: 12572:12580 ioctl c0306201 20012000 returned -22 [ 330.846369] binder: 12572:12574 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:13 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x5e303289b8d2a05a}, 0xfffffffffffffe5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000100)=0x80, 0x800) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4, 0x4, 0x1, 0x1}}, 0x26) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) quotactl(0x0, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000480)="ff451ad7409a447932ae4984c7ef81f78e61bd1dd1556e2a5a8d61f67475eb5659f17ee27f4776c1b713d84a8850c4645622587bffabdb5e39c9d388371cf3d29ffd9b1d142cb81bd9c468436e6fd3c449bdcfc1c98d116cfcbcaf80b16317b879fdbc658ff2c06f03fbb7") r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000001c0)=""/193) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x745402, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8, 0x30}, &(0x7f0000000200)=0xc) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:13 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) [ 330.891517] binder: 12572:12580 ioctl 540b 3 returned -22 [ 330.897696] binder: 12572:12580 ioctl 8933 20000300 returned -22 [ 330.957222] binder: 12597:12601 unknown command 0 [ 330.967519] binder: 12597:12601 ioctl c0306201 20008fd0 returned -22 [ 330.985445] binder: 12597:12603 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 331.299267] binder: BINDER_SET_CONTEXT_MGR already set [ 331.304844] binder: 12572:12580 ioctl 40046207 0 returned -16 [ 331.311010] binder: 12572:12613 unknown command 0 [ 331.324295] binder: 12572:12613 ioctl c0306201 20012000 returned -22 [ 331.331582] binder: 12572:12613 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000100)=@dstopts={0x2c, 0x4, [], [@pad1, @jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x686}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:48:14 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x841, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:14 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) [ 331.377483] binder: 12572:12580 ioctl 540b 3 returned -22 [ 331.377680] binder: 12572:12586 ioctl 8933 20000300 returned -22 01:48:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r3 = dup2(r1, r1) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000080)=""/159) 01:48:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 01:48:14 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:14 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)="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", 0x0, 0xfb, &(0x7f0000000080)=""/251, 0x0, 0x0, [], r0, 0x4000000000000000}, 0xffffffffffffffd7) r2 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000380)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, &(0x7f00000003c0)="31dbd8cac6f3ca4bb5efcbe4817e21983f13df7f5adeacaa41bab79ddfe92baded1747e9397813dd34b2db00fc9de5b8c2cad4e4a5da7601b7", &(0x7f0000000400)=""/228}, 0x18) inotify_add_watch(r3, &(0x7f0000000540)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fstatfs(r1, &(0x7f0000000640)=""/226) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 01:48:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x69, "9acd8fab1b0d89fc5f7b1d3137cc327179ea444c28321e9fa3b554f8bec73083c0955f161c9e5d151d69f12131d00c550dc68640218da70d3e08648df2f33fb721ac8aa379e78c53656306bf9b78617b63a910313c7c83366867b729101444a21ab4b31f0792ad4d3e"}, &(0x7f0000000340)=0x71) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x1000, 0x9, 0x0, 0x8, 0x3, 0x5f9, 0x0, 0x100000001, r4}, &(0x7f00000003c0)=0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 332.171376] binder: BINDER_SET_CONTEXT_MGR already set [ 332.177134] binder: 12662:12663 ioctl 40046207 0 returned -16 [ 332.184712] binder: 12662:12663 unknown command 