80, [], 0xbb}, 0x3}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=""/80, &(0x7f0000000200)=0x50) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0xbf) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x41, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1ff, 0x84101) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') 20:50:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6000]}, 0x48) [ 751.237360] binder: 24170:24171 ioctl 40046207 0 returned -16 [ 751.427680] binder: 24170:24171 ERROR: BC_REGISTER_LOOPER called without request [ 751.435395] binder: 24171 RLIMIT_NICE not set 20:50:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x68, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:50:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffff80]}, 0x48) 20:50:58 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x2000000}}, 0x11) 20:50:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:50:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001de00000002", @ifru_ivalue=0x907000}) 20:50:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000a00000002", @ifru_ivalue=0x907000}) 20:50:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000063fc900000005864047798b258ed265750e6e6d07d4e191a1f989377007d34abf40c606f60f28d4b2921ea4c8fa1e070900bb98b7559414d05541b53517cdf52762943393158959003b2cbdae7ec720e6ff0000000010710e135ad807"], 0x5c) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x103000, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000200)={0xc00000000000000, 0x10000, 0x5, 0x4, 0x20}) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)) r4 = memfd_create(&(0x7f00000000c0)='/dev/ptmx\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000140)={{0x1f}, {0x80000001, 0x1}, 0xf0, 0x1, 0x2}) [ 751.657470] binder: 24145:24148 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 751.665323] binder: 24145:24148 unknown command 0 [ 751.670326] binder: 24145:24148 ioctl c0306201 200002c0 returned -22 20:50:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x70]}, 0x48) 20:50:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 751.754406] binder: 24204:24206 ERROR: BC_REGISTER_LOOPER called without request [ 751.762119] binder: 24206 RLIMIT_NICE not set 20:50:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000d00000002", @ifru_ivalue=0x907000}) 20:50:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), &(0x7f0000000000)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f23d20f01c966b8060000000f23c00f21f86635010007000f23f80f080f73d5a9360f080f5f9000003ef236d3dcbaf80c66b84c90b58666efbafc0cedbaf80c66b80e76718066efbafc0cb003ee", 0x4e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:50:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4800000000000000]}, 0x48) 20:50:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x100000000000000, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:50:58 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x800e}}, 0x11) 20:50:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000cf01000000000002", @ifru_ivalue=0x907000}) [ 752.018606] binder: 24170:24171 unknown command 0 [ 752.023554] binder: 24170:24171 ioctl c0306201 200002c0 returned -22 20:50:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 752.144228] binder: BINDER_SET_CONTEXT_MGR already set [ 752.183123] binder: 24234:24236 ioctl 40046207 0 returned -16 [ 752.194648] binder: 24234:24236 ERROR: BC_REGISTER_LOOPER called without request [ 752.202339] binder: 24236 RLIMIT_NICE not set 20:50:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000380)) fcntl$notify(r1, 0x402, 0xfffffffffffffffd) exit(0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000000)=""/147) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00') sendfile(r2, r3, &(0x7f00000000c0), 0x80000002) 20:50:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x400000000000000]}, 0x48) 20:50:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6c00000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:50:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:50:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x200000000000000}}, 0x11) 20:50:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000f00000002", @ifru_ivalue=0x907000}) 20:50:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001e600000002", @ifru_ivalue=0x907000}) 20:50:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xc0ffffff00000000]}, 0x48) 20:50:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:50:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x500]}, 0x48) 20:50:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d6000000000002", @ifru_ivalue=0x907000}) [ 752.636732] binder: 24267:24269 ERROR: BC_REGISTER_LOOPER called without request [ 752.644626] binder: 24269 RLIMIT_NICE not set 20:50:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001ca00000002", @ifru_ivalue=0x907000}) 20:50:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0xfdfdffff00000000, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:50:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff00000000000000]}, 0x48) 20:50:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0xffff0000}}, 0x11) 20:50:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 753.025334] binder: BINDER_SET_CONTEXT_MGR already set [ 753.055484] binder: 24296:24297 ioctl 40046207 0 returned -16 [ 753.082007] binder: 24296:24297 ERROR: BC_REGISTER_LOOPER called without request [ 753.089927] binder: 24297 RLIMIT_NICE not set 20:51:00 executing program 5: r0 = socket$inet6(0xa, 0x80000000005, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x400) r1 = gettid() r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3ff, 0x20000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xffff, 0x4, 0x7, 0x81, 0x0, 0x5, 0x40, 0x8, 0xfffffffffffffffe, 0xff, 0x81, 0x8, 0x6, 0x7, 0xffffffff, 0x8, 0x200, 0x2, 0x8, 0x7, 0x9, 0x3a9, 0x2, 0x8d, 0x3, 0x0, 0x2, 0x81, 0x7, 0x42, 0x2bd, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x84, 0x6, 0x3, 0x4, 0x100000001, 0x81}, r1, 0xa, r2, 0x8) r3 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) 20:51:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001db000000000002", @ifru_ivalue=0x907000}) 20:51:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001200000002", @ifru_ivalue=0x907000}) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x700000000000000]}, 0x48) 20:51:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:00 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x1000000}}, 0x11) 20:51:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x200000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7000000000000000]}, 0x48) [ 753.584566] binder: 24320:24324 ERROR: BC_REGISTER_LOOPER called without request [ 753.592283] binder: 24324 RLIMIT_NICE not set 20:51:00 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='bdev}trustedself}.\x00', 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000200)={0x3, 0x59}) syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r0, &(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) fchmod(r0, 0x56) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000500), 0x1000) 20:51:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000400000002", @ifru_ivalue=0x907000}) 20:51:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001c700000002", @ifru_ivalue=0x907000}) 20:51:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7a000000]}, 0x48) 20:51:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x4008000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="09bdd2c3ae66ff0100000a"], 0xb) [ 753.925498] binder: BINDER_SET_CONTEXT_MGR already set 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x1800]}, 0x48) 20:51:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x1000, &(0x7f0000000040)="29a6fde931b7d6a1601070") write$evdev(r0, &(0x7f0000000280)=[{{}, 0x1, 0x45, 0x2}, {}], 0x30) [ 753.963125] binder: 24358:24361 ioctl 40046207 0 returned -16 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x1800000000000000]}, 0x48) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3f00]}, 0x48) 20:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x93e}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4]}, 0x48) 20:51:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x500000000000000]}, 0x48) [ 754.275860] binder: 24358:24361 ERROR: BC_REGISTER_LOOPER called without request [ 754.283574] binder: 24361 RLIMIT_NICE not set 20:51:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x700000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:01 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x2}}, 0x11) 20:51:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x400, 0x400000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)=ANY=[]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:51:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000000000000f", @ifru_ivalue=0x907000}) 20:51:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7]}, 0x48) [ 754.505483] binder: 24410:24411 ERROR: BC_REGISTER_LOOPER called without request [ 754.513238] binder: 24411 RLIMIT_NICE not set 20:51:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0xfdfdffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001300000000000002", @ifru_ivalue=0x907000}) 20:51:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}, 0x48) 20:51:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001400000000000002", @ifru_ivalue=0x907000}) 20:51:01 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) 20:51:01 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x11000000}}, 0x11) [ 754.848913] binder: BINDER_SET_CONTEXT_MGR already set 20:51:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}, 0x48) 20:51:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:01 executing program 5: r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)=0x1000004001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf201, 0x4000) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0x0, 0x1000, 0x0, 0x0, 0x4}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 754.875455] binder: 24432:24433 ioctl 40046207 0 returned -16 [ 754.901870] binder: 24432:24433 ERROR: BC_REGISTER_LOOPER called without request [ 754.909645] binder: 24433 RLIMIT_NICE not set 20:51:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001cf000000000002", @ifru_ivalue=0x907000}) 20:51:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffffc0]}, 0x48) 20:51:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001100000002", @ifru_ivalue=0x907000}) 20:51:01 executing program 5: r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'dummy0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'bridge_slave_0\x00', 0xfff}) 20:51:01 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x800e0000}}, 0x11) 20:51:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6c, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 755.352452] binder: 24470:24471 ERROR: BC_REGISTER_LOOPER called without request [ 755.360184] binder: 24471 RLIMIT_NICE not set 20:51:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0xfffffdfd, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) msgget$private(0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x5}, 0x8) getuid() getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x8}, &(0x7f0000000100)=0x8) getgid() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x7) 20:51:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x60]}, 0x48) 20:51:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d7000000000002", @ifru_ivalue=0x907000}) 20:51:02 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x100000000000000}}, 0x11) 20:51:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000020", @ifru_ivalue=0x907000}) 20:51:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4000]}, 0x48) [ 755.698788] binder: BINDER_SET_CONTEXT_MGR already set [ 755.718760] binder: 24494:24495 ioctl 40046207 0 returned -16 20:51:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 755.743781] binder: 24494:24495 ERROR: BC_REGISTER_LOOPER called without request [ 755.751633] binder: 24495 RLIMIT_NICE not set 20:51:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000d000000000002", @ifru_ivalue=0x907000}) 20:51:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6800000000000000]}, 0x48) 20:51:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d4000000000002", @ifru_ivalue=0x907000}) 20:51:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000000340)="126f5588f7305942fa20539073463aebec9e1b83480f1e5c2cc2415f495fefb8a7026bf60c0e372a4cc59d3fa36155914a67be6afcc39cff3d80512f91509799e5055b76a7ec8493ffe1e4b5d58202d93e2ad3baedd7d531e33b9ab2df7d726e067e5529152352ff2992e7765ab12aff5badbf772b731b6655844e851f83496e67e1bd59f97ec0082849cdd75c792d22c69a31d8745f990eb99d6b294d2bfec2e79804e498704d63d0cf8fb6501d32835d55ab7b9b4b22030956a848dd4e3763d60599d6d7f5d6ae3d066c2fbb52023e85736375456071badab7da31c7f5fb79907414149c9559e554bc76323ef103", 0xef, 0x1, &(0x7f0000000440)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20}, 0x80) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/218, 0xda}, {&(0x7f0000000200)=""/97, 0x61}], 0x3, &(0x7f00000002c0)=""/57, 0x39, 0x7}, 0x40) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x0, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000002ff6)="73797a6b616c6c657202", 0x0, 0xe7, &(0x7f000000df19)=""/231}, 0x48) 20:51:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6c00000000000000]}, 0x48) 20:51:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x30]}, 0x48) 20:51:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xfffffdfd, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 756.266962] binder: 24530:24531 ERROR: BC_REGISTER_LOOPER called without request [ 756.274682] binder: 24531 RLIMIT_NICE not set 20:51:03 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0xffffff7f00000000}}, 0x11) 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffffb0]}, 0x48) 20:51:03 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b40)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', r1}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x8}, 0xa00}, {{&(0x7f0000001500)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/186, 0xba}, {&(0x7f0000001640)=""/3, 0x3}, {&(0x7f0000001680)=""/37, 0x25}, {&(0x7f00000016c0)=""/37, 0x25}], 0x4, &(0x7f0000001740)=""/118, 0x76, 0x1f}, 0x9}, {{&(0x7f00000017c0)=@sco, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/171, 0xab}], 0x1, &(0x7f0000001940)=""/252, 0xfc, 0x5}, 0x6}], 0x3, 0x120, &(0x7f0000001b00)) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 20:51:03 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0xfffffdfd, 0x0, &(0x7f0000000080)}) 20:51:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000e000000000002", @ifru_ivalue=0x907000}) 20:51:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d800000002", @ifru_ivalue=0x907000}) 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x50]}, 0x48) 20:51:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001d900000002", @ifru_ivalue=0x907000}) 20:51:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 756.583442] binder: BINDER_SET_CONTEXT_MGR already set [ 756.617905] binder: 24556:24557 ioctl 40046207 0 returned -16 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x600]}, 0x48) 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7a]}, 0x48) 20:51:03 executing program 5: setrlimit(0x7, &(0x7f0000000000)) eventfd(0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000380)) 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7a00000000000000]}, 0x48) 20:51:03 executing program 5: r0 = perf_event_open(&(0x7f0000000500)={0x200000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000040)="1de96c1ca844bf062fd69e51216c939cb3f8c5a846d8edd741d54640c285cfe04c76ca9eb22769a7111fa8c76728bfba1fdb4b32fcddac534fe59911a66625272197e1022c3ee07ced2b87cee5dbafa7b5a7c9bbb2be93f3c679e17ed9f19698c2d3bd575fc300f4ac5e", 0x6a) r2 = dup2(r1, r0) fcntl$setstatus(r2, 0x4, 0x400) [ 756.980315] binder: 24556:24557 ERROR: BC_REGISTER_LOOPER called without request [ 756.988056] binder: 24557 RLIMIT_NICE not set 20:51:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xffffff7f00000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4c000000]}, 0x48) 20:51:03 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0xe80}}, 0x11) 20:51:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d301000000000002", @ifru_ivalue=0x907000}) [ 757.129500] binder: 24602:24603 ERROR: BC_REGISTER_LOOPER called without request [ 757.137225] binder: 24603 RLIMIT_NICE not set 20:51:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0xfdfdffff00000000, 0x0, &(0x7f0000000080)}) 20:51:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:04 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x7fffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffff023, 0x0, 0x81, 0x80000001, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xd}, &(0x7f0000000140)=0x8) 20:51:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001c00000002", @ifru_ivalue=0x907000}) 20:51:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x68000000]}, 0x48) 20:51:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000e00000000000002", @ifru_ivalue=0x907000}) 20:51:04 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x11}}, 0x11) 20:51:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x10]}, 0x48) [ 757.466863] binder: BINDER_SET_CONTEXT_MGR already set 20:51:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:04 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x10000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x7fff}, 0x1) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 20:51:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d6000000000002", @ifru_ivalue=0x907000}) 20:51:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001e100000002", @ifru_ivalue=0x907000}) [ 757.508813] binder: 24626:24627 ioctl 40046207 0 returned -16 [ 757.810075] binder: 24626:24627 ERROR: BC_REGISTER_LOOPER called without request [ 757.817766] binder: 24627 RLIMIT_NICE not set 20:51:04 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0xffff000000000000}}, 0x11) 20:51:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}, 0x48) 20:51:04 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x10000009, &(0x7f0000000180)=""/71) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x40000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x15) getpeername$packet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x20, 0x8, 0x4844}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0xffffffffffffffff}, &(0x7f0000000280)=0x8) 20:51:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xffffff7f, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 757.966673] binder: 24665:24666 ERROR: BC_REGISTER_LOOPER called without request [ 757.974353] binder: 24666 RLIMIT_NICE not set 20:51:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x100000000000000, 0x0, &(0x7f0000000080)}) 20:51:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001d400000002", @ifru_ivalue=0x907000}) 20:51:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e0000000000002", @ifru_ivalue=0x907000}) 20:51:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xd0ffffff00000000]}, 0x48) 20:51:04 executing program 5: r0 = socket$inet6(0xa, 0xe, 0x10001) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000540)}}], 0x2, 0x0) 20:51:04 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x100000000000000}}, 0x11) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xa00000000000000]}, 0x48) [ 758.325383] binder: BINDER_SET_CONTEXT_MGR already set 20:51:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000020013df564ea91bf95d2af26303fd7d1f48571cce7a072e0a94b2f00675a2866338ecdfcb0d0afae3b9f9303c95affc32cd3b490a47c70704af2a52e2fc36d2be292dcb5ee79c4b2943cfc2c790928cf5ecffc59de13162069f611e55c2708728b73afedd9a579f78d19947ba689f23b1611e295ec195266da404871c51a0110e4d8fe4144076c"], 0x18}, 0x0) r4 = dup2(r3, r2) close(r1) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0), 0x4) 20:51:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 758.361168] binder: 24685:24686 ioctl 40046207 0 returned -16 20:51:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000e00000000000002", @ifru_ivalue=0x907000}) 20:51:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001400000002", @ifru_ivalue=0x907000}) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4800]}, 0x48) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x600000000000000]}, 0x48) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x48000000]}, 0x48) [ 758.722384] binder: 24685:24686 ERROR: BC_REGISTER_LOOPER called without request [ 758.730212] binder: 24686 RLIMIT_NICE not set 20:51:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4800, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 758.834055] binder: 24723:24724 ERROR: BC_REGISTER_LOOPER called without request [ 758.841760] binder: 24724 RLIMIT_NICE not set 20:51:05 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x1000000, 0x0, &(0x7f0000000080)}) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x5000000000000000]}, 0x48) 20:51:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:05 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0xffff0000}}, 0x11) 20:51:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r4 = fcntl$getown(r0, 0x9) r5 = getpgrp(r4) r6 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1, 0x0) close(r8) ioctl(r10, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$int_in(r8, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r8, 0x8, r5) read$eventfd(r6, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r9}], 0x1, 0xfffffffffffffff8) kcmp(r4, r3, 0x1, 0xffffffffffffffff, r2) dup3(r8, r9, 0x0) tkill(r7, 0x16) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x100, 0x0) dup2(r0, r1) 20:51:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000fffffff000000002", @ifru_ivalue=0x907000}) 20:51:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001df000000000002", @ifru_ivalue=0x907000}) 20:51:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7000000]}, 0x48) 20:51:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 759.203391] binder: BINDER_SET_CONTEXT_MGR already set 20:51:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000e301000000000002", @ifru_ivalue=0x907000}) [ 759.242414] binder: 24742:24743 ioctl 40046207 0 returned -16 [ 759.280484] binder: 24742:24743 ERROR: BC_REGISTER_LOOPER called without request [ 759.288211] binder: 24743 RLIMIT_NICE not set 20:51:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffffd0]}, 0x48) 20:51:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d501000000000002", @ifru_ivalue=0x907000}) 20:51:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x74]}, 0x48) 20:51:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3]}, 0x48) 20:51:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 759.702760] binder: 24780:24781 ERROR: BC_REGISTER_LOOPER called without request [ 759.710454] binder: 24781 RLIMIT_NICE not set 20:51:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0xfdfdffff, 0x0, &(0x7f0000000080)}) 20:51:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x1000000000000000]}, 0x48) 20:51:06 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0xffffff7f}}, 0x11) 20:51:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 760.057138] binder: BINDER_SET_CONTEXT_MGR already set [ 760.065972] binder: 24794:24795 ioctl 40046207 0 returned -16 [ 760.074844] binder: 24794:24795 ERROR: BC_REGISTER_LOOPER called without request [ 760.082685] binder: 24795 RLIMIT_NICE not set 20:51:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400200, 0x0) openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x9, 0x6, 0x7}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/33) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/203) 20:51:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001c9000000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000f00000000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x48) 20:51:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:07 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0xe80}}, 0x11) [ 760.502569] binder: 24780:24781 unknown command 0 [ 760.513811] binder: 24780:24781 ioctl c0306201 200002c0 returned -22 20:51:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff000000]}, 0x48) 20:51:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x2000000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000002000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x82253d4ef0f96683, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x60}}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r1, 0x2) 20:51:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001dc00000002", @ifru_ivalue=0x907000}) [ 760.897966] binder: 24828:24832 ERROR: BC_REGISTER_LOOPER called without request [ 760.905661] binder: 24832 RLIMIT_NICE not set 20:51:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffffdfd, &(0x7f0000000080)}) 20:51:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3000]}, 0x48) 20:51:07 executing program 5: r0 = socket$inet6(0xa, 0x2000000001, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x240800, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000140)={[], 0x8, 0x80000000, 0x7, 0x0, 0x1, 0x0, 0x1}) ioctl$TIOCCONS(r1, 0x541d) getrandom(&(0x7f0000000080), 0x0, 0x2) 20:51:07 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x2}}, 0x11) 20:51:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001100000000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000040000000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6800]}, 0x48) [ 761.048120] binder: BINDER_SET_CONTEXT_MGR already set [ 761.074598] binder: 24861:24862 ioctl 40046207 0 returned -16 20:51:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:07 executing program 5: r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x400002}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x5, 0x9, 0x9, 0x8000, 0x3ff, r0}) 20:51:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d901000000000002", @ifru_ivalue=0x907000}) 20:51:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001db000000000002", @ifru_ivalue=0x907000}) [ 761.102144] binder: 24861:24862 ERROR: BC_REGISTER_LOOPER called without request [ 761.109869] binder: 24862 RLIMIT_NICE not set 20:51:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x2000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7000]}, 0x48) 20:51:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/ipc\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xffffffffffff8001, 0x2200) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0xb) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid\x00') 20:51:08 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x1100000000000000}}, 0x11) [ 761.563495] binder: 24899:24901 ERROR: BC_REGISTER_LOOPER called without request [ 761.571237] binder: 24901 RLIMIT_NICE not set 20:51:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x100000000000000, &(0x7f0000000080)}) 20:51:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000040000000000002", @ifru_ivalue=0x907000}) 20:51:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000da01000000000002", @ifru_ivalue=0x907000}) 20:51:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3604000000000000]}, 0x48) 20:51:08 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1ff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="80fd", 