0 [ 332.189729] binder: 12662:12663 ioctl c0306201 20012000 returned -22 [ 332.198219] binder_thread_write: 5 callbacks suppressed [ 332.198231] binder: 12662:12664 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 332.211481] binder: 12662:12664 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 332.218840] binder: 12662:12664 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 332.970821] binder: BINDER_SET_CONTEXT_MGR already set [ 332.971984] binder: 12662:12668 unknown command 0 [ 332.976288] binder: 12662:12666 ioctl 40046207 0 returned -16 [ 332.982196] binder: 12662:12668 ioctl c0306201 20012000 returned -22 [ 332.993895] binder: 12662:12667 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 333.001269] binder: 12662:12666 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 333.001306] binder: 12662:12667 BC_DEAD_BINDER_DONE 0000000000000000 not found 01:48:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0xfffffffffffffeef, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:15 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0xfffffffffffffe0d, 0x0, &(0x7f00000001c0)="e387efb2592afe94218d4790efa0ffc1859132342b64f21076a635b2814d5d43d710feb17f77cba907fedd9cd0ff00f55d2e3c878acd7de9ace6146ad5f9ce3d7815bdd0e690067cf29f9ca2f0b0bc79861cff5c20b3b44787dacb020301701787214c8e167ccafe5c21d807e8c2e1b2ce92c10d6e127f7b081ff0ac3107c980391aa0209fba41a8ed4d0000000000000000"}) dup(r1) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c400000000000e9000000000400"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair(0x0, 0x80000, 0x100, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) sendto$inet(r2, &(0x7f00000001c0)="71c5298c8a57b2530bb134f9f25a190280587bf48d28863ff41033a6", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000000080)=""/51, &(0x7f00000000c0)=0x33) 01:48:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200803, 0x0) getsockopt$packet_int(r3, 0x107, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000200)={0x7, 0x400, 0x10001, 0xffffffffffff8000, 0x6, 0x101, 0x6, 0x2f30, 0x2c06, 0x936}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000140)={0x3ff}, 0x1) 01:48:15 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) [ 333.128447] binder: 12672:12681 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 000400000000e900 01:48:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)="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", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x60100, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) [ 333.249259] binder: 12672:12688 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 000400000000e900 01:48:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x11, 0x5, 0x12, 0xa, 0x7ff, 0x5, 0xcf}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x6b, 0x0, &(0x7f0000000100)="8315a96dcb03767056371712994831b996e7e68bf216bb20810cdeb294afe533100769395c222fc2762214f219e0cae2a0098b5a115c5eee84a2d44f214ee8dc3b6ea90a62f82645379e5af2003dfd28255273f6ef6b57ffb18c524a597c000b090ed5ea648d4879a0fc33"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r3, 0x3ff, 0x8, r3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4200, 0x1c0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 333.374584] binder: 12695:12696 unknown command 536872576 [ 333.380375] binder: 12695:12696 ioctl c0306201 20008fd0 returned -22 01:48:16 executing program 5: getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32]], @ANYRES32], &(0x7f0000000340)="cb2c0b37a209e6aedd6017e297a4afdadc1c27da996f8b7b2d61f46500bdfba4ab794b654c1fe7e766d682421b4ba7347dd9ac274e390fc9fcc2ff1345ca097185741c4b64771f01f9f30606b2caa0c27c9e35d5a524dea10182280bfdce5202cf0fe3921146e5591d6c458cf0eecc8c925aa2ce79aa5d46831effff0000d692c9f0ae96c313b5ce6b2929ec7e37117bfb75502bb89413ed6b11d90d5f86cd90114fc4ec0697022deb7d0ea9084fd4bc24e1cb7b4f34eb66a504cabd0d3a04dd06f6bca6e3a6e9d9d2110b74a4eb83b6952ffdbb911e714a29e8534ad488dcf79615d980c7e3790753b8980c832d3e80295f647d3e0426ff659a36a1deebd72b327933eb98183dc4beb187ff6aa3e973a7855b5d12d7e9a8737564f8127f6d866408d40400000097e60120cc471285878bef041b471812b55c7e9fc0341f0fb418c1b882bf65fc605ed5555e94eb269e761d86a8219c7698143a62629f8172d3cf3091ee03428f62fa9fb22c9df199244de128fe0a196d175f0082016139b30790b9ab41a1a1efbee0df7f11d24385367ca6fd7389255273630ddeb9a0d61d784084da38c28937f884ac47350e56f8e4d26cf4a3152e77c1d534", 0x0, 0xfb, &(0x7f0000000500)=""/251}, 0x48) r1 = socket$kcm(0xa, 0x100000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x59, 0x3e, &(0x7f00000008c0)="32c357ca587a363b3cdd9acd69fd70e9bc23c38c29a880bf1708b931157ead155bd812538418425b0f58347136f9f423685ab47852053446f69521048e044b2ca7064d3c123449456f1bec98784489a8a944baa6e2d65b1f9a", &(0x7f0000000940)=""/62, 0xff}, 0x28) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x10000) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000140)=""/213) mq_unlink(&(0x7f0000000600)="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") socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x1000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f00000002c0)='./file0\x00', 0x202000, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='veth1_to_team\x00', 0x10) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x101, 0x220000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:48:16 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x100700, 0x10000) [ 333.757398] binder: BINDER_SET_CONTEXT_MGR already set [ 333.762744] binder: 12711:12725 ioctl 40046207 0 returned -16 [ 333.782558] binder: 12711:12727 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 333.790612] binder: 12711:12727 ioctl c0306201 200005c0 returned -14 01:48:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) acct(&(0x7f0000000100)='./file0\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 01:48:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_getsetattr(r2, &(0x7f0000000100)={0x4, 0x2, 0xfff, 0x38d0, 0x9, 0x1f, 0x5, 0x100000001}, &(0x7f0000000140)) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffdfd, &(0x7f0000000540)}) 01:48:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) recvmmsg(r1, &(0x7f0000004100)=[{{&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=""/4096, 0x1000, 0x3}, 0x8000}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000002440)=""/211, 0xd3}, {&(0x7f0000000340)=""/75, 0x4b}], 0x2, &(0x7f0000002540)=""/183, 0xb7, 0x7fff}, 0x3}, {{&(0x7f0000002600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f0000002740)=""/217, 0xd9}, {&(0x7f0000002840)=""/217, 0xd9}, {&(0x7f0000002940)=""/245, 0xf5}, {&(0x7f0000002a40)=""/20, 0x14}, {&(0x7f0000002a80)=""/153, 0x99}, {&(0x7f0000002b40)=""/222, 0xde}, {&(0x7f0000002c40)=""/214, 0xd6}, {&(0x7f0000002d40)=""/185, 0xb9}], 0x9, &(0x7f0000002ec0)=""/144, 0x90, 0x1}, 0x401}, {{&(0x7f0000002f80)=@l2, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/81, 0x51}, {&(0x7f0000003080)=""/8, 0x8}], 0x2, &(0x7f0000003100)=""/4096, 0x1000, 0x5}, 0x3}], 0x4, 0x8c6067b3788ede43, &(0x7f0000004200)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000004240)={0x0, 0x2c, "a70fd9fb9250fe26a3c5648339c289553065e15aa669e096b89f8890a0bfdd5a453258bb1df31aeca57717dc"}, &(0x7f0000004280)=0x34) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000042c0)={r4, 0x7, 0xa, [0x81, 0xfffffffffffffbff, 0x4096, 0x8, 0xc9, 0x40, 0x9, 0x44, 0x8, 0x4]}, &(0x7f0000004300)=0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70e000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff, 