0x2}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0xdea9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20:51:08 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x2000000}}, 0x11) 20:51:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xc0ffffff]}, 0x48) 20:51:08 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) sendto$inet6(r2, &(0x7f0000000040)="00810000000000000000", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x1}, 0x1c) [ 761.938426] binder: BINDER_SET_CONTEXT_MGR already set 20:51:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001e600000002", @ifru_ivalue=0x907000}) 20:51:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 761.971927] binder: 24922:24923 ioctl 40046207 0 returned -16 20:51:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xa00]}, 0x48) [ 762.268119] binder: 24922:24923 ERROR: BC_REGISTER_LOOPER called without request [ 762.275834] binder: 24923 RLIMIT_NICE not set 20:51:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x48, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001ca000000000002", @ifru_ivalue=0x907000}) 20:51:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fcntl$notify(r0, 0x402, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x49249249249246b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) exit(0x80) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r3) 20:51:09 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x11000000}}, 0x11) [ 762.407416] binder: 24959:24960 ERROR: BC_REGISTER_LOOPER called without request [ 762.415121] binder: 24960 RLIMIT_NICE not set 20:51:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0xfdfdffff00000000, &(0x7f0000000080)}) 20:51:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001ce000000000002", @ifru_ivalue=0x907000}) 20:51:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xffffff90]}, 0x48) 20:51:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000018", @ifru_ivalue=0x907000}) 20:51:09 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x1000000}}, 0x11) 20:51:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x2]}, 0x48) 20:51:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 762.784110] binder: BINDER_SET_CONTEXT_MGR already set [ 762.798185] binder: 24966:24969 ioctl 40046207 0 returned -16 [ 762.807758] binder: 24966:24969 ERROR: BC_REGISTER_LOOPER called without request [ 762.815448] binder: 24969 RLIMIT_NICE not set 20:51:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000500000000000002", @ifru_ivalue=0x907000}) 20:51:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000001a000000000002", @ifru_ivalue=0x907000}) 20:51:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x18000000]}, 0x48) 20:51:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x700]}, 0x48) 20:51:09 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x800e0000}}, 0x11) 20:51:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6000000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 763.275425] binder: 25013:25014 ERROR: BC_REGISTER_LOOPER called without request [ 763.283153] binder: 25014 RLIMIT_NICE not set 20:51:10 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000003ff8)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x88000, 0x0) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x2000000]}, 0x48) 20:51:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1000000, &(0x7f0000000080)}) 20:51:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001ca00000002", @ifru_ivalue=0x907000}) 20:51:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001b00000002", @ifru_ivalue=0x907000}) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x70000000]}, 0x48) 20:51:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="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", 0xfa, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)='aegis128-generic\x00', 0xfffffffffffffff9) keyctl$negate(0xd, r2, 0x7, r3) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x302) readv(r1, &(0x7f0000000400)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x0) 20:51:10 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x800e}}, 0x11) [ 763.628285] binder: BINDER_SET_CONTEXT_MGR already set 20:51:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7400]}, 0x48) 20:51:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 763.653744] binder: 25038:25042 ioctl 40046207 0 returned -16 [ 763.681156] binder: 25038:25042 ERROR: BC_REGISTER_LOOPER called without request [ 763.688860] binder: 25042 RLIMIT_NICE not set 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x90ffffff]}, 0x48) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xd0ffffff]}, 0x48) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3604]}, 0x48) 20:51:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff00]}, 0x48) 20:51:10 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0xffffff7f00000000}}, 0x11) [ 764.119366] binder: 25079:25080 ERROR: BC_REGISTER_LOOPER called without request [ 764.127155] binder: 25080 RLIMIT_NICE not set 20:51:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0xfdfdffff, &(0x7f0000000080)}) 20:51:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000001d000000000002", @ifru_ivalue=0x907000}) 20:51:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800000000fff00000002", @ifru_ivalue=0x907000}) 20:51:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6c]}, 0x48) 20:51:11 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x200000000000000}}, 0x11) 20:51:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xa]}, 0x48) [ 764.473456] binder: BINDER_SET_CONTEXT_MGR already set [ 764.493518] binder: 25090:25097 ioctl 40046207 0 returned -16 [ 764.522791] binder: 25090:25097 ERROR: BC_REGISTER_LOOPER called without request [ 764.530529] binder: 25097 RLIMIT_NICE not set 20:51:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x1) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x339) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x44}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x60400, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000002c0)="660f38819838690000650f0014e1c4c109ea42903e660f3882b620000000660f388112b8003000000f23d80f21f835c00000100f23f8660f3808dc66baf80cb8c0d06a8fef66bafc0c66ed66bad004b000ee0f01cf", 0x55}], 0x1, 0x133cc35d1ba48519, &(0x7f0000000380)=[@flags={0x3, 0x1}], 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000140)={0x70000000000000, {{0x2, 0x4e21, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) 20:51:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e1000000000002", @ifru_ivalue=0x907000}) 20:51:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001cc000000000002", @ifru_ivalue=0x907000}) 20:51:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xb0ffffff]}, 0x48) 20:51:11 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0xffff000000000000}}, 0x11) 20:51:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3000000000000000]}, 0x48) 20:51:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001d800000002", @ifru_ivalue=0x907000}) 20:51:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00008ea6ba6bdaf4b91de611a37b901fb00000"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6800, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000018", @ifru_ivalue=0x907000}) 20:51:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 20:51:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}, 0x48) 20:51:11 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x11}}, 0x11) 20:51:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d5000000000002", @ifru_ivalue=0x907000}) [ 765.338318] binder: 25154:25167 ERROR: BC_REGISTER_LOOPER called without request [ 765.345873] binder: BINDER_SET_CONTEXT_MGR already set [ 765.346135] binder: 25167 RLIMIT_NICE not set 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x5000000]}, 0x48) 20:51:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:12 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0xb3) bind$can_raw(r0, &(0x7f00000003c0)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="92af3fde37406e5c6b3189f506b4f69f05b8bc1a688f3d45f45dbc17e77e15df69892c4a141f4e5b652ac9e6e2cdae1436a8b27bda0685305114b84897d21731fb84679b05cfa1c359a20eb54f6823cc70c1a6ca5791c853d11d4ec5301da5199818c243efbad4b34a370ebef18cde94b59dfc54df2c83aa83ea4f472a3bc0a1ac657515784153e47bda38c4352eef8eb884a401985363", 0x413) 20:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000900000002", @ifru_ivalue=0x907000}) [ 765.383228] binder: 25170:25173 ioctl 40046207 0 returned -16 [ 765.397210] binder: 25170:25173 unknown command -1500643328 [ 765.413762] binder: 25170:25173 ioctl c0306201 20000240 returned -22 20:51:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000b00000000000002", @ifru_ivalue=0x907000}) 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4c00]}, 0x48) 20:51:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x75263597adbddfaf, 0x0, &(0x7f0000000000)="bf10d80628a94e59"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x1000000]}, 0x48) [ 765.565480] binder: BINDER_SET_CONTEXT_MGR already set [ 765.578877] binder: 25196:25197 ioctl 40046207 0 returned -16 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6000000000000000]}, 0x48) [ 765.784657] binder: 25196:25197 ERROR: BC_REGISTER_LOOPER called without request [ 765.792338] binder: 25197 RLIMIT_NICE not set 20:51:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xa, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x30000000]}, 0x48) 20:51:12 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x800e000000000000}}, 0x11) 20:51:12 executing program 5: getuid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x40000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x7f, 0x4) times(&(0x7f0000000000)) 20:51:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x401, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x151, 0x0, &(0x7f0000000300)="093907aa08e9f54f892ce1cf46654045d56f2c9cdbcec19127fbad338d5ef50bbfaa0a743fcec08667a91345978a8f2e2dfd0c25c41943edc70a11c58f54b4100edc8607e707000000cec88aaf33ed23818e130f7749a0e04f99330a7e53a19bcf11d4c750dbabff37b6bf668c1eeb5a92a2a584a4f216116c213a6fa5db31ca96d7aa3000000000000000db19bcea885610f0e8b38e22e6ed0cca943fb348db4172a7d85e745f1882dbd0d188142e96ebd8db91157733c79c10d4fa333a7d194b5c6b096bd6ac7a11805ca8c75886dc41f3b32add40c49294287dadeb29c4f0fbf1449792ed27f2b62d9d77672503e840fe510803734e1a284bf0559a302f02ab7f3344511fa40a1a5b0c4523e39187596ccafbd930713dfa4509ed87d9fa4e735be1010efe32ac519f9c396435ae0453e5512276001e8e96b92786080ed20d3462fc1b0eb1e972bbd856ccf91614b932"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000300000000000002", @ifru_ivalue=0x907000}) 20:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001b00000002", @ifru_ivalue=0x907000}) [ 766.151414] binder: 25215:25217 ERROR: BC_REGISTER_LOOPER called without request [ 766.159107] binder: 25217 RLIMIT_NICE not set 20:51:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) gettid() r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='cmdline\x00') ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) read$eventfd(r1, &(0x7f0000000040), 0xfeb9) [ 766.203389] binder: BINDER_SET_CONTEXT_MGR already set 20:51:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x68]}, 0x48) 20:51:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d9000000000002", @ifru_ivalue=0x907000}) [ 766.233761] binder: 25231:25233 ioctl 40046207 0 returned -16 [ 766.266664] binder: 25231:25233 ERROR: BC_REGISTER_LOOPER called without request [ 766.274373] binder: 25233 RLIMIT_NICE not set 20:51:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000900000002", @ifru_ivalue=0x907000}) 20:51:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getgid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r3) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newspdinfo={0x14, 0x24, 0x703}, 0x14}, 0x1}, 0x0) 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xb0ffffff00000000]}, 0x48) 20:51:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xa00000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x60000000]}, 0x48) 20:51:13 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x1100}}, 0x11) 20:51:13 executing program 5: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xd873, 0x0) ioctl$int_out(r1, 0xc2604111, &(0x7f0000000040)) 20:51:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d5000000000002", @ifru_ivalue=0x907000}) 20:51:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000cc01000000000002", @ifru_ivalue=0x907000}) 20:51:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty, 0x4}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x16}, 0x8001}, r4, 0x7fff}}, 0x48) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000bfe000/0x400000)=nil, 0x400000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 767.027855] binder: 25283:25288 ERROR: BC_REGISTER_LOOPER called without request [ 767.035672] binder: 25288 RLIMIT_NICE not set 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x48]}, 0x48) 20:51:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e501000000000002", @ifru_ivalue=0x907000}) 20:51:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200)={0x1d}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) [ 767.070083] binder: 25294:25295 ERROR: BC_REGISTER_LOOPER called without request [ 767.077793] binder: 25295 RLIMIT_NICE not set 20:51:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001d500000002", @ifru_ivalue=0x907000}) 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x1000000000000]}, 0x48) 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}, 0x48) 20:51:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x20000000]}, 0x48) 20:51:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x1000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x300]}, 0x48) 20:51:14 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0xffff000000000000}}, 0x11) 20:51:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:14 executing program 5: r0 = epoll_create(0x3) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="0b2ab8986a512b1519ff9d2360253da1d55910a614eafe7763732357b5784a49d005d110347d3ee02651cf43e0d4a5bf655b3178cfc25e752dba85d4283a94b764fe51d6646d65088c0c32acd66229505345fa5280e957d378cf36146231287ba9070cbae5f980dc7521fd6e4fef988b034069c2c174a921cd4693ed6bdea49d88eb8c3d39956c3d694d642b9a7407cdd200340796f347122a15281897488576d5e274df35573083e2adaaa16ea00971616e3a5452c93b9e5ccbae1153c29e4d21386b774acd6a8a07c70c82096b99", 0xcf}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="756196a2a6eea2dc6d48540adf5b244e60c601d8ff3b03068df1438b5dc1633b3f3d194118a04f26fe264e5067736ad4ff59f2c4266c3f3f8631b4f620aba5eedd9b25b3ccda4b4dc21472f80f0803ac933c14181c3d30d38c173a961d0fe3fc72d3a143420f0b889ea2dcb9443f3ddf0ecd827040b5436f6b06941fb04e92c9cf0f8d465faf80547a2daeee6fb9ee83663b3a1848c15857751eb72a0683ae930f9ef2c6b75338eb76631ed1da50605c625f79d350ac4534a93f7a2f640732b419be673aea5fee20b9ff1112302d31c81bd8e5094fdf6fe4ca0fbb78b49c85e96628ced897", 0xe5}, {&(0x7f0000001300)="46fe3ceecb4c83da94a7b9aabca7598280f8d5be6538f1303f02839bfeac23ac39fcee6928324eb1795d5005bc9dfb556cb0a57fc979141fd038e4c68226e48331858906bfe5401a173249474f0e850ff61d4a5fccaa552813f0e24e195d964996cfac8db54c5be9fbe3912242894434824dd493b991732fa03514f1d117c63d4a9a0a80e98ef69d8dd4988f3f373129ff0df0bced719184c642f8f210e108c341f21c0b0f1f96134736da582d7c1067c8f35b1b69735725803c3e6e0661bad6fb3ba17ef12e695cdbffe1eddce117d9233911fc20c9b437bb5cc42d3fe7df07e11582ab3f2069a4e4", 0xe9}, {&(0x7f0000000000)="644690b40559d8c96ce7a4ee94f1655bf4d9a012e6cb3b323721f63d1ab2c07f2464498fcad7a79af2ecdb2fda4a03bd3924433abfdfb248c09edec16bc153d79e9dcf9cb55e10502bdb01ef5005dcd1a352dd1266978bb190351f8ab9f4c0be186c028f1c5b59f54b9107b43347ae7196ca79fe", 0x74}, {&(0x7f0000001400)="a204e1e4680d368d8ff61dc79bf56def2b220fdb4318405e5c7a34c9302b20a2cba2df7214b6c28f6637ecf00d1acdca3bdd95deaaf232dccaeed9a8df875828265c412460dc65842034bd187d20474972a6132cbbc585f0e35c8e2508c85d29dd66542b727603b9bd50578b43918d621375389b011265ceafa1242fececa077c516cb406006944588de346ef52a4f72e7aaa25c8db23274f39cbac4f61008808687b8dca19271fb2da0743d9af8695beaf2", 0xb2}, {&(0x7f0000000080)="a4a4d12a50b345dcb7817b403bc66ccc3d3b8b3caa7c9189d1886e691e2c7825a510768580bb1189fdbdbd6f5d22625c0832b86bddc1daf3324cf730a746", 0x3e}], 0x7) r1 = syz_open_dev$sndpcmc(&(0x7f0000001540)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4440) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000001580)={{}, {0x401, 0x800}, 0x20000000000028, 0x2, 0x40002}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') pread64(r2, &(0x7f0000000080), 0x0, 0x8000) syz_open_dev$vcsa(&(0x7f0000001600)='/dev/vcsa#\x00', 0x6, 0x4000) 20:51:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001da000000000002", @ifru_ivalue=0x907000}) 20:51:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001a00000002", @ifru_ivalue=0x907000}) [ 767.838102] binder: 25283:25330 ioctl 8010aa02 20000080 returned -22 [ 767.928934] binder: 25336:25345 ERROR: BC_REGISTER_LOOPER called without request [ 767.936653] binder: 25345 RLIMIT_NICE not set 20:51:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x10000000]}, 0x48) 20:51:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x5, [@random="abfe711fe69f", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="9f3a663fe05c"]}) 20:51:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x118, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0xff000000, 0xffffff00, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, {[0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0xff, 0xff, 0xff]}, 0x3ff, 0x0, 0x1, 0x6, 0x0, 0x5, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}, 0x0, 0x210}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="c1057985d378", @empty, @multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0xd}, 0xf, 0xffffffff}}}, {{@arp={@empty, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff, 0xff000000, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@random="c83d70fe1e78", {[0x0, 0xff, 0x7936016bb50695ca]}, 0xb0, 0x9f7, 0x1ff, 0x3, 0x2, 0x1, 'bcsf0\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x24}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") fcntl$getownex(r3, 0x10, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d3023fdf0eb4ff49"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000cd01000000000002", @ifru_ivalue=0x907000}) 20:51:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7a00]}, 0x48) [ 768.029123] binder: BINDER_SET_CONTEXT_MGR already set [ 768.060093] binder: 25354:25355 ioctl 40046207 0 returned -16 20:51:14 executing program 5: r0 = epoll_create1(0x80000) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000100)=""/215, &(0x7f0000000200)=0xd7) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x400000000009, 0x3}) 20:51:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x18]}, 0x48) 20:51:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket(0x10, 0x2, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)="255873697826d1636c5f2163636473736367726f75842100") write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008911, &(0x7f00000001c0)="a011b0c8c3659fa640ba09704c3179fa6e6f51b414e42b1d2482d77f8ae3412947b98c99bba2f1eba5489fd2a42f520cb8d7bcdcb6e7aea12079546991f9b0177f4c8336") shutdown(r1, 0x1) write(r1, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000010d10200cf", 0x1f) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100, 0x40000) [ 768.237941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 768.270071] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 768.393383] binder: 25354:25355 unknown command -549518637 [ 768.401487] binder: 25354:25355 ioctl c0306201 20000240 returned -22 20:51:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7a000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4c]}, 0x48) 20:51:15 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000040)="ac1c512f566146d6513c58a7790d83ee0938e786782e0d1105f901b266272981e36e3f2a46e929aa414d21313f869478854804940a66b17f1a889454dc5b2560b9366b68225da5ab29cd73bfd5729f58a37d91cec22ba17c652914b0612fb19733941fed098ed05d581643", 0x6b, 0x20000800, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getdents64(r0, &(0x7f0000000440)=""/11, 0xb) 20:51:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d801000000000002", @ifru_ivalue=0x907000}) 20:51:15 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x2000000}}, 0x11) 20:51:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000cf01000000000002", @ifru_ivalue=0x907000}) 20:51:15 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x240000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) prctl$setname(0xf, &(0x7f0000000080)='ppp0^\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r3, r2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) r7 = gettid() kcmp(r6, r7, 0x5, r3, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x300000000000000]}, 0x48) [ 768.757636] binder: 25400:25401 ERROR: BC_REGISTER_LOOPER called without request [ 768.765484] binder: 25401 RLIMIT_NICE not set [ 768.796368] binder: BINDER_SET_CONTEXT_MGR already set 20:51:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000fff00000002", @ifru_ivalue=0x907000}) [ 768.837519] binder: 25406:25409 ioctl 40046207 0 returned -16 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xa000000]}, 0x48) 20:51:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001ce00000002", @ifru_ivalue=0x907000}) 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6000000]}, 0x48) 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6c00]}, 0x48) 20:51:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x2000]}, 0x48) [ 769.274576] binder: 25406:25409 ERROR: BC_REGISTER_LOOPER called without request [ 769.282217] binder: 25409 RLIMIT_NICE not set 20:51:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x300, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:16 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x1000, 0x4011, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x80000000, 0x8006, 0x4, 0x5, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1d662c82, 0xc, 0x9, 0x80, r1}, &(0x7f0000000140)=0x10) 20:51:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x90ffffff00000000]}, 0x48) 20:51:16 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x1100}}, 0x11) 20:51:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000100000002", @ifru_ivalue=0x907000}) 20:51:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000dd01000000000002", @ifru_ivalue=0x907000}) 20:51:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) mq_timedsend(r3, &(0x7f0000000100)="065b9f6f29227bfed3e375f4c60721dc858e85ffa8cb56a3b394d67a82fb57daa933d25511989aff049be85d29dd98c5b7203d9e09acae394d25d79279d73e844c8d6c28dfe2740b36dbae615a4ebbb21c6256789fa3d8f305079331d52b1b978281d33c068f245c08043e9e7cc2319c8d98ccaf80fde704679df9ca24ab4cd4fa2126ff9aef4d5f7b2b16610baa043dbc6b03a8c8abd140d265004ae1a75c017e865c51a538b7249cb31df1c7f95462b00383798c28dfca7b3e4c537181375c12eb427590e3ea364d5095c5053bb7cfc7cd0f62057ae76f6bc7f9d9a9c275f3816e8319be773e5fe4d98ad4fc4c5f367e0086c5cb", 0xf5, 0x7fffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 769.557391] binder: 25400:25401 ioctl 8904 20000040 returned -22 [ 769.657417] binder: BINDER_SET_CONTEXT_MGR already set [ 769.670188] binder: 25460:25465 ERROR: BC_REGISTER_LOOPER called without request [ 769.677870] binder: 25465 RLIMIT_NICE not set 20:51:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x4c00000000000000]}, 0x48) 20:51:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0xfffffffffffffff8, &(0x7f0000000100)="295ee131fc15f477671070") r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}, 0x1}, 0x0) [ 769.702013] binder: 25463:25464 ioctl 40046207 0 returned -16 20:51:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000dc01000000000002", @ifru_ivalue=0x907000}) 20:51:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000004", @ifru_ivalue=0x907000}) 20:51:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x7400000000000000]}, 0x48) 20:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:51:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x40000000]}, 0x48) [ 770.097637] binder: 25463:25464 ERROR: BC_REGISTER_LOOPER called without request [ 770.105305] binder: 25464 RLIMIT_NICE not set 20:51:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:17 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) fallocate(r0, 0x12, 0x0, 0x1) fallocate(r0, 0x0, 0x2, 0x0) 20:51:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6c000000]}, 0x48) 20:51:17 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x1100000000000000}}, 0x11) 20:51:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001800000002", @ifru_ivalue=0x907000}) 20:51:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e5000000000002", @ifru_ivalue=0x907000}) 20:51:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b3c1a109ad8cde6b7c27f192add037e73b5a0b430800"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x173, 0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:51:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x50000000]}, 0x48) [ 770.541357] binder: 25522:25523 ERROR: BC_REGISTER_LOOPER called without request [ 770.549084] binder: 25523 RLIMIT_NICE not set [ 770.556608] binder: BINDER_SET_CONTEXT_MGR already set 20:51:17 executing program 5: r0 = msgget(0x0, 0x210) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/191) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x302, 0x70bd25, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xca48}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$TIOCNOTTY(r1, 0x5422) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffe01, 0x9, 0x8, 0x4e, 0x9ef, 0x3, 0x3f, 0x7, 0xda, 0x40, 0x367, 0x8, 0x1000, 0x38, 0x1, 0x7fff, 0xffffffff, 0x5}, [{0x4, 0x47d1, 0x3, 0x1000, 0x100000001, 0x2, 0x253f80000, 0x8}, {0x6474e551, 0x5, 0xff, 0x9508, 0x4, 0x8, 0x7fffffff, 0x3}], "a7769337ac693ce664977d5303888ef20bde70593289f724dd27849c4661431e143985d6d0dce25d046352636366a820481b8f491b376c8b1a31736f0dd941686d9d8ce8722e69c37713cf2512e88b08575acf77ea7a048c7440efd3b92e331ca0b57366e5804a9446bd7984d6cde4df52478716c113c2e498771ed42bdce209d49110600b56b256bfa1517788a024d7a06bc2d3b882aa81aeb0207d1168554e0bd25a704e65ca277d0c751f743f0652e182cd378c636c27a3787977813dfc8d648fbcb938b90ca7a30874281b16e3e8e023861feab55b0995faa29fd89b4abbacaea055e14b", [[], [], [], [], [], [], [], [], []]}, 0xa96) sendmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x1d}, 0x10, &(0x7f0000000e00)={&(0x7f0000000d80)=@canfd={{0x3, 0x40, 0x1f, 0x608}, 0x1b, 0x1, 0x0, 0x0, "963906d5c46c4ec2f7d917d2730722a1e38d021c8f17ab4e81b57af66c0f1073e6921a0958dbdb3f57ba6ff9fb0f610b9ae97ff7e0363c8d6877ea81ead92f1b"}, 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x4001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000e80)={0x0, 0x17, "9f11a228b223b03e430d27ee44f6bcdcc694dd9f6c852c"}, &(0x7f0000000ec0)=0x1f) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000f00)={r3, 0x0, 0x20}, &(0x7f0000000f40)=0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = accept(r1, &(0x7f0000000f80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000001000)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002840)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000002940)=0xe8) sendto$packet(r1, &(0x7f0000001040)="9084390ab9851be8ba99b8c678dd5547b0af614419deef297312ebfb1c29586673d08c8e39fb52ac573239ceec3c097c3a97ce90d9e12f270c42c4c760dcf1988a87d4a813a14e958b48a8377e5a146278e947e6fa7c6e4b2011fb8a5a2eb659ce48b0cb68df1261f60ae20350ddd329219c94912849dd20788a5d35", 0x7c, 0x80, &(0x7f0000002980)={0x11, 0xf6, r7, 0x1, 0x10001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000029c0)=0x4, 0x4) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000002a00)) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000002a40)=@generic={0x3, 0x1}) getsockopt$inet_dccp_buf(r6, 0x21, 0x80, &(0x7f0000002a80)=""/124, &(0x7f0000002b00)=0x7c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002b40)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000002c40)=0xe8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000002c80)={0x3, 0x1, 0x200000, 0x3, 0x1f}) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000002cc0)={'bridge0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000002d00)={0x9, 0x1, 0x9, 0x100000001, 0x4, 0x4, 0x737, 0x6, 0xaa, 0x400}) sendmsg$key(r6, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x2, 0x8, 0x2, 0x9, 0x17, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xb5}, @in={0x2, 0x4e20, @loopback=0x7f000001}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x100000000, 0x80, 0x7e, 0x3, 0xa0000001}, @sadb_x_policy={0x8, 0x12, 0x2, 0x6, 0x0, 0x0, 0x7, {0x6, 0xff, 0x6, 0x5, 0x0, 0x1, 0x0, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in6=@local={0xfe, 0x80, [], 0xaa}}}, @sadb_lifetime={0x4, 0x7, 0x9, 0x8, 0x100000001, 0x2}]}, 0xb8}, 0x1}, 0x40000) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002e80)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002ec0)={0xffffffffffffffff}) setfsuid(r9) lremovexattr(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)=@random={'user.', '-\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, &(0x7f0000002fc0)=0xc) fchown(r1, r8, r11) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000003000)=0xffffffff) 20:51:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000f0ffffff00000002", @ifru_ivalue=0x907000}) [ 770.584300] binder: 25524:25525 ioctl 40046207 0 returned -16 [ 770.604879] binder: 25524:25525 unknown command 161595827 20:51:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x3000000]}, 0x48) 20:51:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000009000000000002", @ifru_ivalue=0x907000}) [ 770.648178] binder: 25524:25525 ioctl c0306201 20000240 returned -22 20:51:17 executing program 5: r0 = socket(0xa, 0x2, 0x3) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x0) 20:51:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x74000000]}, 0x48) 20:51:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6800000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x436]}, 0x48) 20:51:18 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x1, 0x26cb6ffd}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3c, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 20:51:18 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x1000000}}, 0x11) 20:51:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000f00000002", @ifru_ivalue=0x907000}) 20:51:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080009306000000000002", @ifru_ivalue=0x907000}) [ 771.333915] binder: 25522:25523 unknown command 16388 [ 771.339265] binder: 25522:25523 ioctl c0306201 200002c0 returned -22 20:51:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101640, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @multicast2}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, r5, {0x7, 0xf}, {0xd, 0x9}, {0xd, 0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c5}, 0x20044000) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x54, 0x0, &(0x7f0000000380)="e3a5f09e35b06e0d071493cb9934531836fd1d96fe0f9c9c63f6dd383eb792b55fd3cd21648953ff749d62e83dbe4233fa735a3080df4530ab0e94eceef5aaa5c6c6bb75be15180fa255e8aa6441f5d3fa6f1a4f"}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000400)) 20:51:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x5]}, 0x48) 20:51:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d801000000000002", @ifru_ivalue=0x907000}) [ 771.434961] binder: 25581:25584 ERROR: BC_REGISTER_LOOPER called without request [ 771.442669] binder: 25584 RLIMIT_NICE not set 20:51:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001000000000000002", @ifru_ivalue=0x907000}) [ 771.535762] binder: BINDER_SET_CONTEXT_MGR already set 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x80ffffff]}, 0x48) [ 771.573334] binder: 25587:25591 ioctl 40046207 0 returned -16 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x36040000]}, 0x48) 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x6]}, 0x48) 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x80ffffff00000000]}, 0x48) [ 771.992291] binder: 25587:25591 ERROR: BC_REGISTER_LOOPER called without request [ 772.000176] binder: 25591 RLIMIT_NICE not set 20:51:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7a00, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:18 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x1, 0x26cb6ffd}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3c, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 20:51:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x5000]}, 0x48) 20:51:18 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x2}}, 0x11) 20:51:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001f00000002", @ifru_ivalue=0x907000}) 20:51:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001e3000000000002", @ifru_ivalue=0x907000}) [ 772.301081] binder: 25636:25638 ERROR: BC_REGISTER_LOOPER called without request [ 772.308792] binder: 25638 RLIMIT_NICE not set 20:51:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x121) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1f, &(0x7f0000000080)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) fdatasync(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2, r5) r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r6) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000180)=0x8) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}, 0x48) 20:51:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d200000002", @ifru_ivalue=0x907000}) [ 772.425209] binder: BINDER_SET_CONTEXT_MGR already set 20:51:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000e101000000000002", @ifru_ivalue=0x907000}) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700]}, 0x48) [ 772.454141] binder: 25650:25651 ioctl 40046207 0 returned -16 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000]}, 0x48) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4800]}, 0x48) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1800000000000000]}, 0x48) [ 772.838432] binder: 25650:25651 ERROR: BC_REGISTER_LOOPER called without request [ 772.846111] binder: 25651 RLIMIT_NICE not set 20:51:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x2000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:19 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x1, 0x26cb6ffd}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3c, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000000000000]}, 0x48) 20:51:19 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0xe80}}, 0x11) 20:51:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001300000002", @ifru_ivalue=0x907000}) 20:51:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001e400000002", @ifru_ivalue=0x907000}) [ 773.183174] binder: 25693:25694 ERROR: BC_REGISTER_LOOPER called without request [ 773.191742] binder: 25694 RLIMIT_NICE not set 20:51:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/4096) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000]}, 0x48) 20:51:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000004000000002", @ifru_ivalue=0x907000}) [ 773.227716] binder: 25650:25651 ioctl 40044590 20000180 returned -22 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50]}, 0x48) [ 773.330999] binder: BINDER_SET_CONTEXT_MGR already set [ 773.346344] binder: 25706:25707 ioctl 40046207 0 returned -16 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3604000000000000]}, 0x48) 20:51:20 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x1, 0x26cb6ffd}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3c, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd0ffffff]}, 0x48) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000000000000]}, 0x48) [ 773.753070] binder: 25706:25707 ERROR: BC_REGISTER_LOOPER called without request [ 773.760750] binder: 25707 RLIMIT_NICE not set 20:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300000000000000]}, 0x48) 20:51:20 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x800e000000000000}}, 0x11) 20:51:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001e1000000000002", @ifru_ivalue=0x907000}) 20:51:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001e200000002", @ifru_ivalue=0x907000}) 20:51:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), &(0x7f0000000080)}, &(0x7f0000000140)=0xec53b244681f508f) close(r2) close(r1) [ 774.043210] binder: 25746:25748 ERROR: BC_REGISTER_LOOPER called without request [ 774.051080] binder: 25748 RLIMIT_NICE not set 20:51:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c\x00\x00'], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x12b, 0x0, &(0x7f0000000100)="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"}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600000000000000]}, 0x48) 20:51:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d701000000000002", @ifru_ivalue=0x907000}) 20:51:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000001f000000000002", @ifru_ivalue=0x907000}) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000000000000]}, 0x48) 20:51:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}, 0x48) [ 774.192405] binder: BINDER_SET_CONTEXT_MGR already set [ 774.212320] binder: 25758:25763 ioctl 40046207 0 returned -16 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffb0]}, 0x48) 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x48) [ 774.471445] binder: 25758:25763 unknown command 25344 [ 774.483839] binder: 25758:25763 ioctl c0306201 20000240 returned -22 20:51:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4c, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x48) 20:51:21 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x800e0000}}, 0x11) 20:51:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001600000000000002", @ifru_ivalue=0x907000}) 20:51:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d900000002", @ifru_ivalue=0x907000}) 20:51:21 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e23, 0xc32b, 0x4e22, 0x0, 0xa, 0xa0, 0xa0, 0x1d, r3, r4}, {0xb12f, 0x8, 0x80, 0x8, 0xca72, 0x80, 0x7ff, 0x4}, {0x8000, 0x0, 0x337639f5, 0x2}, 0x7, 0x6e6bbf, 0x2, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0xb78, 0x4d5, 0xff}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2, 0x2, 0x10000, 0x5, 0x2, 0x39}}, 0xe8) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x101000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0xff, 0x6}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/20) prctl$setname(0x59616d61, &(0x7f00000000c0)='ppp1GPLselinux\x00') [ 774.836561] binder: 25746:25748 unknown command 64 [ 774.841690] binder: 25746:25748 ioctl c0306201 200002c0 returned -22 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c000000]}, 0x48) [ 774.905085] binder: 25800:25802 ERROR: BC_REGISTER_LOOPER called without request [ 774.912788] binder: 25802 RLIMIT_NICE not set 20:51:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000210000400000000000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000130000000000062f0000000000000000000000000000a565a20a51249c98403ff7ee8628555ef7ecea6b6d0c756982b2d1530c51e6399277b6205eb529215cc908397d48b71a7a1cdc5614855a15f1b6292f9dbdf1c32e11b32fa02d70d63797929ce3a10883b540ec3fbf73963dd62164b13483b20e8f8a6bf63f704627d66e55656bf1fee66e2294d3a796104c9fbb81ccf2245d43f9e71eb7413c4e67d5af16a69c0ca9e63a82a0f492c7276b4008d7e753f2e8c37b687823a59694bb4c62c6dd69c420cc79"], 0x58) dup2(r1, r1) poll(&(0x7f0000000040), 0x1e6, 0x0) [ 774.967195] binder: BINDER_SET_CONTEXT_MGR already set 20:51:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001800000000000002", @ifru_ivalue=0x907000}) 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}, 0x48) [ 775.005548] binder: 25808:25809 ioctl 40046207 0 returned -16 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x70]}, 0x48) 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c000000]}, 0x48) 20:51:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50000000]}, 0x48) [ 775.338933] binder: 25808:25809 ERROR: BC_REGISTER_LOOPER called without request [ 775.346600] binder: 25809 RLIMIT_NICE not set 20:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60]}, 0x48) 20:51:22 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x800e}}, 0x11) 20:51:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x701040, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@loopback, @dev, @rand_addr}, &(0x7f00000000c0)=0xc) 20:51:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000ce01000000000002", @ifru_ivalue=0x907000}) 20:51:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000200000000000002", @ifru_ivalue=0x907000}) 20:51:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r0) write$tun(r4, &(0x7f0000000400)={@void, @val={0x1, 0x3, 0x5456, 0x5, 0x6, 0x800}, @llc={@llc={0x4, 0xf0, "a47c", "a997374eeb97dbd9f3eecfb1dcab159c61a19b35bb2b23fa1e34e8689e5986acb4e8c83dcf94d0cf1729530557b9ab3238450e6c124b14754441e9c362adf45d7ab43c98c09c7a5a9cb085d0bacbfe38"}}}, 0x5e) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @flat={0x77682a85, 0xa, r5}], &(0x7f0000000080)=[0x48, 0x78, 0x78, 0x38, 0x20]}, 0xffffffff}}], 0x31f, 0x0, &(0x7f0000000100)="f5c976be82541cdc4e8f49895fa4a29278caf538d50848ff1646e9d227bcf7a598e2975b0d8c408a94b0a0c6da72226dfb9955ffffffff000000004d7e7055704c1d7d29efc0e7c19526d831621dc2ccf452200c07d503727de57f05b9106266cdfea152d1f3cbec0ab8e8add713843bff669a75e3069783e57f5e82f7ad94a18700d47bd98e224a99327d3af92c1c92e2f83925de9b68e3a7f12518ea9d550cec45dd2ca63e13e7b9c9c38b5deaf373326e1ada74bb3c353366b8cd542e38629b23d8682302155e2feaa25cd049d6e820300bd400000000000000"}) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff00000000000000]}, 0x48) [ 775.802124] binder: 25847:25854 ERROR: BC_REGISTER_LOOPER called without request [ 775.809831] binder: 25854 RLIMIT_NICE not set [ 775.838645] binder: BINDER_SET_CONTEXT_MGR already set 20:51:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005005, &(0x7f0000003ff8)=0x7) [ 775.855213] binder: 25864:25865 ioctl 40046207 0 returned -16 [ 775.889520] binder: 25864:25865 ERROR: BC_REGISTER_LOOPER called without request [ 775.897276] binder: 25865 RLIMIT_NICE not set 20:51:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000003000000000002", @ifru_ivalue=0x907000}) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}, 0x48) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}, 0x48) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x90ffffff00000000]}, 0x48) 20:51:22 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6800000000000000]}, 0x48) 20:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6c000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:23 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x80ffffff]}, 0x48) 20:51:23 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x200000000000000}}, 0x11) 20:51:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000ca01000000000002", @ifru_ivalue=0x907000}) 20:51:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000005000000000002", @ifru_ivalue=0x907000}) [ 776.640252] binder: 25864:25865 unknown command 0 [ 776.645354] binder: 25864:25865 ioctl c0306201 200002c0 returned -22 20:51:23 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x48) 20:51:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x338, 0x0, &(0x7f0000000200)=ANY=[], 0xf3, 0x0, &(0x7f0000000100)="a74fde9dc2860ffb1a306733a83e355d176dd1645ec29a476454aedf1c50b014177c7d42c11474c1663b765c5298558ca368b55d9300000000416ceae853c24514f6979dbd62beab7ad7e65e8968b143cb5765aa83ec8224a50e1d847486238b4ce0ee8b950fd4c6f86c617226803e010ffda969b130d6b42864e104380b54b3901676221b40dea52d6173e5ababe1ce71b5fdd4ca91764b62bed5384fe7eebbcc20cbf52d191415e179105a00533bae9299fac5f4e40da7b789e1ecde6342ac1e64a75fe9e0ce874aa8aafab61790e657f89e8ca5bcc2b2d88a8753e2a104a1e6588fe646daed0b4a1cb60b27b28a883533c6"}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) accept$alg(r3, 0x0, 0x0) 20:51:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 776.730582] binder: 25913:25914 ERROR: BC_REGISTER_LOOPER called without request [ 776.738362] binder: 25914 RLIMIT_NICE not set 20:51:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000000000000c", @ifru_ivalue=0x907000}) [ 776.807509] binder: BINDER_SET_CONTEXT_MGR already set [ 776.840193] binder: 25919:25922 ioctl 40046207 0 returned -16 20:51:23 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) finit_module(r0, &(0x7f0000000100)='(!\x00', 0x1) 20:51:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000e00000002", @ifru_ivalue=0x907000}) 20:51:23 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000000000000]}, 0x48) 20:51:23 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]}, 0x48) 20:51:23 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0xffffff7f}}, 0x11) 20:51:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x6b6340) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cmac(blowfish-generic),xts-cast6-avx)\x00'}, 0x58) [ 777.134166] binder: 25919:25922 ERROR: BC_REGISTER_LOOPER called without request [ 777.141878] binder: 25922 RLIMIT_NICE not set 20:51:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7400, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:24 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000de01000000000002", @ifru_ivalue=0x907000}) 20:51:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x48) 20:51:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000015000000000002", @ifru_ivalue=0x907000}) 20:51:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200280013001300050600200001000000f6ff00f1a9e26a24476ab660abd928d54b9c2218dc6c0ef960", @ANYRES32=r1, @ANYBLOB="000000000000000008000a000f000000"], 0x28}, 0x1}, 0x0) 20:51:24 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x11000000}}, 0x11) [ 777.598816] binder: 25919:25975 unknown command 0 [ 777.610460] binder: 25919:25975 ioctl c0306201 20000080 returned -22 [ 777.633978] binder: 25974:25976 ERROR: BC_REGISTER_LOOPER called without request [ 777.641638] binder: 25976 RLIMIT_NICE not set 20:51:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}, 0x48) 20:51:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000000c0), 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) keyctl$session_to_parent(0x12) dup3(r0, r3, 0x0) 20:51:24 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000019000000000002", @ifru_ivalue=0x907000}) 20:51:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000009", @ifru_ivalue=0x907000}) [ 777.763488] binder: BINDER_SET_CONTEXT_MGR already set 20:51:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000]}, 0x48) [ 777.803881] binder: 25993:25994 ioctl 40046207 0 returned -16 20:51:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}, 0x48) 20:51:24 executing program 5: r0 = socket$inet6(0xa, 0x20000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0xfffffffffffffe86, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x101401) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) [ 778.076856] binder: 25993:25994 ERROR: BC_REGISTER_LOOPER called without request [ 778.084655] binder: 25994 RLIMIT_NICE not set 20:51:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xa00, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x48) 20:51:25 executing program 5: msgsnd(0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000005c0)={&(0x7f0000000340)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/81, 0x51}], 0x2, &(0x7f0000000500)=""/146, 0x92, 0x6}, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0xab8e, 0x0, 0x80000001, 0x500, 0x0, 0x6800000, r1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x20) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f00000013c0)="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", 0x1000}], 0x2, &(0x7f0000000200)=[@iv={0x68, 0x117, 0x2, 0x53, "7798c5f50af32102db18e162461d0f9f176be189c566712ea41865d859c8ec4c32e720a47949bf5b725247497c4b75bf1f81b648ff53d7d39162be655e19931369e5fce158f4801017125332f268eb6a415d3c"}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xc8}], 0x1, 0x48c0) msgrcv(0x0, &(0x7f0000000340)=ANY=[], 0x0, 0xfffffffffffffffe, 0x1) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200002539000000ca45191cb5fa96824a60de04facb2c7068ff43ffcfdedcbed2c456b36000000060da536659de5aaec32bbf94b10e18a168fe2509e9f383124ee7"], 0x42, 0x80000800) 20:51:25 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0xffff0000}}, 0x11) 20:51:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001a00000002", @ifru_ivalue=0x907000}) 20:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000001e000000000002", @ifru_ivalue=0x907000}) [ 778.477848] binder: 26032:26033 ERROR: BC_REGISTER_LOOPER called without request [ 778.485536] binder: 26033 RLIMIT_NICE not set 20:51:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001ca000000000002", @ifru_ivalue=0x907000}) 20:51:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001df00000002", @ifru_ivalue=0x907000}) 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}, 0x48) 20:51:25 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x8000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x82) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 778.632964] binder: BINDER_SET_CONTEXT_MGR already set 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c00]}, 0x48) 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}, 0x48) [ 778.657071] binder: 26049:26050 ioctl 40046207 0 returned -16 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000]}, 0x48) 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x80ffffff00000000]}, 0x48) [ 778.885612] binder: 26049:26050 ERROR: BC_REGISTER_LOOPER called without request [ 778.893553] binder: 26050 RLIMIT_NICE not set 20:51:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6c00, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:25 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]}, 0x48) [ 779.309775] binder: 26074:26075 ERROR: BC_REGISTER_LOOPER called without request [ 779.317444] binder: 26075 RLIMIT_NICE not set 20:51:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x101000) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)=0x1) exit(0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000000c0)={0x4, 0x1, 0xfffffffffffffffb}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400), &(0x7f0000000440), 0x8) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x4000) 20:51:26 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x11}}, 0x11) 20:51:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000ffffff8900000002", @ifru_ivalue=0x907000}) 20:51:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d0000000000002", @ifru_ivalue=0x907000}) 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000]}, 0x48) 20:51:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x80000000, 0x4) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}, 0x48) 20:51:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e001000000000002", @ifru_ivalue=0x907000}) 20:51:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 779.533976] binder: BINDER_SET_CONTEXT_MGR already set 20:51:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d1000000000002", @ifru_ivalue=0x907000}) 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74]}, 0x48) [ 779.567668] binder: 26099:26100 ioctl 40046207 0 returned -16 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]}, 0x48) 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x48) [ 779.835643] binder: 26099:26100 ERROR: BC_REGISTER_LOOPER called without request [ 779.843423] binder: 26100 RLIMIT_NICE not set 20:51:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x6000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:26 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4800000000000000]}, 0x48) [ 780.140711] binder: 26129:26130 ERROR: BC_REGISTER_LOOPER called without request [ 780.148371] binder: 26130 RLIMIT_NICE not set 20:51:27 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) connect$vsock_dgram(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) unshare(0x2000400) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) 20:51:27 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0xffffff7f00000000}}, 0x11) 20:51:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000a000000000002", @ifru_ivalue=0x907000}) 20:51:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000000000000a", @ifru_ivalue=0x907000}) 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x18000000]}, 0x48) 20:51:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311e16050000007033b4e18fee30ec7746a7fb2b21c846732db33c979ba6c659382f8db7a10387f4c5a172fee72a7e051faa8038373d1efb040f8e591639586945aa8a94763062ce1215222342b90228260eba0e474f64c8b95e853f3545045a56603fe6fd07b45143e6fe99dab303248807bf9107040000002e1120181f2fe0c365f12b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630000273e99692df70d76faf66bebd10bba4050a4403571a8cfac8370f1865a545cb34fb0d85ea3c93e021fe5da5603acf593a5a1e8b02309d9ea68ebbe2c99731a9ea8d18055f760271d2e554770bb79673c79dc8b000099c880c449"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 780.510355] binder: BINDER_SET_CONTEXT_MGR already set 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a]}, 0x48) [ 780.539590] binder: 26140:26141 ioctl 40046207 0 returned -16 20:51:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:27 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/105, 0xfffffffffffffef2) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9208, 0x0) read(r1, &(0x7f0000000000), 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x100) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) [ 780.585538] binder: 26140:26141 ERROR: BC_REGISTER_LOOPER called without request [ 780.593231] binder: 26141 RLIMIT_NICE not set 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000000000000]}, 0x48) 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48000000]}, 0x48) 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa000000]}, 0x48) 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x70000000]}, 0x48) 20:51:27 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25={0x0, 0x0, 0x100000000000000}}, 0x11) 20:51:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x60, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffc0]}, 0x48) 20:51:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d8000000000002", @ifru_ivalue=0x907000}) 20:51:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d101000000000002", @ifru_ivalue=0x907000}) [ 781.021735] binder: 26183:26184 ERROR: BC_REGISTER_LOOPER called without request [ 781.029608] binder: 26184 RLIMIT_NICE not set 20:51:27 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}, 0x48) 20:51:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 781.320479] binder: BINDER_SET_CONTEXT_MGR already set [ 781.326240] binder: 26140:26141 ioctl 40046207 0 returned -16 [ 781.346332] binder: 26140:26141 ERROR: BC_REGISTER_LOOPER called without request [ 781.354105] binder: 26141 RLIMIT_NICE not set 20:51:28 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = gettid() sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="d3f50d0c78fbdd32a3873f1eae5a7287e1f2f96bd2d416c4eab757c787dc77077e652585693a9545facc6e26f8a411f280305571db68aa0dbddede1a0486ca003800020062fb89bacb72c885e43621c78be28c6ca798a52b3b401f1bab35a8bbfa6b3ec5f185df24311e0b63496d9a5bb0ff3392130b06475c03670008008500e00000010063ea045bc22127a7b73ada9a2ffd763a0a9946ab9115d0d85e17fde4d87415824d61a0621d3015c3220e524ac3f22698a40438ae763d111fa9b8c3761d32ccd2269797fa2a48cdef422f3e96a601f91e473f10898b58a7b38d9a66d024bda0a2a091f836d3352d5970de5c78f73c238ac24147968699c844f61fd89fa89f10aa23aa7bae6a4a57594f3d5280886009d4de7b3a7383ca133a56337b9f617a86ebc6d23f8e3d078455e53a6aa555ef59e1cbcbaa107ee7be200d2742b70034331022446e3b01fba0fb3e99bdc8260ae4c2f32b87ece14e1872f3faf36ded9b9fa5d92829f6641dc3d2844b5139db107de816f35e6b48feacff6af57c979101739896e5d4f65533f63405baea4fa588d81d538a22a3d85361252301c5a34e8206a62d094b2a48e8222be289b8713f424baeaf13cd17f57ac4ec99f16234005100e31b1e67a5b6693b89420e9a169d346e980ca8ddfb48d479bdee6ede807b57b37da3abe95e872584e5e0c879053ef26314009200ff0200000000000000000000000000015d55d9fd62f9a8b9bdf4700f8fa33cbc8ea1c9d505ded4d2822df5c73699e4b719a95e2f8f234abea6dfa961c81c2cf555515ce16f1690bd30239bf8062c2691161b33bbb2dd67d69861631d96738282ed37048f9d3ccecf794bf30ec9585697d7187f5ca783e19971474f219b760f4402d9bd2ca2861d3ac6f50d62f112adb3e4bf40d8d39c1e2eccf9e05db121a5beb9eaf10b16316a648afa22c7cf14948040ce376e5f49ee446b1e8e2a4e7a062d8e2cf753cdef427e40c31fd45f141764d296eb454a4365a627039ddfff287bc31eca8fbac5fdab6ab5525177ce9e9583e2e7958f800bd2be473c97783c8cf2b82e37c02788a115f68c9b13903d26d765e0de31d1fe647b45983974ee07ec9021ac23fa91a3e305c15f52bfe2d363909ae81d45ee5d5ddbd5a855d1ffb4dbd74a01cf211b8191db0c02d1a778a5ec9175e6a3b05d2644caecdfee2605c639b52cdddf5d581540e3b9bc6cd3c6030b4d41d86e18774252435e2e65fcd3f5f8529f6b237ac26fd779ccc59030ccf57e6c7f121cfc67e90670058c4ab033bbda2776400d06ad40733a35e259511ce35777b31715faf35e9012e60316e787877b333b2409feeec76d9415f248114c8a79e065d3634bd759729f2e67d20c13"], 0x4f8}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000800)) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x3ff, 0x88000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e21, @rand_addr=0x750}, {0x307, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, {0x2, 0x4e23, @rand_addr=0x7}, 'bpq0\x00'}) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) clock_getres(0x7, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) fsetxattr(r0, &(0x7f0000000000)=@random={'security.', '/dev/binder#\x00'}, &(0x7f0000000040)='\x00', 0x1, 0x1) r5 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:28 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68]}, 0x48) 20:51:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="b2badd9c98fd696a4af24c1fbb4092f847d3493bdefa4c2e1afb4e1ffc2f17d04c1617fbeadd401e63520770c791bb2dd589f57c5fa8e39cd8bfe476949197ede7ba86a5d5d5c1f7005f050000b90d0f63", 0x51}], 0x1}, 0x8080) clock_adjtime(0x6, &(0x7f0000000500)={0x100000001, 0x9, 0x5, 0x8, 0x1, 0x800, 0x100000001, 0x0, 0x3, 0x5, 0x0, 0x7fffffff, 0xfff, 0x5, 0x9, 0xe87, 0x839, 0x9, 0x400, 0x1000, 0x2b4, 0x6, 0xceda, 0x9, 0x8001, 0x7fffffff}) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 20:51:28 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x20000551) 20:51:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000000000000a", @ifru_ivalue=0x907000}) 20:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000d00000000000002", @ifru_ivalue=0x907000}) 20:51:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:28 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00]}, 0x48) [ 781.448749] binder: BINDER_SET_CONTEXT_MGR already set [ 781.456208] binder: 26218:26220 ioctl 40046207 0 returned -16 [ 781.465205] binder: 26218:26220 ERROR: BC_REGISTER_LOOPER called without request [ 781.472914] binder: 26220 RLIMIT_NICE not set 20:51:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:28 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3604]}, 0x48) 20:51:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000b00000000000002", @ifru_ivalue=0x907000}) 20:51:28 executing program 5: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet6(0xa, 0x80003, 0x2c) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x5, &(0x7f0000000040)="29e2d9828b1a50645ddcaa") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="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", 0x52d}], 0x1, &(0x7f0000000a80)}}], 0x1, 0x0) 20:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001dd00000002", @ifru_ivalue=0x907000}) 20:51:28 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x3) [ 781.912737] binder: 26267:26268 ERROR: BC_REGISTER_LOOPER called without request [ 781.920415] binder: 26268 RLIMIT_NICE not set 20:51:28 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl(r0, 0x2, &(0x7f0000000440)="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") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400040, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xa0, r4, 0x200, 0x70bd28, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x8) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000ff030000000000000300000000000000fb0b000000000000f87700010000000044090000000000000600000000000000aa0b000000000000040000000000000010b5f768b17d461758e6f126d10131354915a9d350"]) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:28 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1800]}, 0x48) 20:51:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'syz_tun\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000240)) setrlimit(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000280)={[{0x7, 0x8, 0x0, 0x7, 0x9d, 0x101, 0xffffffff, 0x3a, 0x83f, 0x0, 0x4, 0x8, 0xc02b}, {0x5, 0x7, 0x100000000, 0x62, 0x7ff, 0x3, 0x8, 0x401, 0x8000, 0x1000, 0x9d, 0x6b, 0x2}, {0x91, 0x9, 0x40, 0x2, 0x2, 0x8001, 0x6f, 0x5, 0x2, 0x7, 0x7, 0x3f, 0x40}], 0x5}) setrlimit(0x0, &(0x7f00000dbff0)={0x0, 0x80000004}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8100, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x1) setsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f0000000140)="58dff0bc9062fd988ab2f1a69bbee3fe4c0955b8b8d6c0ade9438a9175675efc43f40ba9f8e95f6f4ab91586bb7ca61d1f93f0c2bc84dba7de671d52e89e02c9a0ae8b56f17d4fb4ca6c983affad66971adf4cf63c88fdad900035cf420d1e4f2f54b02af1eddb3803933be51eb0e58740a5291e7dc51bb9c1cb23c6e2528fd76bebb59a70ab274442e45e7a174ee61c695e5288f7b38571d432b54f487ac0e7", 0xa0) ioctl$int_out(r0, 0x5462, &(0x7f0000000200)) 20:51:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000da01000000000002", @ifru_ivalue=0x907000}) 20:51:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000020000000000002", @ifru_ivalue=0x907000}) 20:51:28 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0xfffffffffffffdef) 20:51:29 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x48) [ 782.310322] binder: BINDER_SET_CONTEXT_MGR already set [ 782.329347] binder: 26290:26291 ioctl 40046207 0 returned -16 20:51:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 782.427827] binder: 26290:26291 ERROR: BC_REGISTER_LOOPER called without request [ 782.435615] binder: 26291 RLIMIT_NICE not set 20:51:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x400000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:29 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000)) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x81, 0x0) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x1}}, 0x1e) 20:51:29 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68000000]}, 0x48) 20:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000400000000000002", @ifru_ivalue=0x907000}) 20:51:29 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0xfffffdef) 20:51:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d001000000000002", @ifru_ivalue=0x907000}) [ 782.704992] binder: 26267:26268 unknown command 0 [ 782.709986] binder: 26267:26268 ioctl c0306201 200002c0 returned -22 [ 782.807788] binder: 26324:26325 ERROR: BC_REGISTER_LOOPER called without request [ 782.815499] binder: 26325 RLIMIT_NICE not set 20:51:29 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000018000004f2cc1c6bfea"]) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x800, 0x400) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$TIOCCBRK(r4, 0x5428) 20:51:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:29 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10000000]}, 0x48) 20:51:29 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000002140), 0x0, &(0x7f0000002640)}, 0x4004) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r2, 0x4a, "adf43858d574415dbf1a4c421075ec0ab9d9cdc50658c3d9bea79f02c7654c348523c6b85a99c40385446d159f51ea0b3be24f886d6dc6584dc11ecf43ae3f47a933669dd0fa1649aecc"}, &(0x7f0000000100)=0x52) dup3(r1, r0, 0x0) 20:51:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080002900000000000002", @ifru_ivalue=0x907000}) 20:51:29 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0xfdef) 20:51:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000cb01000000000002", @ifru_ivalue=0x907000}) [ 783.136602] binder: BINDER_SET_CONTEXT_MGR already set [ 783.142092] binder: 26290:26291 ioctl 40046207 0 returned -16 [ 783.151915] binder: 26290:26291 ERROR: BC_REGISTER_LOOPER called without request [ 783.159597] binder: 26291 RLIMIT_NICE not set 20:51:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:29 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]}, 0x48) [ 783.255710] binder: BINDER_SET_CONTEXT_MGR already set [ 783.295468] binder: 26352:26356 ioctl 40046207 0 returned -16 [ 783.533701] binder: 26352:26356 ERROR: BC_REGISTER_LOOPER called without request [ 783.541444] binder: 26356 RLIMIT_NICE not set 20:51:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4800000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:30 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8040) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vboxnet1*\\keyringcpuset@\x00', r0}, 0x10) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="66baf80cb8428ad08aef66bafc0cb000eec401fb103e66b83c008ed8c4032d7917dbc7442400696d0000c744240216a80000c7442406000000000f011424c4619172e67766bad004ec48b805000000000000000f23d80f21f835000000800f23f866b80d000f00d0c421b1e3ad0b000000", 0x71}], 0x1, 0x64, &(0x7f00000003c0)=[@efer={0x2}, @efer={0x2, 0x2001}], 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000200)=0x4) ptrace$getregs(0xffffffffffffffff, r4, 0x0, &(0x7f0000000280)=""/104) r5 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) write$binfmt_elf32(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098ca91bb1c7a42bb2508052f7b18d2d9f3ff99a66f0805d3913028b64001fe029f997928b3763011654669a12cf82943a3cba68d29da87032a7a2d661466c1015e8e1c6777cc16c1c7980d14ad283c007abc2b3a889c808b1d9b2080ac9c7ade2ca8deed12269d62253074c403b77bf004b9d4abc816412e1202b1dd049ab99b7081d1650d26b7fcefb55e0c9a4e40868aaecd2fd1"], 0x58) 20:51:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000200000002", @ifru_ivalue=0x907000}) 20:51:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000069300000002", @ifru_ivalue=0x907000}) 20:51:30 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74000000]}, 0x48) 20:51:30 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x4) 20:51:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 783.683508] binder: 26386:26387 ERROR: BC_REGISTER_LOOPER called without request [ 783.691208] binder: 26387 RLIMIT_NICE not set 20:51:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r3, 0x7fdb, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100008000000000000000010000000000004bd6cf5a"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [0xc0010141]}) 20:51:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:30 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x30]}, 0x48) 20:51:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001400000002", @ifru_ivalue=0x907000}) 20:51:30 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1c1801) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x30c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160c9c5799042736cedb1e9dbefa907d"], 0x1b4, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001e000000002", @ifru_ivalue=0x907000}) 20:51:30 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:30 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff000000]}, 0x48) 20:51:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x90ffffff]}, 0x48) 20:51:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x800) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x4, 0x4) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x84000008912, &(0x7f0000000400)="e377107700000004003545377bd0f02491157c8400001fe6e6496783f155bc755640e00825eff92ea56ee18f1d9bf55f30bbc540f2fce70a1a0804f5e17808000000e16adb7e8a182e3aa4fe8cc08a3e016ed2865c77ceebac4b034de05d87c1600ef663375046081cbf18ef3fbe4b1ecc0c0b3746dfdb33e1a366d6ab038bf7640e52b3dfbe06f63217ff0db6c2a1be222dc9b1321905b04b163c41ac21dc4cde897991ef9eeee498e8b524d66fa2172e1d3b35b09deff383f252ae7fc033000000000000") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0xc}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote={0xfe, 0x80, [], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={0xfe, 0x80, [], 0xaa}}}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="e14bfc57"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000006000000000002", @ifru_ivalue=0x907000}) 20:51:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c6500000000000000080000000000000000000000000000000000000200000000000000000000000000000000000000000000000000009d2c0000000000000000"], 0x48) 20:51:31 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={"696662300000466536fb00", 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000c00000000420400000000000000"], 0x11) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)) r2 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="84cba668521c844c07dbb81452b210f1611705ce2339820c0db1454fdab81b7065a8ba87b02951eb342b0b782557df9ceebc529632049899539d4d8805cf2d1f3766fb5c6c6175a5c32185cd8093b5b40753ba2290dfb1f51c8bedb00344950909e7ee9daa8ce899364bb4696e499716f73b38c1d736a45d496013691b519995e81e58b241fac01b20213584af84fc52329d644989245ef9dbe289c2c0e8a7002ca30fd6d86fa233277dbfa48946414840289ccfa00dc16c26a54f1879c85fe7c91780bcf0", 0xc5, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000180)=""/86, 0x56) epoll_create(0xfff) 20:51:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000011000000000002", @ifru_ivalue=0x907000}) 20:51:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xa000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 784.522664] binder: 26438:26444 unknown command 1476152289 [ 784.540475] IPVS: ftp: loaded support on port[0] = 21 [ 784.548681] binder: BINDER_SET_CONTEXT_MGR already set [ 784.566781] binder: 26446:26448 ioctl 40046207 0 returned -16 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb0ffffff]}, 0x48) 20:51:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 784.570841] binder: 26438:26444 ioctl c0306201 20000240 returned -22 [ 784.587324] binder: 26446:26448 ERROR: BC_REGISTER_LOOPER called without request [ 784.595057] binder: 26448 RLIMIT_NICE not set [ 784.609708] binder: BINDER_SET_CONTEXT_MGR already set [ 784.631057] binder: 26438:26444 ioctl 40046207 0 returned -16 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x30000000]}, 0x48) [ 784.674852] binder: 26438:26444 unknown command 1476152289 [ 784.682527] binder: 26438:26444 ioctl c0306201 20000240 returned -22 20:51:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\vc\x00>'], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}, 0x48) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7400]}, 0x48) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x48) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000000000]}, 0x48) 20:51:31 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) userfaultfd(0x80000) getsockopt$inet_dccp_buf(r0, 0x21, 0xc2, &(0x7f0000000100)=""/162, &(0x7f0000000040)=0xa2) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x100008001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000001c0)=0xc) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="000310"], 0x11) 20:51:31 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000000000000]}, 0x48) [ 785.060541] binder: 26463:26464 unknown command 1040212747 [ 785.082390] binder: 26463:26464 ioctl c0306201 20000240 returned -22 20:51:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d9000000000002", @ifru_ivalue=0x907000}) [ 785.289510] IPVS: ftp: loaded support on port[0] = 21 20:51:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x5000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 785.554249] binder: 26494:26495 ERROR: BC_REGISTER_LOOPER called without request [ 785.561960] binder: 26495 RLIMIT_NICE not set 20:51:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x2cb8, 0x4) 20:51:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000fff000000000002", @ifru_ivalue=0x907000}) 20:51:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x3, 0x0, 0xd000, 0x2000, &(0x7f0000019000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x10, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x8, [{0x9, 0x0, 0x5c}]}) 20:51:33 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) setsockopt$inet6_buf(r0, 0x29, 0xfd, &(0x7f0000000100)="24b4abcc787dd6544f1d429fcbf3686e7fc4231007940ccce8a3dd6a2829ed018cf264197657eebd6b1c8a5808a0d488bf80af71bf615e2ca3fa6f53803ba705e0baa08927f3fd2333599d5c89e77f75409d7ba8218170782bc8fc6aea37f3b7779d69f351e465ecf936de415324c36e2cf22be91d7364b2db4de4639d28e05f97b856e82b3b21891b5a6aa4f4c651f7d4a14b53cd7ab1fea657f2fc9f9a2b", 0x9f) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r2, r3) 20:51:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x700, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000006", @ifru_ivalue=0x907000}) 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7400000000000000]}, 0x48) [ 786.521735] binder: 26501:26502 ERROR: BC_REGISTER_LOOPER called without request [ 786.526982] binder: BINDER_SET_CONTEXT_MGR already set [ 786.529389] binder: 26502 RLIMIT_NICE not set 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000]}, 0x48) 20:51:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 786.581396] binder: 26504:26511 ioctl 40046207 0 returned -16 [ 786.615965] binder: 26504:26511 ERROR: BC_REGISTER_LOOPER called without request [ 786.623649] binder: 26511 RLIMIT_NICE not set 20:51:33 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffff, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="514eddc85fe0562ff1c415fb450fe54a5578f79cfd13706cacbbfd9edd20c154a5411ab517ffa2ba7c697bd787350dd7383158abc169a83e7b42c52a023b863c1e79294d54996f8b7582c4eaa8161895ea371927798517484c147c2d0cdfb19e3097a58529c2ca09bf3ec9ff41f80f5281ad36c9d9810b85d471389bcbac4773740cfb47d69f625c9c6a92650954f7217be35e5181c324954e35e31b6f", 0x9d}, {&(0x7f0000000280)="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", 0x1000}], 0x2) r1 = creat(&(0x7f0000001440)='./file0\x00', 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001480)={0x8000, 0x400, 0x2, 0x10000, 0x5, 0x4, 0x4000000000, 0x6, 0x5, 0xfff, 0x10000}, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a30a58ce53bdcb162dbad14702625d154868a21324900000000000000001065c795a6fb9df28c28679f3e238c62f33afbed084490d44b1298934eeb80adfcca7bfbd1ab6137cab9883288ac5b8ad7e3df4ca152fd2fef7d887728fde6ef4c2cbe8db73ce795ee89"], 0x6a) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x2000000089f1, &(0x7f0000000080)={'sit0\x00\x00\x00\x00\x008\n\x00', @ifru_data=&(0x7f0000000180)="adf985b8d39b968aa06e6dd52a129c452bddaf7c073a95c48fa9ec914bfd6758"}) 20:51:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001400000000000002", @ifru_ivalue=0x907000}) 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}, 0x48) 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c]}, 0x48) 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffd0]}, 0x48) 20:51:33 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff80]}, 0x48) 20:51:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="266300a4b7"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000080)=0xc) modify_ldt$read(0x0, &(0x7f0000000300)=""/237, 0xed) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000000)='./file0\x00', r5, r6) 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}, 0x48) 20:51:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0x1000}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001d2000000000002", @ifru_ivalue=0x907000}) 20:51:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="9068bd415bc81904f6161cba90f7e81a", 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="fb47f22e485f65ece2d0a443859b67d1", 0x10) sync_file_range(r0, 0x101, 0x4, 0x1) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0xff81, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0xb}], 0x10}}], 0x40000000000012a, 0x0) 20:51:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d400000002", @ifru_ivalue=0x907000}) 20:51:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x600, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 787.394992] binder: 26563:26567 ERROR: BC_REGISTER_LOOPER called without request [ 787.402636] binder: 26567 RLIMIT_NICE not set [ 787.415088] binder: BINDER_SET_CONTEXT_MGR already set [ 787.439408] binder: 26571:26572 ioctl 40046207 0 returned -16 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0x48) 20:51:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:34 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000240)="404d69bf0fa42a42942ee700c4cd889683805d0abf8854320b620df466f813b519e310da8cc53299b9cac28f640d8c154523eafdac9d151f20000000c9ec039bc77054f1deb1c7509ccd33fd8516000000000000000000") mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r0, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) rmdir(&(0x7f0000000140)='./file0\x00') io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x59, r1, &(0x7f0000000080)="27406efb0a28a9b6063ee94292", 0xd, 0x8, 0x0, 0x1, r0}, &(0x7f0000000100)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) [ 787.452289] binder: 26571:26572 unknown command -1543478490 [ 787.489652] binder: 26571:26572 ioctl c0306201 20000240 returned -22 20:51:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x7) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000580)={"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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000018000000000002", @ifru_ivalue=0x907000}) 20:51:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000003", @ifru_ivalue=0x907000}) 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}, 0x48) 20:51:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) inotify_init() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x55, 0xf81) write$tun(r3, &(0x7f0000000300)={@val={0x0, 0xf5}, @void, @eth={@random="0f9bbc6ccbe8", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, [{[], {0x8100, 0x1000, 0x3, 0x1}}], {@mpls_uc={0x8847, {[{0xfff, 0x533e, 0x3ff, 0x5}, {0x1, 0x1, 0x8001, 0x7ff}, {0x7, 0x40, 0x7f, 0x1000}], @ipv6={0xffffffff, 0x6, "fc09df", 0x11b8, 0xff, 0x401, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, {[@routing={0x2b, 0x12, 0x2, 0x10001, 0x0, [@ipv4={[], [0xff, 0xff]}, @dev={0xfe, 0x80, [], 0x16}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x18}]}, @fragment={0x3b, 0x0, 0x7fffffff, 0x100000000, 0x0, 0x4, 0x67}, @dstopts={0xe6, 0x1a, [], [@generic={0x1, 0x89, "2f3f920012cc0064d87f0ffda167ceab2c903af5f28e05f08f00a0db579b4142ce3649ad16df91e0150b2f9ee3bb778eac3a0846173e20b2788758c414e72295b644283022b0ea5a45c2c0c93cf440e10aa747c8592ca93bc5f5b196d91f78142847b1f2f4843116b34dfe93fd77780ec43428e205cd392a08b823c4db30cd30a0d3bd2168f6248df1"}, @enc_lim={0x4, 0x1, 0xffffffffffffff7f}, @hao={0xc9, 0x10, @loopback={0x0, 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x100000000, 0x1, [0x4, 0x6, 0x10001, 0x2, 0x101]}}]}], @tcp={{0x4e22, 0x4e24, r4, r5, 0x81, 0x0, 0xe, 0x2, 0x4, 0x0, 0x0, {[@exp_smc={0xfe, 0x6, 0xe2d4c3d9}, @eol, @fastopen={0x22, 0x5, "730bc8"}, @sack={0x5, 0x16, [0x1, 0x7, 0x1, 0x7ff, 0x400]}]}}, {"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"}}}}}}}}}, 0x1202) 20:51:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x2001) munmap(&(0x7f000000c000/0x2000)=nil, 0x2000) madvise(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) futex(&(0x7f0000000400), 0xb, 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f00000005c0), 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x10000000, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000003c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket(0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) syz_open_procfs(0x0, &(0x7f0000000640)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02a4c7edbcd7a071fb35331ce39c5a11fc10c4908e69eeae12cd3975eec59b29cb622b79dbc41f4e0101") fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0x3c, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000480)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @rand_addr}}}, 0x88) socket(0x0, 0x0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000840)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0x1}, 0xc) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0xa37cf698) [ 787.676965] binder: BINDER_SET_CONTEXT_MGR already set 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x36040000]}, 0x48) 20:51:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 787.733011] binder: 26601:26602 ioctl 40046207 0 returned -16 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a000000]}, 0x48) 20:51:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e401000000000002", @ifru_ivalue=0x907000}) 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}, 0x48) [ 788.122240] binder: 26601:26602 ERROR: BC_REGISTER_LOOPER called without request [ 788.129947] binder: 26602 RLIMIT_NICE not set 20:51:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7400000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:34 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c]}, 0x48) 20:51:34 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x800}) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa200}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000c00000000000010000000000000a288832b4c0831004ddc79cc0fbeb71f547bf2881f88e493b050b76e9b244310524bdd0000c06a0d36d5e2eaeb89ba2c83b55e8419ae9369f0c8139fb083970e9286871f61dbd7e21128dcd1323cba035d8b0d53741eed0d401d1a22e90b47d092bd6bb01168e853dcb58d5fc337c27944c1d0c0d28a84c048bd55753d226a36230000001ce4500062e559829a4fde1500d252310cf30000000000000000000000000000"], 0x11) 20:51:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001de000000000002", @ifru_ivalue=0x907000}) 20:51:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080007fffffff00000002", @ifru_ivalue=0x907000}) 20:51:35 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a00]}, 0x48) 20:51:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x11) [ 788.316405] binder: 26649:26650 ERROR: BC_REGISTER_LOOPER called without request [ 788.324182] binder: 26650 RLIMIT_NICE not set 20:51:35 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 788.564886] binder: BINDER_SET_CONTEXT_MGR already set [ 788.582185] binder: 26669:26670 ioctl 40046207 0 returned -16 20:51:35 executing program 5: mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='-\x00', r1}, 