0x203) write$9p(r5, &(0x7f0000000080)="3e78bb7b6df6c0a1705b12dabe7c9dcfda6c95d15e684f399162e7ebda5ff8774ca592ef8e90a82c26c10f0c963b2e5132dd9bbf5042c60c392091153df741ea27cabcee3bc636bb37a32a8aea", 0x4d) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) 01:48:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:48:16 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) 01:48:16 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10000) [ 333.847681] binder: 12711:12729 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 333.897871] binder: 12734:12738 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 333.944758] binder: 12734:12738 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 333.985516] ================================================================== [ 333.993230] BUG: KASAN: slab-out-of-bounds in fscache_alloc_cookie+0x7ad/0x880 [ 334.000605] Read of size 4 at addr ffff8801c6680454 by task syz-executor5/12739 [ 334.000612] [ 334.000630] CPU: 1 PID: 12739 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #67 [ 334.000641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.000647] Call Trace: [ 334.000674] dump_stack+0x1c4/0x2b4 [ 334.000700] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.037805] ? printk+0xa7/0xcf [ 334.041106] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 334.045889] print_address_description.cold.8+0x9/0x1ff [ 334.051272] kasan_report.cold.9+0x242/0x309 [ 334.055694] ? fscache_alloc_cookie+0x7ad/0x880 [ 334.060378] __asan_report_load4_noabort+0x14/0x20 [ 334.065326] fscache_alloc_cookie+0x7ad/0x880 [ 334.069842] ? fscache_cookie_init_once+0x80/0x80 [ 334.074831] ? rpcauth_cache_shrink_scan+0x180/0x180 [ 334.079953] ? __kmalloc_track_caller+0x14a/0x750 [ 334.084854] ? kstrdup+0x39/0x70 [ 334.088292] ? nfs_alloc_client+0x383/0x760 [ 334.092627] ? nfs_get_client+0x8e8/0x14d0 [ 334.096873] ? nfs_init_server+0x357/0x1010 [ 334.101206] ? nfs_create_server+0x86/0x5f0 [ 334.105548] ? nfs_fs_mount+0x17f8/0x2f1c [ 334.109707] ? mount_fs+0xae/0x31d [ 334.113261] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 334.118042] ? do_mount+0x581/0x31f0 [ 334.121770] ? ksys_mount+0x12d/0x140 [ 334.125581] ? __x64_sys_mount+0xbe/0x150 [ 334.129742] ? do_syscall_64+0x1b9/0x820 [ 334.133823] __fscache_acquire_cookie+0x230/0xb60 [ 334.138688] ? fscache_cookie_put+0x880/0x880 [ 334.143205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.148766] ? check_preemption_disabled+0x48/0x200 [ 334.153801] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 334.159354] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 334.164647] ? rcu_pm_notify+0xc0/0xc0 [ 334.168556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.174192] nfs_fscache_get_client_cookie+0x463/0x600 [ 334.179489] ? nfs_readpage_from_fscache_complete+0x200/0x200 [ 334.185396] nfs_alloc_client+0x563/0x760 [ 334.189572] ? register_nfs_version+0x280/0x280 [ 334.194265] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 334.198880] nfs_get_client+0x8e8/0x14d0 [ 334.202953] ? kmem_cache_alloc_trace+0x152/0x750 [ 334.207809] ? mount_fs+0xae/0x31d [ 334.211375] ? nfs_put_client+0x30/0x30 [ 334.215359] ? nfs_alloc_server+0x5ca/0x730 [ 334.219762] ? depot_save_stack+0x292/0x470 [ 334.224101] ? nfs_wait_client_init_complete+0x210/0x210 [ 334.229573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.235128] ? check_preemption_disabled+0x48/0x200 [ 334.240157] ? check_preemption_disabled+0x48/0x200 [ 334.245191] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 334.250397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.250422] nfs_init_server+0x357/0x1010 [ 334.250442] ? nfs_clone_server+0x920/0x920 [ 334.250460] ? nfs_alloc_fattr+0x48/0x1d0 [ 334.268596] ? rcu_read_lock_sched_held+0x108/0x120 [ 334.273645] nfs_create_server+0x86/0x5f0 [ 334.273670] nfs_try_mount+0x180/0xa80 [ 