0x10) connect$can_bcm(r0, &(0x7f0000000480)={0x1d}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}, 0x1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fchdir(r2) 20:51:35 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48]}, 0x48) 20:51:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001de000000000002", @ifru_ivalue=0x907000}) 20:51:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001100000000000002", @ifru_ivalue=0x907000}) 20:51:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"6966623000faffffffffffffff070400", 0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6, 0x810, r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x9, 0x8001, 0x1000, 0x9, 0xffff, 0x100000001, 0x7ff, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @rand_addr=0x3}}, [0xff, 0x2, 0x4, 0xffffffffffffffff, 0xffff, 0x1, 0x1, 0xd60, 0x3, 0x81, 0x5, 0x3, 0x20, 0x1000, 0x83e1]}, &(0x7f0000000180)=0x100) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\f\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x11) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 788.814154] binder: 26669:26670 ERROR: BC_REGISTER_LOOPER called without request [ 788.821857] binder: 26670 RLIMIT_NICE not set 20:51:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4c00000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:35 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60000000]}, 0x48) 20:51:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d1000000000002", @ifru_ivalue=0x907000}) 20:51:35 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x10, 0x4) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001240)={0x374d, 0x7f, 0xa, 0x0, 0x0, [{r0}, {r1, 0x0, 0x10000}, {r1, 0x0, 0x6876}, {r1, 0x0, 0x795}, {r1, 0x0, 0xbd1a}, {r1, 0x0, 0x80000001}, {r1, 0x0, 0x5}, {r0, 0x0, 0x1}, {r0, 0x0, 0x3f}, {r0, 0x0, 0x2}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0x4002}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00e4ff0c002396abc351b10a0000000000000000000000"], 0x11) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10300, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x220041, 0x4) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/4096) 20:51:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001d00000000000002", @ifru_ivalue=0x907000}) 20:51:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:35 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00000000000000]}, 0x48) 20:51:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d701000000000002", @ifru_ivalue=0x907000}) [ 789.229532] binder: 26713:26714 ERROR: BC_REGISTER_LOOPER called without request [ 789.237351] binder: 26714 RLIMIT_NICE not set 20:51:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x100000001, &(0x7f0000000000)="f4595b932412fdc502be8a888a28871ce617c794adb37972b8258743149d290ba7065ba1f6967d1785e0202c12cbfdd5de830ef58dcc43ddddb3038a9a20dd486033c23be3d8f0afaa95e861226288f4bd88201225e7600dadffc6f797bb92dcedd47cac82c41097763cdcba9fef5336f6991eccca5f3bc8b87f52d78266ff15213a2a88c290211e2da42739d796de32826d19a08d8d1e1c3457a5f14021472858fdd958e459914778c79878157cc534ee83aa113b") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) socket$can_raw(0x1d, 0x3, 0x1) r3 = dup2(r1, r0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 789.434485] binder: BINDER_SET_CONTEXT_MGR already set [ 789.447600] binder: 26732:26733 ioctl 40046207 0 returned -16 [ 789.465719] binder: BINDER_SET_CONTEXT_MGR already set 20:51:36 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x8001, 0x8000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='security.capability\x00', &(0x7f0000000200)="0000000201000000000000010400000000000000", 0xddb5, 0x3) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x79) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='syz_tun\x00') r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) 20:51:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x90000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x5003, &(0x7f0000000080), 0x6, r3, 0x2}) 20:51:36 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000]}, 0x48) 20:51:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001cb000000000002", @ifru_ivalue=0x907000}) 20:51:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d501000000000002", @ifru_ivalue=0x907000}) 20:51:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 789.490995] binder: 26732:26733 ioctl 40046207 0 returned -16 [ 789.515245] binder: 26732:26733 ERROR: BC_REGISTER_LOOPER called without request [ 789.523203] binder: 26733 RLIMIT_NICE not set [ 789.577889] QAT: Invalid ioctl 20:51:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x300000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:36 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6800]}, 0x48) 20:51:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001c800000002", @ifru_ivalue=0x907000}) 20:51:36 executing program 5: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1b) clock_gettime(0xa, &(0x7f0000003ac0)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x8000, 0x0) fchmod(r0, 0x46) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 20:51:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000a00000000000002", @ifru_ivalue=0x907000}) 20:51:36 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x181080, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x88) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x11) 20:51:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000000000000200000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000070]}) [ 790.103968] binder: 26777:26778 ERROR: BC_REGISTER_LOOPER called without request [ 790.111737] binder: 26778 RLIMIT_NICE not set 20:51:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000040)={0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:37 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x18]}, 0x48) 20:51:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001cd00000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000ce01000000000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4a}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x12aa, 0x20200) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x99f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x1000}, &(0x7f0000000180)=0x8) 20:51:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ipddp0\x00', 0x4003}) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x101001, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000c000000000000000000000000005654f836830bdd647c6cb7700188991c4f9267bfaf9a813b5f55ad04cbb3c97f8a1f2d20f2d5269061089a6b05b73acf1a71c09a2f5983fcd90402d8d3dc49be430499b9c6451544abc253c5a0ef9357e1063116dfa2d66008b3e52e28212a14803294a7797e085c887b04a2a18b2c269b7f0e89372ed94c855e0b3d24b06497f3cddb14290c360871a0d78b71610c7f14be16e7a6d4ed26c86329cb06fe12aae54b1a48b142053d79134076810104000000000000865e17d42a8ad867c5a32914e586b2"], 0x11) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000580)=""/4096, &(0x7f0000000000)=0xbe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x14, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x2c, @multicast2=0xe0000002, 0x4e21, 0x3, 'sed\x00', 0x12, 0x0, 0x4a}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x0, 0x8, 0xc000000, 0x6b5}}, 0x44) [ 790.370453] binder: BINDER_SET_CONTEXT_MGR already set [ 790.375951] binder: 26732:26733 ioctl 40046207 0 returned -16 [ 790.378121] binder: 26732:26790 ERROR: BC_REGISTER_LOOPER called without request [ 790.389597] binder: 26790 RLIMIT_NICE not set [ 790.390260] binder: BINDER_SET_CONTEXT_MGR already set [ 790.399569] binder: 26732:26788 ioctl 40046207 0 returned -16 20:51:37 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700000000000000]}, 0x48) [ 790.470265] binder: BINDER_SET_CONTEXT_MGR already set [ 790.492504] binder: 26803:26807 ioctl 40046207 0 returned -16 [ 790.515460] binder: 26803:26807 ERROR: BC_REGISTER_LOOPER called without request [ 790.523218] binder: 26807 RLIMIT_NICE not set 20:51:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="f20f080f01cf0f233a66baf80cb86402868cef66bafc0c66ed67660ff6b9360036663e0f35b9c60d00000f322e2ef30fbeb541240000f30f211366baf80cb81f926b83ef66bafc0cb000ee", 0x4b}], 0x1, 0x5d, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000fae10007000000000000009d209f59ddb1785cd3e660440700000007c712c46f6b7b26f18b2e584edabf98aefdce6e9862b73c5eb7f5688382360900e1"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:51:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000c00000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080008906000000000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6tnl0\x00', 0x400}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = semget$private(0x0, 0x4, 0x86) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000000580)=""/4096) syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x422000) 20:51:37 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}, 0x48) 20:51:37 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff00]}, 0x48) [ 790.975775] binder: 26833:26834 ERROR: BC_REGISTER_LOOPER called without request [ 790.983442] binder: 26834 RLIMIT_NICE not set 20:51:37 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff90]}, 0x48) 20:51:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000900000000000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc5fd, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r1, 0x40086604, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x492492492492498}) 20:51:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000800000002", @ifru_ivalue=0x907000}) 20:51:37 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x4, [0x7, 0xd2a, 0xfffffffffffffc01, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0xab, 0x2}, 0x14) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x4, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) 20:51:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b630000f508134e4a7b20029ee1d875a859d93629257613e7bc9a248d2c6dc078fe3d7d7fd0b2a1370a64031a3e345d1ad860e52c94b2a329caa99d5d11af434837be4f45003519584b09af1421ce91baeaf371a9eb164ba4de578e5613c5d895d8c48710eeca45a3e822bbac8ac463ef7e6a1af5d160833e11a2a17231824e3eab30d42012d8f1cf78debc01e61fb487a37e4c99"], 0x1b4, 0x0, &(0x7f0000000300)}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x100000001, {"8ca4d96937dd0ee78fcf077f565f50af"}, 0x688, 0x1ff, 0x9}, @ib={0x1b, 0x0, 0xff, {"65c97f70158e379d3a154fdd339417a3"}, 0xffffffffffff8000, 0x4, 0xffff}}}, 0x118) [ 791.335593] binder: BINDER_SET_CONTEXT_MGR already set 20:51:38 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20000000]}, 0x48) [ 791.383437] binder: 26856:26863 ioctl 40046207 0 returned -16 [ 791.402877] binder: 26856:26863 ERROR: BC_REGISTER_LOOPER called without request [ 791.410708] binder: 26863 RLIMIT_NICE not set 20:51:38 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x60000, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000001c0)="6966623000faffffffffffffff00") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0045000cb102000000f62f187d00000000"], 0x11) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe000, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000140)) semget(0x3, 0x6, 0x400) 20:51:38 executing program 5: r0 = semget(0x0, 0x6, 0x404) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/131) r1 = socket$inet6(0xa, 0x7, 0x200000009) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x6}]}, 0x10) 20:51:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000004000000002", @ifru_ivalue=0x907000}) 20:51:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4c000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:38 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000]}, 0x48) 20:51:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d100000002", @ifru_ivalue=0x907000}) 20:51:38 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000]}, 0x48) 20:51:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 791.832580] QAT: Invalid ioctl [ 791.852317] binder: 26894:26896 ERROR: BC_REGISTER_LOOPER called without request [ 791.860054] binder: 26896 RLIMIT_NICE not set [ 791.883911] QAT: Invalid ioctl 20:51:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001500000000000002", @ifru_ivalue=0x907000}) 20:51:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001da00000002", @ifru_ivalue=0x907000}) 20:51:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:38 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd0ffffff00000000]}, 0x48) 20:51:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cdfffc), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x300, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0x1a096e11}}, [0x8, 0x100000001, 0x5, 0x20c9ea0e, 0xff, 0x8, 0x3, 0xc4, 0x37ab, 0x1f, 0xfffffffffffff801, 0x7, 0x2, 0x4, 0x4]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x65, "ed51f0e3d1ad7a812c31ffb70d4ff7f158d691b5ab67df97be61780c8cc543cf0d3b20ce3193697934026862cd78d5dd72b6790e626551440b965654baef03546921f31fee1237f2efb139341cef6bbc36f2f4086c08fc1da4f1a134e122dc771f12d49926"}, &(0x7f0000000200)=0x6d) 20:51:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x4, 0x2000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='ip6tnl0\x00', 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000040)={0x3, 0x3}) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffe89, 0x0, &(0x7f0000000400)=ANY=[], 0x9b, 0x0, &(0x7f0000000100)="ad59551008f01bf73791f0e0418e49700b015b8d1c7ba1472bf67da18ac465d0776f65a97488ea9991a6d179bf02e84765d0b5c3fd8d40b3b0310c66e5ad2a8b5d34dc026467a924775349cb4ccc368f1acbc90b0ac87cbfb329230f8a655275f8a1d991587fce5b2bb2de8f1c81229b8c0587e579ff86296dbc9514a3e394cba091dfe743264a4a758cab2652a37697ccbf437ba8cd139b51b338"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000080)) 20:51:38 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x58, 0x21, 0x21, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x34, 0x4, 0x8, 0x0, 0x0, 0x1, 0x10}, [@FRA_SRC={0x8, 0x2, @multicast2=0xe0000002}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa}, @FRA_SRC={0x8, 0x2, @multicast1=0xe0000001}, @FRA_SRC={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @FRA_SRC={0x8, 0x2}, @FRA_SRC={0x8, 0x2}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x8, 0x16}]}, 0x58}, 0x1}, 0x840) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prctl$setmm(0x34, 0x0, &(0x7f0000990000/0x2000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getitimer(0x2, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x9c}, &(0x7f00000001c0)=0x10) fchmod(r1, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, [0xffffffffffffffe0, 0x0, 0x1000, 0xfffffffffce80b76]}) ioctl$TIOCNOTTY(r0, 0x5422) [ 792.123984] binder: 26856:26863 ioctl 40046205 0 returned -22 [ 792.182525] binder: BINDER_SET_CONTEXT_MGR already set [ 792.202130] binder: 26934:26935 ioctl 40046207 0 returned -16 [ 792.223099] Unknown ioctl 1076932219 20:51:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0xff, 0x6}, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x4000, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000180)) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000030000004f5b382acc3fcc0241100bc6d002f6dd4cecec22328b3ec4725e2804bf270cb98a9d3590035aaf078d7ce5000000000000"], 0x11) 20:51:39 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc0ffffff]}, 0x48) 20:51:39 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x40) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000200)=""/110, &(0x7f0000000140)=0x6e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, &(0x7f0000000000), 0x45, 0x2) 20:51:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:39 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x436]}, 0x48) 20:51:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001e4000000000002", @ifru_ivalue=0x907000}) 20:51:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001c00000000000002", @ifru_ivalue=0x907000}) 20:51:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x10001, @loopback={0x0, 0x1}, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="079595f6386969464ca1ad0bdc4737d1e983c9bde825bd1ca702752816fe4c7da219e0b4c0a969c2ed7e049eb0f43f322944685c99e94366bca187b834abb841ec1f202b4d9dc034b66995cb815fbb4c365b04f59ae76b110ba4320e2d806e1ac03db4b60d7e95e7197670bda69d7de2f22ae775291e0e11bcc0108b3807e40253f563bc69d4517ca263756744b0a1aafdb072473b122c93b6d260a0d65e3fe2da6c15cff1b3d0cefe33b6167f9483baa22fd23602eace5238360b878084d9427bcb327f423ea4db1c337468c9399299bb2f554f8f3cf77ab1573fe6cbfffa24211e56845f1f", @ANYRES64=0x0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYPTR]], @ANYRES64=r0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000100)=0x8) recvmmsg(r0, &(0x7f00000055c0)=[{{&(0x7f00000004c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1, &(0x7f00000006c0)=""/87, 0x57}}], 0x1, 0x0, &(0x7f0000005740)) r1 = socket(0x0, 0x1, 0x8001) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000000), &(0x7f00000001c0)=0x256) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x300, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 20:51:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xfdfdffff, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:39 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x1) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 792.714471] binder: 26970:26972 ERROR: BC_REGISTER_LOOPER called without request [ 792.722214] binder: 26972 RLIMIT_NICE not set 20:51:39 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb0ffffff00000000]}, 0x48) 20:51:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000f000000000002", @ifru_ivalue=0x907000}) 20:51:39 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) move_pages(r1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000000c0), 0x2) 20:51:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001e00000002", @ifru_ivalue=0x907000}) [ 792.985537] binder: 26934:26992 ioctl 5386 20000080 returned -22 20:51:39 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb0ffffff00000000]}, 0x48) 20:51:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80001001}, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:39 executing program 0: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:39 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00]}, 0x48) [ 793.098945] binder: BINDER_SET_CONTEXT_MGR already set 20:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="a3dedc5850"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4626262c8523bf012cf6") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x117000}) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:51:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000de01000000000002", @ifru_ivalue=0x907000}) [ 793.139904] binder: 27003:27004 ioctl 40046207 0 returned -16 20:51:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000e00000002", @ifru_ivalue=0x907000}) [ 793.203372] binder: 27003:27004 ERROR: BC_REGISTER_LOOPER called without request [ 793.211309] binder: 27004 RLIMIT_NICE not set 20:51:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:40 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000]}, 0x48) 20:51:40 executing program 0: r0 = socket(0x15, 0x801, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bpq0\x00', r2}) 20:51:40 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000e000000000002", @ifru_ivalue=0x907000}) 20:51:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000cb01000000000002", @ifru_ivalue=0x907000}) 20:51:40 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@empty, 0x47, r1}) pread64(r0, &(0x7f0000000280)=""/63, 0x3f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x10, 0x0, 0x2}}) r4 = dup(r2) ioctl$TCSBRKP(r4, 0x5425, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) r6 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x48052, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000300)=[@register_looper={0x630b}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x3}, @acquire_done={0x40106309, r6, 0x4}], 0x33, 0x0, &(0x7f0000000340)="c6a7a816182b3a6bacd8dd37e0cfa7800baf4d8af3dfa4a6fe1da2c5d8fcd301221a6212ca1b8c83f7af2451020145ec87d042"}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:51:40 executing program 0: socket(0x11, 0x100000803, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x48000, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '/dev/net/tun\x00'}, &(0x7f0000000080)="776c616e30926d643573756d747275737465642e7b2b00", 0x17, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000100)) 20:51:40 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0x48) [ 793.589063] binder: 27049:27051 ERROR: BC_REGISTER_LOOPER called without request [ 793.596739] binder: 27051 RLIMIT_NICE not set 20:51:40 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x800) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xf3, 0x0, &(0x7f0000000380)}) getsockname$inet(r3, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) 20:51:40 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001700000002", @ifru_ivalue=0x907000}) 20:51:40 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000000)='./file0\x00') 20:51:40 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x48) 20:51:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e3000000000002", @ifru_ivalue=0x907000}) 20:51:40 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) [ 793.966436] binder: 27081:27082 unknown command 0 [ 793.993096] binder: 27081:27082 ioctl c0306201 20000240 returned -22 [ 794.028204] binder: 27081:27082 unknown command 0 [ 794.045619] binder: 27081:27082 ioctl c0306201 200002c0 returned -22 20:51:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0xfdfdffff00000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c000000]}, 0x48) 20:51:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xc, &(0x7f0000000100)=@req3, 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000000, 0x200) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xf002, 0x3000, 0x1, 0x4, 0xff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xf40c1, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x100000000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x2, 0x0, 0x80000000, 0x5}) 20:51:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000df01000000000002", @ifru_ivalue=0x907000}) 20:51:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001ce000000000002", @ifru_ivalue=0x907000}) 20:51:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0bd1165b"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={0xfffffffffffffffb}, 0x8) 20:51:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x3e2}, &(0x7f0000000140)=0x8) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) [ 794.377182] binder: 27049:27051 unknown command 0 [ 794.382255] binder: 27049:27051 ioctl c0306201 200002c0 returned -22 20:51:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xff000000]}, 0x48) [ 794.444090] binder: 27100:27102 unknown command 1528221963 [ 794.469755] binder: 27100:27102 ioctl c0306201 20000240 returned -22 [ 794.478703] binder: BINDER_SET_CONTEXT_MGR already set [ 794.488226] binder: 27111:27112 ioctl 40046207 0 returned -16 20:51:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0x4, 0x40, {r1}}) timer_create(0x5, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000100)="bd055532c063b6042ea3ac25d036914c1a", &(0x7f00000001c0)="da8353d67e66061bfd945a0c9ebd6953a9b15a2f41e4ff788c6011784ba9dadb5d16739e4b1dd3047553c5420771bd54c995be95db3453bde8c58cde72a155ca7cf6e49610ab80e0eb401e1e"}}, &(0x7f0000000280)=0x0) timer_gettime(r2, &(0x7f00000002c0)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:51:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket$inet6(0xa, 0x3, 0xe1) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000016000000000002", @ifru_ivalue=0x907000}) [ 794.514512] binder: 27111:27112 ERROR: BC_REGISTER_LOOPER called without request [ 794.522205] binder: 27112 RLIMIT_NICE not set 20:51:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x48) 20:51:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001e00000000000002", @ifru_ivalue=0x907000}) 20:51:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb0ffffff]}, 0x48) [ 794.879703] binder: 27126:27133 ERROR: BC_REGISTER_LOOPER called without request [ 794.887432] binder: 27133 RLIMIT_NICE not set 20:51:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x48000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xff, &(0x7f0000000080)=0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="324bc917fef4", [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 20:51:41 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x48) 20:51:41 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000c000000000000000012e748251a1c07297b6e83b98b81fc719be29e408182ea8ab5f2961f66c90046ddc57327f2692b1f0116968a01d1bed135361d861b115c3707ba2b947a76d14734ec998c268653c0ce09d8cdc2b2150698ad"], 0x11) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x58, 0x0, 0x8001, 0x1, 0x8, 0xabb8, 0x8001, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r2, 0x8, 0x8, 0xffffffff, 0x7, 0x81}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r2, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x2, 0x0, 0x7fff, 0xecb3, 0x1}, &(0x7f00000001c0)=0x98) 20:51:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000693000000000002", @ifru_ivalue=0x907000}) 20:51:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000e703000000000002", @ifru_ivalue=0x907000}) 20:51:42 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x48) 20:51:42 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 795.340413] binder: BINDER_SET_CONTEXT_MGR already set [ 795.358572] binder: 27163:27164 ioctl 40046207 0 returned -16 20:51:42 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) getgroups(0x9, &(0x7f0000000080)=[0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r7 = getegid() setgroups(0x5, &(0x7f0000000500)=[r3, r4, r5, r6, r7]) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYBLOB="e93a39c4180cd4222c5fd2e82da5f889e52bee39a0fbcf6a86e4df6493418a810c998af1b598ffb637bf9caee1b65c099239b0b8698bef4eac6663cba3ad0ed1cb283104b9a302fed43a0962e6fca3d2ee1bf9814b67fb994a26147b8baa836cd82e59dd450467a3a5edef549923e5349e962195f4e40b992ac26d44215deccd47fe7ab3ee16bc91bd226f779ec1b908a0e5e6d655ed2e8babd0983af685b1f0c6f3d224e8926b1bf90c4c2cf8bc00828e1c9cad2b86a765a2924b4ee71c"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYPTR64]], @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYPTR, @ANYRES32=r1, @ANYRES64, @ANYRES16=r0, @ANYBLOB="b7da1b943ca6d1cc6dce27b7b0441ff69f00a32c73c1943e38cee5db12b002d13f584514a1353b4419c275a32b1c88e57594835de0cf9a193f0b53a48d1f23cccd1959e9eb99dfce"], @ANYBLOB="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", @ANYRES32=r0], @ANYRES32=r1], 0x14) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x80000000, @empty, 0x6c}], 0x1c) sendfile(r0, r2, &(0x7f0000000040), 0x400000000000000) [ 795.393892] binder: 27163:27164 ERROR: BC_REGISTER_LOOPER called without request [ 795.401604] binder: 27164 RLIMIT_NICE not set 20:51:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63cf2407bb21b0a9f809ea93190f88460004"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r2 = dup2(0xffffffffffffffff, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @empty, 0x6}, {0xa, 0x4e23, 0xcdd5, @dev={0xfe, 0x80, [], 0xe}, 0x7fff}, r3, 0x67621439}}, 0x48) 20:51:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000c00000000000002", @ifru_ivalue=0x907000}) 20:51:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001d00000000000002", @ifru_ivalue=0x907000}) 20:51:42 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0x48) 20:51:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000001c0)=0x5, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:51:42 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x48) [ 795.815539] binder: 27185:27186 unknown command 617571083 [ 795.822615] binder: 27185:27186 ioctl c0306201 20000240 returned -22 20:51:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x20000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:42 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x48) 20:51:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000400)) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x23e, r1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff33, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000040)={@mcast2}, &(0x7f0000000140)=0x14) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x208002, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000200), &(0x7f0000000440)=0x4) 20:51:42 executing program 0: r0 = socket(0x11, 0x100040803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630000e90035cea7f64e16baa6d46f1a204062bf975f749ec1ae4a86a80b6b0acad3883cf5255dd13985c68de5408c26d354e6626615fd47b4c92aec648d6094a500afe9c5a7b236f6c6cc12ec0608b26ef67dacf840a285ad1c1e66543f93e2b026324ec521a6f1bf4cbd2cc3c31cda9cfe83d5671e0b3e98e8d429aa0ae0e126227efa88cc83fba24a6a382c9f26dad53844d2ad1ea64d18648135be1500c5aee96fcdc559f36a217749d541ca4d383c6825e9a6c015a0ceeab49d0f"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:42 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000003e700000002", @ifru_ivalue=0x907000}) 20:51:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000040", @ifru_ivalue=0x907000}) [ 796.179759] binder: 27219:27221 ERROR: BC_REGISTER_LOOPER called without request [ 796.187527] binder: 27221 RLIMIT_NICE not set [ 796.210997] binder: BINDER_SET_CONTEXT_MGR already set 20:51:42 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:42 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x48) 20:51:42 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000}], 0x0) [ 796.238274] binder: 27225:27226 ioctl 40046207 0 returned -16 [ 796.268785] binder: 27225:27226 ERROR: BC_REGISTER_LOOPER called without request [ 796.276463] binder: 27226 RLIMIT_NICE not set 20:51:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000500000000000002", @ifru_ivalue=0x907000}) 20:51:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff90]}, 0x48) 20:51:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e4000000000002", @ifru_ivalue=0x907000}) 20:51:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x74000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:43 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x140, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000080), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0x0, 0x0, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, @empty, {[0x0, 0x0, 0xff]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x108}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x4}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x10001}, 0x1c) 20:51:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]}, 0x48) 20:51:43 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) getrandom(&(0x7f0000000100)=""/228, 0xe4, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000000)=0x68) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000f000000000002", @ifru_ivalue=0x907000}) 20:51:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000f00000000000002", @ifru_ivalue=0x907000}) 20:51:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0xfffffffffffffffe) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0bf959630000"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x9, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x0, 0x7}, {0x1, 0x3, 0x1ff, 0x3}, {0xc00, 0x3, 0x39, 0x101}]}, 0x10) splice(r1, &(0x7f0000000200), r2, &(0x7f0000000280), 0xe97, 0xb) r3 = dup2(r1, r0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000080)=r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 797.052844] binder: 27270:27274 unknown command 1666840843 [ 797.080200] binder: 27270:27274 ioctl c0306201 20000240 returned -22 [ 797.084483] binder: BINDER_SET_CONTEXT_MGR already set 20:51:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x48) 20:51:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 797.105535] binder: 27270:27274 ioctl 400454da 20000080 returned -22 [ 797.117227] binder: 27284:27286 ioctl 40046207 0 returned -16 [ 797.134150] binder: 27270:27274 unknown command 1666840843 [ 797.144077] binder: 27284:27286 ERROR: BC_REGISTER_LOOPER called without request 20:51:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080004500000000000002", @ifru_ivalue=0x907000}) [ 797.151838] binder: 27286 RLIMIT_NICE not set [ 797.161381] binder: 27270:27274 ioctl c0306201 20000240 returned -22 20:51:43 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 20:51:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000004", @ifru_ivalue=0x907000}) [ 797.201719] binder: 27270:27274 ioctl 400454da 20000080 returned -22 20:51:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000]}, 0x48) 20:51:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") socketpair(0x9, 0x0, 0x9, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r3, 0x0, &(0x7f00000004c0)) r4 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x1) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b3a8b02"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000440)=""/50) r5 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) recvfrom$packet(r5, &(0x7f0000000100)=""/228, 0xe4, 0x40000000, &(0x7f0000000040)={0x11, 0xfd, r6, 0x1, 0x1, 0x6, @random="0e6c8d18a6f0"}, 0x14) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x500000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x0, @udp_ip4_spec={@rand_addr}, {"5b9e", @link_local={0x1, 0x80, 0xc2}}, @sctp_ip4_spec={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, {"40b0"}}}}) 20:51:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000600000002", @ifru_ivalue=0x907000}) 20:51:44 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x48) 20:51:44 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000900000000000000000000000000f303ce12d11a0c4c262c38978f25c3596652c29563921a86a74db020afbd38b47a36e6697039294cfe64522f65b68b68b8de495d7e89634c8fdf5972ae50ddf22ba4db5c08fb8b0a89e65ca522da42174a4d56ac7ee3e88e26e0ff5c659691adbcd38d45c766519dda6a5df087b3aaa76241d4cbacbdc98e4ac96f2cadc65dc5322442764cada61f743ac724781ddbd94b40d990a14d7fd318bf4fbfa9c0c953ee591d22cefa6e0a373f73e5698db4eb34c1492e1c5ecc35da82c4eab90508a8efdaca1e3fac4c79de67fcb4c0"], 0xfffffe57) 20:51:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d301000000000002", @ifru_ivalue=0x907000}) 20:51:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 20:51:44 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x48) [ 797.920533] binder: 27335:27336 ERROR: BC_REGISTER_LOOPER called without request [ 797.928226] binder: 27336 RLIMIT_NICE not set 20:51:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)='t', 0x1) [ 797.970509] binder: BINDER_SET_CONTEXT_MGR already set 20:51:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000001e000000000002", @ifru_ivalue=0x907000}) 20:51:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001de00000002", @ifru_ivalue=0x907000}) 20:51:44 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80ffffff]}, 0x48) [ 798.003781] binder: 27346:27348 ioctl 40046207 0 returned -16 [ 798.032298] binder: 27346:27348 ERROR: BC_REGISTER_LOOPER called without request [ 798.039972] binder: 27348 RLIMIT_NICE not set 20:51:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) 20:51:44 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18]}, 0x48) 20:51:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:45 executing program 5: prlimit64(0x0, 0xe11e93ad2c422a90, &(0x7f0000000140), &(0x7f0000000180)) 20:51:45 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]}, 0x48) 20:51:45 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000080c03000000003bfcabb5e1bc8f5d955a1693e7466056ac96667ec621c1939de56fb85f428eeb52a7082cf40000000000000000"], 0x11) 20:51:45 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000000000000c", @ifru_ivalue=0x907000}) 20:51:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000001d000000000002", @ifru_ivalue=0x907000}) 20:51:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x880, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ef0000005d4a87fd51b713a790988bf1da27cab8ac89b3971fdcf9872c528d7332131a7ebbbda078c965015eb950eed27c3d1f40f275e1afb2b93b06fa9b0b6b499b175ca13c12673842993709fa0d77df75d2ea66fb436ba3596cf90511a4a3b11fb1e8f2df956e1593cd818ede54da5295c6b47bb9301f836f630d687a44d1044169de1c9c97de72f413c81bdb7c56ddca2729e2e397d198e74ce84fce2c1a8120a0e421cf604d238abf9ea2027bc2dcc12e420153f668f3a5f3b1361cb6e297574153f8e5dc50b5dc719abc988d86cd3d2bfdc6106c5a944f6cfb759810ecb59b6385b2223250a34a740000000000000000"], &(0x7f0000000040)=0xf7) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r4, 0x4) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r1, r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 798.715978] binder: 27335:27336 ioctl 4b33 20000040 returned -22 20:51:45 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000000000000]}, 0x48) 20:51:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 798.827068] binder: 27398:27399 ERROR: BC_REGISTER_LOOPER called without request [ 798.834772] binder: 27399 RLIMIT_NICE not set [ 798.841645] binder: 27400:27401 ERROR: BC_REGISTER_LOOPER called without request [ 798.849395] binder: 27401 RLIMIT_NICE not set 20:51:45 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:45 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xff) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477631070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r2, r1) r4 = pkey_alloc(0x0, 0x1) pkey_free(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) sync() 20:51:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001900000002", @ifru_ivalue=0x907000}) [ 798.981347] binder: BINDER_SET_CONTEXT_MGR already set 20:51:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000000000003f", @ifru_ivalue=0x907000}) 20:51:45 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x74000000]}, 0x48) [ 799.007062] binder: 27417:27418 ioctl 40046207 0 returned -16 [ 799.030637] binder: 27417:27418 ioctl 8912 20000140 returned -22 20:51:45 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x30000000]}, 0x48) [ 799.064411] binder: 27417:27418 ERROR: BC_REGISTER_LOOPER called without request [ 799.072131] binder: 27418 RLIMIT_NICE not set 20:51:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x74, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) 20:51:46 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}, 0x48) 20:51:46 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xb) 20:51:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000800000000000002", @ifru_ivalue=0x907000}) 20:51:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001f00000002", @ifru_ivalue=0x907000}) 20:51:46 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x48) 20:51:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) [ 799.708403] binder: 27454:27457 ERROR: BC_REGISTER_LOOPER called without request [ 799.716230] binder: 27457 RLIMIT_NICE not set 20:51:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e201000000000002", @ifru_ivalue=0x907000}) [ 799.826826] binder: BINDER_SET_CONTEXT_MGR already set [ 799.835181] binder: 27417:27418 ioctl 40046207 0 returned -16 20:51:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x0, 0x7539c07ba0d40850) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8f, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) symlinkat(&(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={r4, 0x8000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r4}, &(0x7f0000000340)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16f853e2a482646f380981d4e70100000000000000b60c0096625d0c5ba4612156a9c7c7ce0602805a20a28738484acd8d6899eed00dd0335e89f89a78522a22a5b59a6d38d988ecc33780c91000ed4228b0fd71ff4f0e947bdab30a20564c730e2e9a5161"], 0x4cd, 0x0, &(0x7f0000000180)="1fd7125a209c885b1d25beb7d49563a95c722796bce3d1c27d0a3f0929e4a0c00d5dee23342a20bc01264df5e4386316bc254dca368a619be5ef"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r6 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000400)={r5, 0x2}, 0x8) socket$inet6(0xa, 0x80003, 0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:46 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x48) 20:51:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000d000000000002", @ifru_ivalue=0x907000}) 20:51:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) [ 799.871518] binder: 27417:27474 ioctl 8912 20000140 returned -22 [ 799.904125] binder: 27417:27418 ERROR: BC_REGISTER_LOOPER called without request [ 799.911805] binder: 27418 RLIMIT_NICE not set 20:51:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000000500), 0x0, &(0x7f0000002980)=[{&(0x7f0000000840)=""/111, 0x6f}], 0x1, 0x0) pwritev(r2, &(0x7f0000000200), 0x10000000000003b0, 0x0) [ 799.978481] binder: BINDER_SET_CONTEXT_MGR already set [ 799.995395] binder: 27482:27484 ioctl 40046207 0 returned -16 20:51:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x600000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:47 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xff00]}, 0x48) 20:51:47 executing program 0: r0 = socket(0x0, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0x200000000002}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2588286400fa6185d20d625649171171407a46b9fc43bfda8755d4cb6197b1b762120b2e3563031012a67320187fb307b2275799221020f065c03be23952aeae18fae241a5b3965e4387da486b373ec5c6a90670b6b4e4eda27327f062cf10de1b4e209853746c8265e103c0a9ded09a80df08364deea1c6124b9989ef14e7fd3db29a3e2ac6316373cad04100f6438009ddb000c9fc3e2b36d3c8fa3b42338ea065849d319569cc6c5df31d757db094e99c2e1368ab6ee208671b2da080f2a0d34de8534d286bc206bafc83b06712ac3e308f0474c26cdf5364402d64b3495db5d92e9228998f01782181c973974bf4d8c072f76fd1635caf", @ANYRES16=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r1], 0x5) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) rt_sigtimedwait(&(0x7f0000000080)={0x20}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x8) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) 20:51:47 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x9) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000080)={0x0, 0x80, 0x3, &(0x7f0000000040)=0x7}) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080007fffffff00000002", @ifru_ivalue=0x907000}) 20:51:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080001900000000000002", @ifru_ivalue=0x907000}) 20:51:47 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = geteuid() fchown(r0, r1, 0x0) [ 800.556553] binder: 27507:27513 ERROR: BC_REGISTER_LOOPER called without request [ 800.564222] binder: 27513 RLIMIT_NICE not set [ 800.580199] binder: BINDER_SET_CONTEXT_MGR already set 20:51:47 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]}, 0x48) 20:51:47 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 20:51:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 800.604435] binder: 27514:27516 ioctl 40046207 0 returned -16 [ 800.641134] binder: 27514:27516 ERROR: BC_REGISTER_LOOPER called without request [ 800.648844] binder: 27516 RLIMIT_NICE not set 20:51:47 executing program 5: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x3) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) ioctl$KDDISABIO(r2, 0x4b37) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 20:51:47 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]}, 0x48) 20:51:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001e100000002", @ifru_ivalue=0x907000}) 20:51:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000068900000002", @ifru_ivalue=0x907000}) 20:51:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x60000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:48 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="001da0b9791741ad4457d7d600000c1b000000000000000000000000"], 0x11) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x48) 20:51:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000019000000000002", @ifru_ivalue=0x907000}) 20:51:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001e500000002", @ifru_ivalue=0x907000}) 20:51:48 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x8000000000000005, 0x0) dup2(r1, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 20:51:48 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) mmap$binder(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x110, r3, 0x0) prctl$setname(0xf, &(0x7f0000000000)='/dev/binder#\x00') 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x48) [ 801.431371] binder: 27571:27574 ERROR: BC_REGISTER_LOOPER called without request [ 801.439057] binder: 27574 RLIMIT_NICE not set [ 801.441811] binder: BINDER_SET_CONTEXT_MGR already set 20:51:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000fddbdf250b0000000c000300080003000200020008000500810000000800060001000100300001000800050000080000080001000a0000000c000700080000000400000008000ba45ed4a3b6623b8a005a00000008000600070000003000020014000100ff0200000000000000000000000000010800090002000000080002004e24000008000500ec0000007b03b96dfd682b77"], 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x7, &(0x7f0000000040)=0x9, 0x4) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = openat$cgroup_ro(r0, &(0x7f00000003c0)="6370757365742e6566666563746976655f6d656dc495a5fffce0567300", 0x0, 0x0) read(r4, &(0x7f0000001140)=""/20, 0x5) 20:51:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 801.480124] binder: 27567:27578 ioctl 40046207 0 returned -16 [ 801.502326] binder: 27567:27578 ERROR: BC_REGISTER_LOOPER called without request [ 801.510079] binder: 27578 RLIMIT_NICE not set 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00]}, 0x48) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x48) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800]}, 0x48) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x436]}, 0x48) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x48) 20:51:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x68000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x70000000]}, 0x48) 20:51:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000013000000000002", @ifru_ivalue=0x907000}) 20:51:48 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"64356d6d7930005ffd00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800003e7000000000002", @ifru_ivalue=0x907000}) 20:51:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r2, 0x2, &(0x7f0000000080)={0x7ff, 0x1ff}, &(0x7f00000000c0)) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000780), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000740)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4080, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x180000000000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r4, 0x4}, 0x8) 20:51:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:48 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0xfffffffffffffffb, 0x1, [0xfffffffffffffff8]}, &(0x7f0000000180)=0xa) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) r5 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x14) connect$can_bcm(r5, &(0x7f0000000340)={0x1d, r6}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r7 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 802.276198] binder: 27621:27623 ERROR: BC_REGISTER_LOOPER called without request [ 802.283886] binder: 27623 RLIMIT_NICE not set 20:51:49 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd0ffffff]}, 0x48) 20:51:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 802.334792] binder: BINDER_SET_CONTEXT_MGR already set 20:51:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bpq0\x00', 0x200}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000000000000f", @ifru_ivalue=0x907000}) [ 802.358909] binder: 27634:27635 ioctl 40046207 0 returned -16 [ 802.388980] binder: 27634:27635 ERROR: BC_REGISTER_LOOPER called without request [ 802.396671] binder: 27635 RLIMIT_NICE not set 20:51:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:49 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400]}, 0x48) 20:51:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001e500000002", @ifru_ivalue=0x907000}) 20:51:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x9905a3c15079c9a1, 0xfff, 0x64b3, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x81}, 0x8) personality(0x140000) write$tun(r1, &(0x7f0000000540)={@void, @void, @x25}, 0xffffffffffffff49) 20:51:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000001c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/112, 0x70}, {&(0x7f0000001340)=""/240, 0xf0}], 0x4, &(0x7f0000001480)=""/4096, 0x1000, 0x2}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002580)='/dev/null\x00', 0x420280, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000025c0)=""/106) setsockopt$inet6_dccp_int(r3, 0x21, 0xe, &(0x7f0000002540)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'\x00', r2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) 20:51:49 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000]}, 0x48) 20:51:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x500, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000e201000000000002", @ifru_ivalue=0x907000}) 20:51:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d001000000000002", @ifru_ivalue=0x907000}) 20:51:49 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x1a, "a2e39df9f9af34392a775b8761ca04935d56f072d7620b49444f"}, &(0x7f0000000080)=0x22) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x1, 0x100}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0xdada}, @val, @x25}, 0xfffffffffffffef9) 20:51:49 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008916, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, 0x84) mq_getsetattr(r3, &(0x7f0000000040)={0x1, 0xd0, 0xc9b1, 0x20, 0x0, 0x6, 0xf1f2, 0x8}, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r6 = dup2(r1, r0) socket$netlink(0x10, 0x3, 0x5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) getsockname$netlink(r4, &(0x7f0000000300), &(0x7f0000000340)=0xc) 20:51:49 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x48) [ 803.206325] binder: 27691:27694 ERROR: BC_REGISTER_LOOPER called without request [ 803.214053] binder: 27694 RLIMIT_NICE not set [ 803.220781] binder: BINDER_SET_CONTEXT_MGR already set 20:51:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000cd01000000000002", @ifru_ivalue=0x907000}) 20:51:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000340)={[0x2d, 0x3f, 0x2d, 0x3f, 0x3a, 0x3b, 0x38]}, 0x7) socket$inet6(0xa, 0x3, 0x8da3) r1 = socket$inet6(0x10, 0x8000000000000003, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x401, 0x4, 0x9}, 0x8) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000140)=@nl=@kern={0x10}, 0x80, &(0x7f0000000000)=[{&(0x7f0000014f79)="5500000018007fcdb72d1cb2a4a280a80a06050000a84302910523692500080008000240011b26001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) r2 = dup(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0x1, {{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x7f}}}, 0x88) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000002c0)=0x2) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000380)=0x5, 0x4) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x81a) [ 803.259535] binder: 27695:27696 ioctl 40046207 0 returned -16 20:51:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000c901000000000002", @ifru_ivalue=0x907000}) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000000000000]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x30]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48000000]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x70]}, 0x48) [ 803.649788] binder: 27695:27696 ERROR: BC_REGISTER_LOOPER called without request [ 803.657476] binder: 27696 RLIMIT_NICE not set [ 803.662078] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. [ 803.696286] netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. 