334.273692] ? lock_downgrade+0x900/0x900 [ 334.285869] ? nfs_request_mount.constprop.18+0x920/0x920 [ 334.291425] ? kasan_check_read+0x11/0x20 [ 334.295592] ? do_raw_spin_unlock+0xa7/0x2f0 [ 334.300019] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 334.304631] ? _raw_spin_unlock+0x2c/0x50 [ 334.308797] ? find_nfs_version+0x138/0x190 [ 334.313486] nfs_fs_mount+0x17f8/0x2f1c [ 334.317477] ? nfs_show_options+0x250/0x250 [ 334.321817] ? nfs_clone_super+0x420/0x420 [ 334.326074] ? nfs_parse_mount_options+0x2660/0x2660 [ 334.331199] ? lock_downgrade+0x900/0x900 [ 334.335372] mount_fs+0xae/0x31d [ 334.338762] vfs_kern_mount.part.35+0xdc/0x4f0 [ 334.343363] ? may_umount+0xb0/0xb0 [ 334.347000] ? _raw_read_unlock+0x2c/0x50 [ 334.351165] ? __get_fs_type+0x97/0xc0 [ 334.355077] do_mount+0x581/0x31f0 [ 334.355094] ? trace_hardirqs_off+0x310/0x310 [ 334.355107] ? retint_kernel+0x1b/0x2d [ 334.355127] ? copy_mount_string+0x40/0x40 [ 334.367037] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 334.367068] ? retint_kernel+0x2d/0x2d [ 334.367093] ? copy_mount_options+0x1f3/0x380 [ 334.367114] ? copy_mount_options+0x1f9/0x380 [ 334.388969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.394525] ? copy_mount_options+0x288/0x380 [ 334.399056] ksys_mount+0x12d/0x140 [ 334.402698] __x64_sys_mount+0xbe/0x150 [ 334.406695] do_syscall_64+0x1b9/0x820 [ 334.410597] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 334.415983] ? syscall_return_slowpath+0x5e0/0x5e0 [ 334.415998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.416016] ? trace_hardirqs_on_caller+0x310/0x310 [ 334.416032] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 334.416059] ? prepare_exit_to_usermode+0x291/0x3b0 [ 334.430849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.430876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.430896] RIP: 0033:0x457569 [ 334.454626] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.473550] RSP: 002b:00007fb1d735dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.481284] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 334.481295] RDX: 000000002015bffc RSI: 0000000020343ff8 RDI: 0000000020000300 [ 334.481305] RBP: 000000000072bf00 R08: 000000002000a000 R09: 0000000000000000 [ 334.481315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1d735e6d4 [ 334.481325] R13: 00000000004c289b R14: 00000000004d3c78 R15: 00000000ffffffff [ 334.481349] [ 334.503162] Allocated by task 12739: [ 334.503182] save_stack+0x43/0xd0 [ 334.503194] kasan_kmalloc+0xc7/0xe0 [ 334.503209] __kmalloc+0x14e/0x760 [ 334.503226] fscache_alloc_cookie+0x6f7/0x880 [ 334.503242] __fscache_acquire_cookie+0x230/0xb60 [ 334.503261] nfs_fscache_get_client_cookie+0x463/0x600 [ 334.548405] nfs_alloc_client+0x563/0x760 [ 334.552560] nfs_get_client+0x8e8/0x14d0 [ 334.552580] nfs_init_server+0x357/0x1010 [ 334.560781] nfs_create_server+0x86/0x5f0 [ 334.564937] nfs_try_mount+0x180/0xa80 [ 334.568837] nfs_fs_mount+0x17f8/0x2f1c [ 334.572820] mount_fs+0xae/0x31d [ 334.576207] vfs_kern_mount.part.35+0xdc/0x4f0 [ 334.580801] do_mount+0x581/0x31f0 [ 334.584344] ksys_mount+0x12d/0x140 01:48:16 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) 01:48:16 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) 01:48:17 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) 01:48:17 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) 01:48:17 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) 01:48:17 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)="922c3a7365637572697479707070312a5b00"}, 0x30) setpgid(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100700, 0x10000) [ 334.587982] __x64_sys_mount+0xbe/0x150 [ 334.591964] do_syscall_64+0x1b9/0x820 [ 334.595863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.601059] [ 334.602691] Freed