20:51:50 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000080)={0xffffffffffffff15, 0x9, 0x9, 0xffffffffffffffff, 0x5, 0x20}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000c00de0800000042530000000000"], 0x11) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, 0x48) 20:51:50 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7a, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 804.037227] binder: 27691:27694 ERROR: BC_REGISTER_LOOPER called without request [ 804.045072] binder: 27694 RLIMIT_NICE not set [ 804.083531] binder: BINDER_SET_CONTEXT_MGR already set [ 804.093856] binder: 27754:27755 ioctl 40046207 0 returned -16 [ 804.100972] binder: 27754:27755 ERROR: BC_REGISTER_LOOPER called without request [ 804.108798] binder: 27755 RLIMIT_NICE not set 20:51:50 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 20:51:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001900000000000002", @ifru_ivalue=0x907000}) 20:51:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000500000002", @ifru_ivalue=0x907000}) 20:51:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000300)}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002700ffff00000000000000000e000000d28a18f12c24bef78575f9046abb5a36e7a7bcd30fcab9e4f5b425"], 0x14}, 0x1}, 0x0) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x48) 20:51:50 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x48) 20:51:50 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x90ffffff]}, 0x48) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x48) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x48) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x48) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x48) 20:51:51 executing program 0: syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x4000) r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0xe}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000c6493fd600dfd700eb0000000000"], 0x11) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]}, 0x48) [ 804.549506] binder: 27771:27772 ERROR: BC_REGISTER_LOOPER called without request [ 804.557196] binder: 27772 RLIMIT_NICE not set 20:51:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x7a00000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) [ 804.909798] binder: BINDER_SET_CONTEXT_MGR already set [ 804.915342] binder: 27808:27810 ioctl 40046207 0 returned -16 [ 804.922203] binder: 27808:27810 ERROR: BC_REGISTER_LOOPER called without request [ 804.929851] binder: 27810 RLIMIT_NICE not set 20:51:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e703000000000002", @ifru_ivalue=0x907000}) 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x90ffffff00000000]}, 0x48) 20:51:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001cb00000002", @ifru_ivalue=0x907000}) 20:51:51 executing program 0: r0 = socket(0x8001000000011, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000d53fc1)=ANY=[@ANYBLOB="0180c20000000180c200000008060001080006040001000000000082c2ea3b8f89c6a60000b7ffffffff"], &(0x7f0000ea3000)) [ 805.028770] binder: 27771:27772 ioctl 1276 0 returned -22 20:51:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0x48) [ 805.108436] binder: 27825:27828 ERROR: BC_REGISTER_LOOPER called without request [ 805.116291] binder: 27828 RLIMIT_NICE not set 20:51:51 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') signalfd4(r0, &(0x7f0000000000)={0x1f21}, 0x8, 0x80000) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) ioctl$FICLONE(r0, 0x40049409, r0) 20:51:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000200000002", @ifru_ivalue=0x907000}) 20:51:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x18900, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600]}, 0x48) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x48) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x48) 20:51:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x400}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0x4122fa73, @loopback={0x0, 0x1}, 0x8001}], 0x3c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 20:51:52 executing program 6: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffa5, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x448, 0x0, &(0x7f0000000500)="181433d60a0690acd7a16d1b2c7db633bf86b8a7d89be5519323964c19da939f213b82080e7dd217cbc44a646487cfca89e6233c2de39b6e4135a7c8296d76448ced56b22e069db8c4da7ed7a66a42a87c1dd469c2cb596e75410a0f49e87544d83efd792609fad2ddfdfccc24b89a90825fa70d4d8b8b3d99cbf8372af0b2c576f7a575a4a8229e524e695c277de7d46c7cf3910bd0a67bcb06f6da1de00f20ddb524c96bb34c891731cd18864969344ab2d72b268d9872a60a6c155a35510eca2ec6e0a1471fc378db79e9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x48) 20:51:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:52 executing program 0: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080), 0x10) r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa200}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000c000000000000000000000000009871976808c2fe93c048a7e5f0891064fa62c8f741d21737e9fbbc829e5dcd1830b5bd357b9a03300f11218e9bedae55d55da1ac5ef5131abab34e461dcc7e281079521b6e83f02c53530315740d866d3ec7bd09cd3391927d66a847932a7d386b1409beb793a78e2d3966341e91dd8a9cd36471c3c4c3bb5eb7f523d93b4f8f0e6499e193d3e13af1bc7e51efbf64bd"], 0x11) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffff8000, 0x2, "38165d6cd98c833c56e3e4faaa10901d5d24c7f938b07188cb404843639099ccfc1d8c77a0c649678501170ebe031e16929a4eb812aa88c8bfae3da038407814f758cb69c8850ca9217b5743a0b4a0553c556a31ccbfc9f565200f99"}) 20:51:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001da000000000002", @ifru_ivalue=0x907000}) 20:51:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x100000000000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001200000002", @ifru_ivalue=0x907000}) 20:51:52 executing program 5: unshare(0x2000400) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000080), 0x80800) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000200)="66b5295ee1e1e8e6e9d7deaa98161a6bbf1c1897ab7869aaca6e79928ca40f637c3668f7a8aecd71bc153717394930a8305f107f4df1d63cf4abcbf3e078aa39be7c4e29b45e637a65186ffccc7f655ed692aca0238d4ac255858f958030e70bad044374c155f73df0503ec3156d420580126887dcf0c3064a30d030f8169cef72382f0e1da2c7bd80d7368e549ba06f54b80fad315832473f341fba3d7a9f6530") tkill(0x0, 0x0) lseek(r0, 0x56, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x220500, 0x0) [ 805.963911] binder: BINDER_SET_CONTEXT_MGR already set [ 805.975557] binder: 27883:27888 ERROR: BC_REGISTER_LOOPER called without request [ 805.983296] binder: 27888 RLIMIT_NICE not set [ 805.990805] binder: 27875:27877 ioctl 40046207 0 returned -16 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000000000000]}, 0x48) 20:51:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xfffffffd) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0x14, &(0x7f0000002240)=""/143) 20:51:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800000000000000001ff", @ifru_ivalue=0x907000}) [ 806.016554] binder: 27875:27877 ERROR: BC_REGISTER_LOOPER called without request [ 806.024278] binder: 27875:27877 unknown command 0 20:51:52 executing program 0: r0 = socket(0x2, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x20000) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001dd00000002", @ifru_ivalue=0x907000}) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3604000000000000]}, 0x48) [ 806.086457] binder: 27875:27877 ioctl c0306201 20000240 returned -22 20:51:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\vb\x00\x00'], 0x1b4, 0x0, &(0x7f0000000300)}) splice(r1, &(0x7f0000000000), r2, &(0x7f0000000040), 0x8, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:52 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x4400) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x3f}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0xffffffffffffff08) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 20:51:52 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x48) 20:51:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001700000002", @ifru_ivalue=0x907000}) [ 806.272462] binder: BINDER_SET_CONTEXT_MGR already set 20:51:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000006000000000002", @ifru_ivalue=0x907000}) [ 806.340408] binder: 27925:27928 ioctl 40046207 0 returned -16 [ 806.362278] binder: 27925:27928 unknown command 25099 [ 806.369903] binder: 27925:27928 ioctl c0306201 20000240 returned -22 20:51:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x3000000, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:53 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x48) 20:51:53 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:53 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="2c5f4e261c5454c4e9e553db7535ed2c425bf5f160afeea71022bd31e905ae44f1e2f28dec30db38e8cb656e015cf1a901762e7c31d1be910c3926cd22a0ac8364a4b0cab1dfa7a76307eff781746e3d48800273e330e306de82e11bee00b140a2f851028537b0d7d9e3404f9917f6e21b83dd7b78d61bc331e67b02a267d6b6f89d8f25f5a612d0caf6d460f24057de5673f50fea4dc5abf337292d9f472cee72e4e9", &(0x7f00000001c0)=""/113}, 0x18) ioctl(r4, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000000)=0x6daf9439) 20:51:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001cc000000000002", @ifru_ivalue=0x907000}) 20:51:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000d101000000000002", @ifru_ivalue=0x907000}) 20:51:53 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_pid(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f2fabd21cf1d7731c840755f6703c5f0f52e58cc2cd8cfe90f354675304397296eec875229aca935bea89bc75f7e99adbbc5b7a4ef9d842698c326a469e0855fc8954daa5ac112a4124aa4553efb57780bbd7801a26e20df707932179a443e78f278deaad167dd075598ce44f02586c9666b7ee13130230b316b51"], 0x2) [ 806.802505] binder: 27966:27967 ERROR: BC_REGISTER_LOOPER called without request [ 806.810201] binder: 27967 RLIMIT_NICE not set [ 806.837134] binder: BINDER_SET_CONTEXT_MGR already set 20:51:53 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaa8aaaaaacf2bb43c40b83f00000014ffabe0000001000000c9c98c7d7e36", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="5000000046da0000"], 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockname(r0, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @host}, &(0x7f0000000100)=0x80) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 20:51:53 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0x48) 20:51:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001e2000000000002", @ifru_ivalue=0x907000}) 20:51:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 806.861012] binder: 27968:27972 ioctl 40046207 0 returned -16 20:51:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000a000000000002", @ifru_ivalue=0x907000}) [ 806.906275] binder: 27968:27972 ERROR: BC_REGISTER_LOOPER called without request [ 806.913982] binder: 27972 RLIMIT_NICE not set 20:51:53 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3604]}, 0x48) 20:51:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ax25, &(0x7f0000000140)=0x80, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000280)=0x1c) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00000003c0)='./file0\x00', 0xa000, r4, r5, 0x3, 0x400) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x84}, {r1, 0x200}, {r2, 0x80}, {r3, 0x20}, {r6, 0x80}], 0x5, &(0x7f0000000340), &(0x7f0000000380)={0x9}, 0x8) r7 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r7, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d000500000000000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20:51:53 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}, 0x48) [ 807.240761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.247397] IPv6: NLM_F_CREATE should be set when creating new route [ 807.281791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 20:51:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000007000000000002", @ifru_ivalue=0x907000}) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x48) 20:51:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x602000, 0x179) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000100)) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)='nodev-\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000cdcd90f001f04b9e9c2cd500000000820000000003000000"], 0x11) 20:51:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000001cc00000002", @ifru_ivalue=0x907000}) 20:51:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x4c00, &(0x7f0000000380)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:54 executing program 5: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket(0x0, 0x3, 0x400003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = msgget(0x2, 0x47) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000001c0)=""/52) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000002240)=ANY=[@ANYBLOB="cc0000001b0009010000000000000000ffffffff0000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008001d00080000000000"], 0x3}, 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000000000000000000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0000000000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x154}, 0x1}, 0x0) 20:51:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000200)={0x0, 0x2710}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000000)={0x4, 0x3}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 807.598347] binder: 27966:27967 ioctl 40045201 20000000 returned -22 [ 807.669224] binder: 28017:28019 ERROR: BC_REGISTER_LOOPER called without request [ 807.676905] binder: 28019 RLIMIT_NICE not set [ 807.695212] netlink: 100 bytes leftover after parsing attributes in process `syz-executor5'. [ 807.706955] binder: BINDER_SET_CONTEXT_MGR already set 20:51:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x60000000]}, 0x48) 20:51:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000000000001ff", @ifru_ivalue=0x907000}) [ 807.730832] binder: 28031:28034 ioctl 40046207 0 returned -16 [ 807.761341] binder: 28031:28034 ERROR: BC_REGISTER_LOOPER called without request [ 807.769097] binder: 28034 RLIMIT_NICE not set 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x36040000]}, 0x48) 20:51:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001700000000000002", @ifru_ivalue=0x907000}) [ 807.810500] netlink: 100 bytes leftover after parsing attributes in process `syz-executor5'. 20:51:54 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000f71000)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) poll(&(0x7f0000000040)=[{r1, 0x3}], 0x1, 0x0) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd0ffffff00000000]}, 0x48) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffb0]}, 0x48) 20:51:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7f, 0x208000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x90000000}) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r3 = accept$alg(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200), &(0x7f00000002c0)=0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r4, 0x80000001, 0x18}, 0xc) sendmmsg$alg(r3, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="9d", 0x1}, {&(0x7f0000000240)="f461d28a868efe09757670f714f2830b303abdb8fd8c5dc5c56ccaaaab64f4cb330ca5312d33a8f0b9d9d67807286bc50d9501b57d9cf70c2894cd3f1f1df61f9b619ecc577b8f670133cac88ba3a7e9b0", 0x51}], 0x2, &(0x7f0000001780)}], 0x1, 0x0) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x48) 20:51:54 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x200400) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x2, 0x8, 0x7, 0x8, 0x7f4, 0x5, 0x8, 0x2, 0x6, 0x7fffffff}, 0xb) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:54 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x48) 20:51:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, 0x48) 20:51:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="414696b51d1675f13cf43fb8205d94bd426a5e55d767c5f53a462167a1ed284d94bc65ec8c4dcb13a6d4bce555e0cfe4e8512e7b058bf49c2b7412b7df7035c4a1cad913bd1251fbe3c3", 0x4a, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) getsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:51:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000c901000000000002", @ifru_ivalue=0x907000}) 20:51:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40106309}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000009000000000002", @ifru_ivalue=0x907000}) 20:51:55 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/binder#\x00', r3}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 808.532368] encrypted_key: master key parameter ']”½Bj^U×gÅõ:F!g¡í(M”¼eìŒM˦ԼåUàÏäèQ.{‹ôœ+t·ßp5Ä¡ÊÙ½QûãÃ' is invalid [ 808.539307] binder: 28098:28102 ERROR: BC_REGISTER_LOOPER called without request [ 808.551289] binder: 28102 RLIMIT_NICE not set [ 808.560730] binder: BINDER_SET_CONTEXT_MGR already set 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x48) 20:51:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 808.573122] encrypted_key: master key parameter ']”½Bj^U×gÅõ:F!g¡í(M”¼eìŒM˦ԼåUàÏäèQ.{‹ôœ+t·ßp5Ä¡ÊÙ½QûãÃ' is invalid [ 808.585508] binder: 28105:28106 ioctl 40046207 0 returned -16 [ 808.606961] binder: 28105:28106 ERROR: BC_REGISTER_LOOPER called without request [ 808.615090] binder: 28106 RLIMIT_NICE not set 20:51:55 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = getpgrp(r0) process_vm_readv(r1, &(0x7f000001df80)=[{&(0x7f000001d000)=""/109, 0x6d}], 0x1, &(0x7f000001dfa0)=[{&(0x7f000001df93)=""/110, 0x6e}], 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4) 20:51:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d3000000000002", @ifru_ivalue=0x907000}) 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x48) 20:51:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="bcd6a76e96c6856800000ced5c54befef7008e72e8cfe269", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003bc0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="97c08fa1a5ec30dd3550a49dfb851ffae73587c9cbc7703dda2486ee58fe3e8a1ddcb6aa3f467f0696fcd05827e62d8ad5200d135990c7475bd7504bda1bf13c34ae33e49d477dab1c1c6e746036a84c6692fb9247e97ab0bbbe3c6aa1662a21ea6c46d77e1e2e83c15e060e4505383bfd30", 0x72}], 0x1, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="57e76b1caffd9281982e68921fa3fdf39e4305e7db61fb59c81a4984e246aa37c83f582a369ddae06bfac6647e82d385faf7eb392fe289c309dfd6722ef668db9f18c6eaf3309defa7f748926c91616f7b032ffd69f45ad2db571471cfbaee9b935292145f9a65abbd9d02a6e1396cffe16ff313a9cbd4c73720c5b8df23a045cdb3c0ccbcb62da3ece0be45476c2ce3c1d0be4811886c0bf33891d98a9b541122c38e1f0a7603a70487916e3ccc6abfd0", 0xb1}, {&(0x7f0000000500)="28548510", 0x4}, {&(0x7f0000000580)="42fbd3407393a4da6886cfe1cd960e735aed6a2e86295575368c272644f28960adf8eb393a8b5c7404d9910f333acefec16324668c77a4590241527dc8267bb287905c6065d9bb899e5f387ba2131b682bfa6fa27142fa44b77f1d75b3b1b798ce8f4bb69d666bedccb68a42d8d1cbe2f0d82d6fcaf1ac5cf117af7f06", 0x7d}, {&(0x7f0000000640)="39e4b6b88b86921266e1667166cd7441611ec149bdfbd3d44bd3b7fb5d02dd2bac29a1803eaec7473986fc31eda408ac630ab3c8d61e0ac52601f93959abdfe7e2e5095a0438e8c8c9f3eb2dfe79d244cbf5939170326f38bc9f7ffe6324435e8df51e298b0cad3c906cc8d3a24cdff5d2ab1248a321ac42b09a473a2461d1c44694d1a8f884a5a0bce0d300b225296380077ffbc3d65d338fde0d7cc69b5cea5343983e87803ca2010df6884cdb288cc0db88bd6ffea84570ff5845a2ff404dfcbf00f0d2b08ba1352104a81ec2dfb17c9f6b825967f54ed6097cb31cc471ff3475107b2a626834b143cc79aad9ce", 0xef}], 0x4, &(0x7f00000007c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3}, @iv={0x100, 0x117, 0x2, 0xe8, "715e2480ec58eafa6340b7a81ad682c5ac13ac206625aad851d4970f55746c8af48a53aa2d77d704483cac5630dd343f1df85c6ed94219d94de596979862a6af09ebec34d60079b83aabc40d21e300ac9bc42dfb4a069b8895afa15aa165b203103dffbd54f440f605b0086b6f177cef677fba7e9c2e71cab0763fd64950678741e7dfb362f189649e92056e8f8b1bf694587ccc18e6556a50869e7b03ffa594064ff6eacc51b52b66e512a41b216dd05f523bdf5bd8c7f1e6af44ce84c3a6cfbcafc93002a283aef6ce3913390db4a8e9292f77fc0601d8c1482aed114c405e758ba5bce5c36952"}, @iv={0xd8, 0x117, 0x2, 0xc1, "98997708a106c237f2954942d0548103f8a1202e88024de4348f6138e8e731bce2e00096c3e69da27980b66b5ad26e5054f7c94a87d112778fdb176fe021575c6321fa1d9cdad3c81cf7bcb2b74e9e12c322085775566fc9d047d0f32dba6f8551b5524a28e52a8b8d590291af101de4635350b38d5c6d7cef07166fcfe3c7d1c559fbfb91283f13ae010d0b489ac4a591e8bd6845e367f7c6e263e4dff6b3713a09befdbd27178a5dd8ecb14e766e0000ef5db5b4e0af48557e85174d48ca9b27"}], 0x208, 0x800}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000f00)="67638490b2546b14e08b92f63057c06a1a501cef29a2ef2cf81e5f0ff5a9d65e54427852eae83a6de30be2579dce8e141c290307276d3c8f3a715daa194ebc763bd9528f6d33dd0172e42d676b1c9005ab7d92021efc5697f01fa59a09917a05ab39675c97a842f6ed55fcce6e1649abd4eca330d05566f3de451a33f824a4234e519b1e052e8d5fc188d2017ea0934ae842fb89c12232e3b22879d06fe9981616057a0d0ca5b895", 0xa8}, {&(0x7f0000000fc0)="c13919b53a25095cbfffd1efe2765e2c98d86986ef2f35225ca4669235201f25e9b0775ee19a94de839ef48b32a96ab299dc9546ef9dbc74401d5275a05232c75adbfe80da0b0a528570a8d81ebd5a4ac0d543cf43ab22610cd136cce87d8e21979237cf2cf249527156a92c01dd6506087075465a29e7ff3c3b33516f8f453bde148f644a7aed90f257f35142315543a06dc99bb08219b855f219", 0x9b}, {&(0x7f0000001100)="642bae1fa82273882bd53773f062930614e5d5289d40b4d67809b1eba89a9ab4e51ba60f3ab4bed6ec8a1248bd416b7bd51585d9351cf8b96b8fbeeb3e00e33c75e6aa74cb819babeb4a2c38b4224f68722dc9d1d56375fb2860a96e169742f00ba255688bb9c34e904cf53c52bfc4c55641b89b5f066ca7", 0x78}, {&(0x7f0000001200)="d16e595de8dea26f63f1b9163e7349fce032407ba12aca123f93e69ff9a15c300debc07127751d2ebebe0235b3ebe57022d7199a0ebda3e257404454cae4875d9532b3ef563741ec5a8b6caaab247ea542766789937fb9718bdc5a1372160fd21a24bb6261a930cbdad18d30b2a895f033250bb586bb46fd5ba38c6ae7d34a97eeff6a3e3531f89ff3f65ed0bf3719d8c1e6151e581ed2458fcf919fc99cff36354115e49420f401efdc9238dee9e65b27f9d3e46c88e1206abdd4eebb7f2c565766ab3fbf463b4072c87158364cf4878f2094ac66c03b6827a0da3b954ea3de5fa6fca4d4864e58bea292cedd2bbb0bbdeb1ec73dd9e93b", 0xf8}, {&(0x7f0000001380)="897590781ed4ca0ad84bb8e8cc84e3bbff8405daefb67bc1fe6301a5ad1e9035146fde0036b001744ededea1db5a2ea95dcaa11606f332bf45aef95a0581ec24e62a65f72edf7d737740e62cbe7e2fd4d91d96ebccec9dbfd2e639419125d704b736ef97090ab43897e61552e93fa283b0", 0x71}], 0x5, &(0x7f00000014c0)=ANY=[], 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xb8, 0x117, 0x2, 0x9e, "74828df3f8f1efc74c6cd55f5ac25a7edd544b27975054871a384176a784edfc74f3aab9c6e6d9b066a1fbb87d27903c4c9e427f0c54eca933301867368d4ce9076dfca1452b9694f868220afd51c4c3baf70a98c805f57c580fe0b9cfa120389b47ee4daa19d27679b71701cd1e816fada70866fc9f800e9ad6219b560ae82fe15627f37769e8a518e15daace5bc1e7b71e2ea21be61d5f25283457bacd"}], 0xd0, 0x801}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003300)="57b1cb3e7c6914f6cffc588cfc2c31bb8759f275fbde186a32bada02f7be619f577724da994ce8d2447910d02deb69712bf1ef81e677f0b6ef575d8b7a6f3ecf1345e48caa1d6cb18882c6eca42f70387f7ca9b5796f05", 0x57}, {&(0x7f00000033c0)="ff8654c9e816eb9af4795087addb4a1711f7e38183fe51ef4cca3d1560c77f40e51de8d12e58f8017565168ab1bda45c2048ba873dbab0e25b236709afa14d23b6740289a1747358419cc50d85d0193c316ff5013b421bd1951243418d030960635720ecbb6108d5ac86db0757ca066910bd4b7c077bf3d4c259d037b5f8ebf9c7bd049e32b370e00a7fe5a7aadc1637ec3e9357d36d2206927e8375e51997dd100b92d1fd5e47e0eed2a26e957caafb6c7a1689c65472b66698a1b6a14a372564e81e515c95a51be52ea008d81beee77ea4a71c201f340200f5dbf667ddf8e4f3571e6c93cb8a4c40", 0xe9}, {&(0x7f0000003540)="809c0df2d9e276bda806434b50b503958f6df0099dd2ad0f93f84134df1b00db4d25fda019f990c4fe4ca1020241ea669ca59036e1c6e7aa2aec8b0bae544fd421395b3bf6f7ed434462ab11683788dbdf31ce5feb73eae4bd4fb9ef3c8d4f9f95b21b05c15873fb43182fada2a1ca31c3b434778ffe4c740ff1baf56d454e427ba79827f2a1aba6aa3df3421df019979e70bc95bd1cd86bc475ce7a0186d944d83b8e6a837f36e18a7fcd3dbc09bde84901fb11b134acfe352f7db8ac88b1fe5d2b6b021874d232ad3b318bf3878b2f2db1fd5c7f99a51372e501501ee19469446185", 0xe3}], 0x3, &(0x7f0000003980)=[@op={0x18, 0x117, 0x3}, @iv={0xb0, 0x117, 0x2, 0x97, "4411f9b96434b3dcaae01c7bf7dbe5bc8d26152d44ba2a7fa82134a7f55d93c561d35f9b381b6804aa9fde49903bce5905b685cd3c37fde9382204d578d0dcea8ca46d67419174d060f9a21d55633f9a330f580308264e6ea8e0d657be044f9c1714f195129f3b1b509ed61ca36aa72edea86aaf45067f00fa6765f6cc22a462abf796955983e8892da7155c5105359b878d91168c1e71"}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffff7}, @iv={0x18, 0x117, 0x2}, @iv={0x28, 0x117, 0x2, 0x14, "d1fa62a9e3639f571fabaa4c85ce3e377a476155"}], 0x150, 0x20008000}, {0x0, 0x0, &(0x7f0000003b80), 0x0, 0x0, 0x0, 0x80}], 0x6, 0x0) recvmmsg(r1, &(0x7f0000004f00)=[{{&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/230, 0xe6}}, {{&(0x7f00000049c0)=@ll, 0x80, &(0x7f0000004e00)=[{&(0x7f000000b240)=""/4096, 0x1000}], 0x1, &(0x7f0000004ec0)=""/7, 0x7}}], 0x2, 0x0, &(0x7f0000005140)={0x0, 0x1c9c380}) 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x50000000]}, 0x48) 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x48) 20:51:55 executing program 5: add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)='0g', 0x2, 0xfffffffffffffffd) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rtc0\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001900)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001940)={@loopback={0x0, 0x1}, r1}, 0x14) 20:51:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800]}, 0x48) 20:51:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000002900000002", @ifru_ivalue=0x907000}) 20:51:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000100)) fdatasync(r1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="bc7474f929831fb74cb59b5417d16b3c444da35b28c183434f9b9a567ffefc40bd2ebc4631d991ecf59c02dc57324dd4c573e394437074818ba7c25d1043231e2230dc20f9eedd3346f1e7d971ad9b2f894a16944295f3a68d2c4d5ed69983d12415cd1d66536ff6d9a2aa1fd7ae8bd145a34080db") ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="76e3a7f322b8a6df03d16f3d21ac6b8e8314013117c91de614270de9f91ef87893a5c3aef283d619986453e3ce9a2287d28781addb12f32a3b20fe84f441f04a99d0ad7e7f888bb9f90a9819f9294af5ca476877b4d6073a57019c48a1b1d20eed177e9987c4ac70aff77e6c41e555919d341e5819246c4aa9c42df82a15ef3bd4b9e1b017e2568c3c248c20f6adf1fbf224711323c4ca869df4d5b97302aaf476ffbd5fc3efdae884541c6ec05bc7089a") lseek(r0, 0x10000, 0x1) 20:51:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x4008630a}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00]}, 0x48) 20:51:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e301000000000002", @ifru_ivalue=0x907000}) 20:51:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000029000000000002", @ifru_ivalue=0x907000}) 20:51:56 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) setns(r0, 0x40000000) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffdfffffffffffd) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, &(0x7f0000000380)) 20:51:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b2b0f9ff"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 809.359977] binder: 28105:28106 BC_ACQUIRE_DONE u0000000000000000 no match 20:51:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x48) 20:51:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x81) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2300020c00000000120000000000000000"], 0x11) [ 809.425156] binder: 28183:28184 unknown command -413518 [ 809.445730] binder: BINDER_SET_CONTEXT_MGR already set [ 809.456865] binder: 28183:28184 ioctl c0306201 20000240 returned -22 [ 809.469315] binder: 28185:28187 ioctl 40046207 0 returned -16 20:51:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth1_to_team\x00', 0x5}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$xdp(0x2c, 0x3, 0x0) listen(r1, 0x400000000f0) socket$xdp(0x2c, 0x3, 0x0) shutdown(r2, 0x43) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40100, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r1, 0x0) [ 809.493481] binder: 28185:28187 ERROR: BC_REGISTER_LOOPER called without request [ 809.501278] binder: 28187 RLIMIT_NICE not set 20:51:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000005000000000002", @ifru_ivalue=0x907000}) 20:51:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) fcntl$getown(r1, 0x9) r3 = dup2(r1, r0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001800000002", @ifru_ivalue=0x907000}) 20:51:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x48) [ 809.611962] binder: 28209:28210 ERROR: BC_REGISTER_LOOPER called without request [ 809.619667] binder: 28210 RLIMIT_NICE not set 20:51:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40106308}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x1f, 0x801, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000040)) io_submit(r2, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}]) 20:51:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800001cd000000000002", @ifru_ivalue=0x907000}) 20:51:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}, 0x48) 20:51:56 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8000, 0x80200) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000100)=""/29) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0xfffffffffffffe00) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000240)="0f669eeb2f84500ca78551b1d637a9f0cffa7cf905f5f29233d26cac147c656ca1a5be256762655b35506a8ad84d2be6d5905974617715f7a7c859e3c5bb6495429f8055c2ff41a2613d1828c2f29536bb3f21545b8b2f16d6e21a0eec723929596beb83f7b1d17a998c73ee96a35d75e541a7e73ef3072d8eb29f001ede05b8efee1955058e2c451f67e977837dd07038641a6832a86e6f13365b66af24dace353a36504ebcf87f9a2d7a477195d6d358c249aa807f436e50aa1af464ebc8b81abf3d001b70ab50ca21542a54bf18", &(0x7f0000000580)=""/4096}, 0x18) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000c00000000000000000000000000553c3e2f0f66153d862a808d79c8506476fac7b358fe4967dd02ab8a3c8fc81dc80076ba352968a18e3eaf50869c3d5b1096029c75ae137ed91d5a318ed25785ec2e57f2551cdf55874e3b1482385233b867d2759fe6"], 0x11) 20:51:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000300000002", @ifru_ivalue=0x907000}) [ 810.237493] binder: BC_ATTEMPT_ACQUIRE not supported [ 810.242746] binder: 28185:28187 ioctl c0306201 200002c0 returned -22 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, 0x48) 20:51:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc05c5340, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x101}) [ 810.318258] binder: BINDER_SET_CONTEXT_MGR already set [ 810.331717] binder: 28242:28243 ioctl 40046207 0 returned -16 [ 810.353481] binder: 28242:28243 ERROR: BC_REGISTER_LOOPER called without request [ 810.361285] binder: 28243 RLIMIT_NICE not set 20:51:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000000000040", @ifru_ivalue=0x907000}) [ 