by task 7243: [ 334.602710] save_stack+0x43/0xd0 [ 334.609436] __kasan_slab_free+0x102/0x150 [ 334.609449] kasan_slab_free+0xe/0x10 [ 334.609464] kfree+0xcf/0x230 [ 334.609478] sel_write_context+0x244/0x450 [ 334.609492] selinux_transaction_write+0xf4/0x160 [ 334.609511] __vfs_write+0x119/0x9f0 [ 334.624867] vfs_write+0x1fc/0x560 [ 334.624881] ksys_write+0x101/0x260 [ 334.624894] __x64_sys_write+0x73/0xb0 [ 334.624908] do_syscall_64+0x1b9/0x820 [ 334.624923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.624927] [ 334.624939] The buggy address belongs to the object at ffff8801c6680440 [ 334.624939] which belongs to the cache kmalloc-32 of size 32 [ 334.624952] The buggy address is located 20 bytes inside of [ 334.624952] 32-byte region [ffff8801c6680440, ffff8801c6680460) [ 334.624957] The buggy address belongs to the page: [ 334.624971] page:ffffea000719a000 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff8801c6680fc1 [ 334.633529] flags: 0x2fffc0000000100(slab) [ 334.633558] raw: 02fffc0000000100 ffffea0007226488 ffffea00075ec408 ffff8801da8001c0 [ 334.633576] raw: ffff8801c6680fc1 ffff8801c6680000 000000010000003d 0000000000000000 [ 334.633583] page dumped because: kasan: bad access detected [ 334.633588] [ 334.633593] Memory state around the buggy address: [ 334.633611] ffff8801c6680300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 334.667808] ffff8801c6680380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 334.667820] >ffff8801c6680400: fb fb fb fb fc fc fc fc 00 00 06 fc fc fc fc fc [ 334.667827] ^ [ 334.667839] ffff8801c6680480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 334.667849] ffff8801c6680500: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 334.667867] ================================================================== [ 334.776175] Disabling lock debugging due to kernel taint [ 334.811897] rpcbind: RPC call returned error 22 [ 334.836648] Kernel panic - not syncing: panic_on_warn set ... [ 334.836648] [ 334.844082] CPU: 1 PID: 12739 Comm: syz-executor5 Tainted: G B 4.19.0-rc8+ #67 [ 334.852752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.857373] binder: BINDER_SET_CONTEXT_MGR already set [ 334.862107] Call Trace: [ 334.862132] dump_stack+0x1c4/0x2b4 [ 334.862154] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.867502] binder: 12767:12768 ioctl 40046207 0 returned -16 [ 334.870012] panic+0x238/0x4e7 [ 334.870029] ? add_taint.cold.5+0x16/0x16 [ 334.892087] ? preempt_schedule+0x4d/0x60 [ 334.896253] ? ___preempt_schedule+0x16/0x18 [ 334.900677] ? trace_hardirqs_on+0xb4/0x310 [ 334.905020] kasan_end_report+0x47/0x4f [ 334.909014] kasan_report.cold.9+0x76/0x309 [ 334.913357] ? fscache_alloc_cookie+0x7ad/0x880 [ 334.918040] __asan_report_load4_noabort+0x14/0x20 [ 334.923027] fscache_alloc_cookie+0x7ad/0x880 [ 334.927560] ? fscache_cookie_init_once+0x80/0x80 [ 334.932427] ? rpcauth_cache_shrink_scan+0x180/0x180 [ 334.937555] ? __kmalloc_track_caller+0x14a/0x750 [ 334.942415] ? kstrdup+0x39/0x70 [ 334.945793] ? nfs_alloc_client+0x383/0x760 [ 334.950131] ? nfs_get_client+0x8e8/0x14d0 [ 334.954378] ? nfs_init_server+0x357/0x1010 [ 334.958714] ? nfs_create_server+0x86/0x5f0 [ 334.963038] ? nfs_fs_mount+0x17f8/0x2f1c [ 334.967179] ? mount_fs+0xae/0x31d [ 334.970714] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 334.975461] ? do_mount+0x581/0x31f0 [ 334.979165] ? ksys_mount+0x12d/0x140 [ 334.982955] ? __x64_sys_mount+0xbe/0x150 [ 334.987094] ? do_syscall_64+0x1b9/0x820 [ 334.991151] __fscache_acquire_cookie+0x230/0xb60 [ 334.996002] ? fscache_cookie_put+0x880/0x880 [ 335.000504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.006033] ? check_preemption_disabled+0x48/0x200 [ 335.011052] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 335.016582] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 335.021847] ? rcu_pm_notify+0xc0/0xc0 [ 335.025729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.031262] nfs_fscache_get_client_cookie+0x463/0x600 [ 335.036529] ? nfs_readpage_from_fscache_complete+0x200/0x200 [ 335.042416] nfs_alloc_client+0x563/0x760 [ 335.046568] ? register_nfs_version+0x280/0x280 [ 335.051332] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 335.055915] nfs_get_client+0x8e8/0x14d0 [ 335.059967] ? kmem_cache_alloc_trace+0x152/0x750 [ 335.064822] ? mount_fs+0xae/0x31d [ 335.068358] ? nfs_put_client+0x30/0x30 [ 335.072321] ? nfs_alloc_server+0x5ca/0x730 [ 335.076634] ? depot_save_stack+0x292/0x470 [ 335.080973] ? nfs_wait_client_init_complete+0x210/0x210 [ 335.086416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.091945] ? check_preemption_disabled+0x48/0x200 [ 335.096954] ? check_preemption_disabled+0x48/0x200 [ 335.101957] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 335.107143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.112676] nfs_init_server+0x357/0x1010 [ 335.116816] ? nfs_clone_server+0x920/0x920 [ 335.121124] ? nfs_alloc_fattr+0x48/0x1d0 [ 335.125282] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.130294] nfs_create_server+0x86/0x5f0 [ 335.134432] nfs_try_mount+0x180/0xa80 [ 335.138312] ? lock_downgrade+0x900/0x900 [ 335.142470] ? nfs_request_mount.constprop.18+0x920/0x920 [ 335.148014] ? kasan_check_read+0x11/0x20 [ 335.152172] ? do_raw_spin_unlock+0xa7/0x2f0 [ 335.156599] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 335.161187] ? _raw_spin_unlock+0x2c/0x50 [ 335.165328] ? find_nfs_version+0x138/0x190 [ 335.169644] nfs_fs_mount+0x17f8/0x2f1c [ 335.173612] ? nfs_show_options+0x250/0x250 [ 335.177922] ? nfs_clone_super+0x420/0x420 [ 335.182143] ? nfs_parse_mount_options+0x2660/0x2660 [ 335.187235] ? lock_downgrade+0x900/0x900 [ 335.191390] mount_fs+0xae/0x31d [ 335.194748] vfs_kern_mount.part.35+0xdc/0x4f0 [ 335.199320] ? may_umount+0xb0/0xb0 [ 335.202934] ? _raw_read_unlock+0x2c/0x50 [ 335.207069] ? __get_fs_type+0x97/0xc0 [ 335.210954] do_mount+0x581/0x31f0 [ 335.214483] ? trace_hardirqs_off+0x310/0x310 [ 335.218986] ? retint_kernel+0x1b/0x2d [ 335.222865] ? copy_mount_string+0x40/0x40 [ 335.227114] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 335.231861] ? retint_kernel+0x2d/0x2d [ 335.235737] ? copy_mount_options+0x1f3/0x380 [ 335.240219] ? copy_mount_options+0x1f9/0x380 [ 335.244701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.250223] ? copy_mount_options+0x288/0x380 [ 335.254706] ksys_mount+0x12d/0x140 [ 335.258317] __x64_sys_mount+0xbe/0x150 [ 335.262282] do_syscall_64+0x1b9/0x820 [ 335.266173] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 335.271525] ? syscall_return_slowpath+0x5e0/0x5e0 [ 335.276452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.281286] ? trace_hardirqs_on_caller+0x310/0x310 [ 335.286297] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 335.291305] ? prepare_exit_to_usermode+0x291/0x3b0 [ 335.296312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.301145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.306317] RIP: 0033:0x457569 [ 335.309498] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.328402] RSP: 002b:00007fb1d735dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.336100] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 335.343374] RDX: 000000002015bffc RSI: 0000000020343ff8 RDI: 0000000020000300 [ 335.350661] RBP: 000000000072bf00 R08: 000000002000a000 R09: 0000000000000000 [ 335.357936] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1d735e6d4 [ 335.365209] R13: 00000000004c289b R14: 00000000004d3c78 R15: 00000000ffffffff [ 335.373449] Kernel Offset: disabled [ 335.377073] Rebooting in 86400 seconds..