810.408937] binder: 28209:28210 ioctl 5413 20000000 returned -22 20:51:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fadvise64(r0, 0x0, 0x4, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffff9c, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x248}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000365224a5a9f7ac0c41932a244467a9d19f05e77a24a65fb6d8dcdb843385faef9ec7def9b43aa6db20a748ce91dc8baae95e540c60360607a6ae61a5658c07a1f7a72d4de04965a43b450b3bc1766e43d9167255f6294804f606011d03e26d9d42eadf3b4c8b5e8deb0a970a038292486ef8cd88659a0986f5c7ab61eaab34673e02913425805ab5513c407d700e1b57eb757372d55006b90f11863c5cd0d95c31ef0d3efca2340a727c085d15a5956e93132b9bfc6c9bf8b9a5eebb9dcbacbb636dbd81cbd5008713b3dbed7835efa4fec419a21535c3a1e39d02478ea8e3f220d8bab365ab981dda20116a2e1102d29e80d9", @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf250300000040000300080008000000000008000800fb000000080008000100000014000600fe8000000000000000000000000000bb080007004e21000008000500ac1414bb08000400faffffff080006000800000014000100080002002f000000080005000300000008000600ff030000"], 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}, 0x48) 20:51:57 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0), 0x4) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x15}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000100)="12260fe6a57b11283f177229f91302afd56b27fb", 0x14) 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48) 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x48) [ 810.759893] binder: 28261:28262 ERROR: BC_REGISTER_LOOPER called without request [ 810.767646] binder: 28262 RLIMIT_NICE not set 20:51:57 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x7, 0x0, 0x280}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='ns\x00') ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000340)={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, r4}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0xd5e}, 0x8) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x74]}, 0x48) 20:51:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000800000002", @ifru_ivalue=0x907000}) 20:51:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x6, 0x3}) ioctl$int_in(r0, 0x80000080044dff, &(0x7f0000000100)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80200, 0x0) 20:51:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000001e00000002", @ifru_ivalue=0x907000}) [ 811.117793] binder: 28242:28243 BC_INCREFS_DONE u0000000000000000 no match 20:51:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x3) write(r0, &(0x7f0000c34fff), 0xffffff0b) close(r0) ppoll(&(0x7f0000000100)=[{r1, 0x4}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) [ 811.205531] binder: BINDER_SET_CONTEXT_MGR already set 20:51:57 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x48) 20:51:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 811.226463] binder: 28300:28301 ioctl 40046207 0 returned -16 20:51:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000014000000000002", @ifru_ivalue=0x907000}) 20:51:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000c801000000000002", @ifru_ivalue=0x907000}) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x48) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x50]}, 0x48) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a000000]}, 0x48) 20:51:58 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00'}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68000000]}, 0x48) [ 811.758139] binder: 28300:28301 ERROR: BC_REGISTER_LOOPER called without request [ 811.760551] binder: 28324:28325 ERROR: BC_REGISTER_LOOPER called without request [ 811.765813] binder: 28301 RLIMIT_NICE not set [ 811.778066] binder: 28325 RLIMIT_NICE not set 20:51:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046312}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d8000000000002", @ifru_ivalue=0x907000}) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffd0]}, 0x48) 20:51:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001cd0000000002", @ifru_ivalue=0x907000}) [ 811.998797] binder: 28300:28301 BC_FREE_BUFFER u0000000000000000 no match [ 812.097680] binder: BINDER_SET_CONTEXT_MGR already set [ 812.123389] binder: 28355:28356 ioctl 40046207 0 returned -16 20:51:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x3c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/110) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x48) 20:51:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x48) 20:51:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xae, "a853bf35bc44e072a5c5f2fd66897f43e74842122473afa1caf7a23b4a9fc578b63dcd2da2f367d77074249b0ade70cc91c46e0f34706737c249380c46534f31f894dd18fd255c3936a65b51fc50f659dca6bf5dc3d9bd8fa3489a0160364b9a7f7ea1203d092216fbbd1a9a9babcc08ed34d7cf984e6f5c332f8823b57496401691aef628255d8388c5fb045211e17243172d25b1c3f9c14e26520fe50e7f618efe09880c26ad74564f8216c004"}, &(0x7f0000000100)=0xb6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1, 0x8e, "5f6262efe4582b58a462c0db4bae6f3090beef8c44f9e64c89aa8c2847e8f88abb811d16910ad1e442f698c9dab8eb7035f3c0a3e7617e367e4808f1a66ed3323db5755e9ce85d918a38b88c4e3dd0ed5b89d2b12bbec5d4c0c214fa35ba6e0c262e547f7bd693880053bd9ce7b672314da453b49a1ab89e75955db512111dac53be7b0debf8a8cf7d8b1c9dae5e"}, &(0x7f0000000200)=0x96) bind$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, {0xdb96, 0x3, 0x5, 0x3, 0x401, 0x321b}, 0x400}, 0xa) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000280)={'bond_slave_1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x200000000000000, 0x240000) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300)) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000380)) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000003c0)=0x7fff, 0x4) connect$vsock_dgram(r2, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) bind$vsock_dgram(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000004c0)=0x7, 0x4) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000500)={0x775a, 0x2, 0x0, 0x5, 0xf800000000, 0x9, 0xffffffff, 0xfffffffffffffff9, 0x5b52, 0x5, 0xdc7b, 0xfff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000540)={0xa, 0x5, 0xf4, 0xa7e, 'syz0\x00', 0x1}) ioctl$RTC_AIE_ON(r0, 0x7001) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe2ce}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000700)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000740)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000780)=0xffff) r5 = semget(0x3, 0x2, 0x230) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f00000007c0)=""/236) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@dev, @in6=@mcast2}}, {{}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000009c0)=0xe8) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000a00)=0x4) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000a40)=0x4) futex(&(0x7f0000000a80), 0x3, 0x0, &(0x7f0000000ac0)={0x0, 0x1c9c380}, &(0x7f0000000b00)=0x1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b40)='pids.events\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000b80)={0x7, 0x200}, 0x2) 20:51:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b1f70c43bd678fd0d56f00afc0b99bb479f00006e73b2ac1e30986c2c365402ce799f74153f8e5271527c17c5e462af9b25c1037f6f"], 0x1b4, 0x0, &(0x7f0000000300)}) socketpair(0x2, 0x801, 0x3, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xfffffebd, 0x0, &(0x7f0000000200)=ANY=[], 0x2c, 0x0, &(0x7f0000000140)="98c6b3e28e61a5836c646291a7ae2f668b64c2165462748ced311e59b20400000064bc9784f4a4c0a2636a0a"}) r3 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x0) [ 812.274831] binder: 28355:28356 ERROR: BC_REGISTER_LOOPER called without request [ 812.282493] binder: 28356 RLIMIT_NICE not set 20:51:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000001b000000000002", @ifru_ivalue=0x907000}) [ 812.338404] binder: BINDER_SET_CONTEXT_MGR already set [ 812.353566] binder: 28374:28375 ioctl 40046207 0 returned -16 20:51:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001c70000000002", @ifru_ivalue=0x907000}) 20:51:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x48) [ 812.410106] binder: 28374:28375 ioctl 81009431 20000300 returned -22 20:51:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x5, 0x1, 0x80, 0x3ff, 0x79}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/43, 0x5000, 0x1000, 0x80}, 0x18) write$tun(r1, &(0x7f0000000240)={@void, @val, @arp=@generic={0x0, 0x800, 0x6, 0x0, 0xb, @random="b761ce02efca", "56ebc6", @link_local={0x1, 0x80, 0xc2}, "2dfeab3f622df786e8c38148e6d8d918"}}, 0x1b1) 20:51:59 executing program 5: unshare(0x2000400) r0 = epoll_create(0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x141100, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x8000, 0xffffffff00000001}, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1d, 0x0, &(0x7f0000000040), 0x8) 20:51:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x48) [ 812.541312] binder: 28374:28375 unknown command -999284981 [ 812.563531] binder: 28374:28375 ioctl c0306201 20000240 returned -22 [ 812.660057] binder: 28374:28375 unknown command 0 [ 812.665146] binder: 28374:28375 ioctl c0306201 20007000 returned -22 20:51:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046307}], 0x0, 0x0, &(0x7f0000000080)}) 20:51:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000b37000)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)="cf2dc3a1c46717cb", 0x8}], 0x1, &(0x7f0000000000)}, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x4900, 0x10) ioctl$TIOCSBRK(r2, 0x5427) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffecd, &(0x7f0000000100)=[{&(0x7f0000000080)=""/87, 0x9}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 20:51:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001c90000000002", @ifru_ivalue=0x907000}) 20:51:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000020", @ifru_ivalue=0x907000}) 20:51:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x60]}, 0x48) 20:51:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:51:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"69664e3000f2ff07100000ffff00", 0xb303}) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@void, @val, @x25}, 0xd) [ 812.899894] binder: 28355:28356 unknown command 1074029330 [ 812.905626] binder: 28355:28356 ioctl c0306201 200002c0 returned -22 [ 812.956533] binder: 28417:28426 ERROR: BC_REGISTER_LOOPER called without request [ 812.964219] binder: 28426 RLIMIT_NICE not set 20:51:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x48) [ 812.997483] binder: BINDER_SET_CONTEXT_MGR already set 20:51:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:51:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="b5d2a6d915491f2a5c3681e54d99124f7886fe2a8810322ae8b5cab04b50c41f026501fdfd0c1031eebe9f35f20ecf94a095be7fea1647a58f957211b41579ebe28a3211716e"], 0x11) chdir(&(0x7f0000000000)='./file0\x00') 20:51:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001cb0000000002", @ifru_ivalue=0x907000}) [ 813.026219] binder: 28432:28434 ioctl 40046207 0 returned -16 [ 813.050609] binder: 28432:28434 ERROR: BC_REGISTER_LOOPER called without request [ 813.058270] binder: 28434 RLIMIT_NICE not set 20:51:59 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r0, 0xffffffffffffffff) set_thread_area(&(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x3, 0x1, 0x0, 0x200000b9b, 0x962, 0x1004}) 20:51:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000003", @ifru_ivalue=0x907000}) 20:51:59 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000]}, 0x48) 20:51:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x630d}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, 0x48) 20:52:00 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"69666230000400", 0xa201}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xe88f}, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xffffffffffffff07) 20:52:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000005", @ifru_ivalue=0x907000}) 20:52:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000d7010000000002", @ifru_ivalue=0x907000}) 20:52:00 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r2 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="09f9e73c305b1d489307ec31253cc47bcb53567c4c19628cc0a38c01b1b501f9dde704af0bd8", 0x26, 0xfffffffffffffff9) keyctl$clear(0x7, r2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:00 executing program 6: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$void(r0, 0xc004587f) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) [ 813.795254] binder: 28432:28434 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 813.833389] binder: 28478:28480 ERROR: BC_REGISTER_LOOPER called without request [ 813.841160] binder: 28480 RLIMIT_NICE not set 20:52:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x48) [ 813.870075] IPVS: ftp: loaded support on port[0] = 21 [ 813.884519] binder: BINDER_SET_CONTEXT_MGR already set [ 813.904829] binder: 28491:28494 ioctl 40046207 0 returned -16 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x90ffffff]}, 0x48) 20:52:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000007000000000002", @ifru_ivalue=0x907000}) [ 813.943547] binder: 28491:28494 ERROR: BC_REGISTER_LOOPER called without request [ 813.951238] binder: 28494 RLIMIT_NICE not set 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x48) 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}, 0x48) 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48) 20:52:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x48) [ 814.361624] IPVS: ftp: loaded support on port[0] = 21 20:52:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x630b}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}, 0x48) 20:52:01 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xcfc, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/140) 20:52:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000d000000000002", @ifru_ivalue=0x907000}) 20:52:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000003e700000002", @ifru_ivalue=0x907000}) 20:52:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000008e80)={0xfff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) recvmmsg(r1, &(0x7f0000008b80)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/211, 0xd3}], 0x3, &(0x7f0000000100)=""/4, 0x4, 0x9}, 0xf944}, {{&(0x7f0000000180)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f0000003880)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/218, 0xda}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/172, 0xac}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x7, &(0x7f0000003900)=""/191, 0xbf}}, {{&(0x7f00000039c0)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000003a40)=""/130, 0x82}, {&(0x7f0000003b00)=""/136, 0x88}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/118, 0x76}, {&(0x7f0000004c40)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x576}, 0x4}, {{&(0x7f0000005cc0)=@nfc, 0x80, &(0x7f0000006180)=[{&(0x7f0000005d40)=""/14, 0xe}, {&(0x7f0000005d80)=""/154, 0x9a}, {&(0x7f0000005e40)=""/99, 0x63}, {&(0x7f0000005ec0)=""/113, 0x71}, {&(0x7f0000005f40)=""/223, 0xdf}, {&(0x7f0000006040)=""/10, 0xa}, {&(0x7f0000006080)=""/254, 0xfe}], 0x7, &(0x7f0000006200)=""/47, 0x2f, 0xef6}, 0x200}, {{&(0x7f0000006240)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000007400)=[{&(0x7f00000062c0)=""/127, 0x7f}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/181, 0xb5}], 0x3, &(0x7f0000007440)=""/19, 0x13, 0xfffffffffffffffe}, 0x762}, {{&(0x7f0000007480)=@nfc, 0x80, &(0x7f0000007780)=[{&(0x7f0000007500)=""/164, 0xa4}, {&(0x7f00000075c0)=""/17, 0x11}, {&(0x7f0000007600)=""/125, 0x7d}, {&(0x7f0000007680)=""/253, 0xfd}], 0x4, 0x0, 0x0, 0x1}, 0x5}, {{&(0x7f00000077c0)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f0000008b00)=[{&(0x7f0000007840)=""/113, 0x71}, {&(0x7f00000078c0)=""/18, 0x12}, {&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/240, 0xf0}, {&(0x7f0000008a00)=""/23, 0x17}, {&(0x7f0000008a40)=""/156, 0x9c}], 0x6, 0x0, 0x0, 0x7}, 0xea02}], 0x7, 0x10040, &(0x7f0000008d40)) syz_extract_tcp_res(&(0x7f0000008e00), 0x7fffffff, 0x0) getsockopt$inet6_int(r3, 0x29, 0x37, &(0x7f0000008d80), &(0x7f0000008dc0)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000008e40)=ANY=[@ANYBLOB="280000001100110000000000e1330e410c077200000000ff010000000000000000000322718f2bbc15db0000006c00"], 0x28}, 0x1}, 0x0) 20:52:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x11010, r0, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="52ae33df5f6d9576a09c954489ba086960933242912945669b463a00000000"], 0x1b4, 0x0, &(0x7f0000000300)}) readahead(r1, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xfffffe67, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x301) [ 814.672145] binder: 28491:28494 unknown command 0 [ 814.677208] binder: 28491:28494 ioctl c0306201 200002c0 returned -22 [ 814.736118] binder: 28533:28534 unknown command -550261166 [ 814.768548] binder: BINDER_SET_CONTEXT_MGR already set [ 814.778553] binder: 28533:28534 ioctl c0306201 20000240 returned -22 20:52:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd0ffffff]}, 0x48) [ 814.794670] binder: 28540:28549 ioctl 40046207 0 returned -16 [ 814.814453] binder: 28540:28549 ERROR: BC_REGISTER_LOOPER called without request [ 814.822180] binder: 28549 RLIMIT_NICE not set 20:52:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:01 executing program 5: r0 = socket(0x200000010, 0x802, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team0\x00', 0xc201}) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x8, 0x1, "9a1b71741128ba505fd753e95158175ca7decee46c596648ec9a8aca6deb95e29f3deb6afb5fdbf21bd7dc8c09175c29a9366552be0358c4b5f4a0d8dad3f5", 0x33}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="368b949f23224b99f3c081aaebef7b08d82d2a5c83e457cfcc9d52", 0x1b}], 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x71365ce7}, 0x8) [ 814.840986] binder: 28533:28534 unknown command 0 20:52:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000001d000002", @ifru_ivalue=0x907000}) 20:52:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000001", @ifru_ivalue=0x907000}) [ 814.874808] binder: 28533:28534 ioctl c0306201 20000100 returned -22 20:52:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, 0x48) 20:52:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x3, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', "62725ecd40ec3000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) r4 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r4, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:01 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x48) [ 815.550575] binder: 28540:28580 ERROR: BC_REGISTER_LOOPER called without request [ 815.558376] binder: 28540:28580 unknown command 0 [ 815.578888] binder: 28540:28580 ioctl c0306201 200002c0 returned -22 20:52:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40086310}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}, 0x48) 20:52:02 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000c000000000083777e0e37a6077b"], 0x11) 20:52:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2, &(0x7f0000000000)) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffe00, 0x488000) r3 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x184, 0x2b, 0x701, 0x70bd25, 0x25dfdbfb, {0x3}, [@generic="b52f79834bdbc947e745100fd59fce5ca8fdfe03e33204384c20e71823dff734617dd7a059081920d7dc32888f1edb61b0c228cc9570164d6d3226b69ca56706f17daa18e2ef3bdc3451d5c383d79a236a8a527b7e88eb698bc35d9ecc7f7a6f2cef0923f497b1681e5a183eb07e2d05a43ae9943abc74dd64cc2ed6a0fcd9b05925b22158aef3894006c7ae1b8246c7d9235853fa9082935aac7e52f29abc0764a5266272bd06483fe1c76790b97a646164870719c5d0b70c", @typed={0x8, 0x58, @u32=0x9}, @typed={0x8, 0x4f, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @typed={0x8, 0x92, @pid=r3}, @nested={0x30, 0x61, [@typed={0x8, 0x5c, @u32=0x4}, @typed={0x14, 0x88, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @typed={0x8, 0x6e, @fd=r1}, @typed={0x8, 0x47, @fd=r2}]}, @generic="29ae31f6d12f9d9afed2bbc6e9fd923cffe7e2ad9485feceb332b6e488b7b65755ffe98840ebd71554e5c2be54e41122dc470629c9feee3a5e2bf19323b3ae0b587e5ea442deb4a59d64f0ad4028d01b5e9923be3b45d1544e29b51d8a", @typed={0x10, 0x23, @str='/dev/sg#\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x24040081}, 0x85) 20:52:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x48) 20:52:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001c8000000000002", @ifru_ivalue=0x907000}) [ 815.780872] binder: BINDER_SET_CONTEXT_MGR already set [ 815.792010] binder: 28573:28574 ERROR: BC_REGISTER_LOOPER called without request [ 815.799751] binder: 28574 RLIMIT_NICE not set [ 815.805225] binder: 28585:28586 ioctl 40046207 0 returned -16 20:52:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000001b0000000002", @ifru_ivalue=0x907000}) [ 815.854010] binder: 28585:28586 ERROR: BC_REGISTER_LOOPER called without request [ 815.861790] binder: 28586 RLIMIT_NICE not set 20:52:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400100, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000280)=""/4096) munlockall() 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000]}, 0x48) 20:52:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x48) 20:52:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) restart_syscall() openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/4096) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedb) r0 = shmget$private(0x0, 0x3000, 0x54000008, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x6000) r1 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ff6000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x48) [ 816.108494] binder: BINDER_SET_CONTEXT_MGR already set [ 816.135347] binder: 28619:28622 ioctl 40046207 0 returned -16 20:52:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}, 0x48) [ 816.510608] binder: 28619:28622 ERROR: BC_REGISTER_LOOPER called without request [ 816.518426] binder: 28622 RLIMIT_NICE not set 20:52:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="2957e0311f166190fef32bd85c1dae87d7b8d4f8eb") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x20000000c) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x55) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1dd8, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x401}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r6, 0x1}, 0x8) 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x436]}, 0x48) 20:52:03 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000c000000006e5247bd0000000000"], 0x11) 20:52:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000170000000002", @ifru_ivalue=0x907000}) 20:52:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000c00000000000002", @ifru_ivalue=0x907000}) [ 816.562913] binder: 28585:28586 BC_DEAD_BINDER_DONE 0000000000000000 not found 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}, 0x48) [ 816.654779] binder: 28645:28654 ERROR: BC_REGISTER_LOOPER called without request [ 816.662447] binder: 28654 RLIMIT_NICE not set 20:52:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, 0x48) 20:52:03 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x14000, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4110, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001040)=""/4096) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 20:52:03 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x402001) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000040)={{0xed, @loopback=0x7f000001, 0x4e21, 0x0, 'lblc\x00', 0x14, 0x1, 0x3d}, {@multicast2=0xe0000002, 0x4e20, 0x2003, 0x2776, 0x8001, 0x14}}, 0x44) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x170, 0x0, &(0x7f0000000300)="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"}) 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, 0x48) [ 816.902933] binder: 28619:28622 ioctl 1278 20000000 returned -22 [ 816.913993] binder: 28619:28622 ioctl 7006 0 returned -22 [ 816.932492] binder_alloc: binder_alloc_mmap_handler: 28671 20000000-20002000 already mapped failed -16 [ 816.987291] binder: BINDER_SET_CONTEXT_MGR already set 20:52:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000080), 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0x8, 0x0, 0x7, 0x16f, 0x8001, 0x5}) fstat(r0, &(0x7f0000000240)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x48) [ 817.017995] binder: 28681:28682 ioctl 40046207 0 returned -16 20:52:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x48) [ 817.229044] binder: 28681:28682 ERROR: BC_REGISTER_LOOPER called without request [ 817.236721] binder: 28682 RLIMIT_NICE not set 20:52:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x48) 20:52:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:04 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x4000}) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 20:52:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000002000000002", @ifru_ivalue=0x907000}) 20:52:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000110000000002", @ifru_ivalue=0x907000}) [ 817.451977] binder: 28645:28654 transaction failed 29189/-22, size 0-0 line 2852 [ 817.471400] binder: undelivered TRANSACTION_ERROR: 29189 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ffffff]}, 0x48) 20:52:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 817.562206] binder: 28711:28712 ERROR: BC_REGISTER_LOOPER called without request [ 817.569900] binder: 28712 RLIMIT_NICE not set 20:52:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000006890000000002", @ifru_ivalue=0x907000}) 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x48) 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0x48) 20:52:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477672670") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09ddf81ce0b7a6953e273200"], 0x1b4, 0x0, &(0x7f0000000300)}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x800}, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000140)={{0xfffffffffffffffb, 0x3}, 'port1\x00', 0x80, 0x1, 0x2, 0x6, 0x5, 0x800, 0x3, 0x0, 0x5, 0x80000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES16=0x0], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYRES16=r1], @ANYRES16=r1], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) renameat(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, 0x48) [ 817.873922] binder: BINDER_SET_CONTEXT_MGR already set [ 817.892852] binder: 28733:28737 ioctl 40046207 0 returned -16 20:52:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001080)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000010c0)={'teql0\x00', r2}) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) 20:52:04 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}, 0x48) 20:52:04 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000000000000733f08e3f69e37c868c90a027418f795ce1a1e7d4d15dd154dc541e1734ab3bcda1b2abcbbac77b1a3f5c0411c4712ac5d2baeb45c1d93e826389ed4dff37fb0de65f9a9a23ad69c01eb500f328b"], 0x11) [ 818.083119] binder: 28733:28737 unknown command 486071561 [ 818.090157] binder: 28733:28737 ioctl c0306201 20000240 returned -22 [ 818.120175] binder: 28733:28737 ioctl 40a85321 20000140 returned -22 [ 818.140815] binder: 28733:28737 unknown command 21 [ 818.158739] binder: 28733:28737 ioctl c0306201 20000100 returned -22 [ 818.187877] binder: BINDER_SET_CONTEXT_MGR already set [ 818.215629] binder: 28733:28737 ioctl 40046207 0 returned -16 [ 818.269719] binder: 28733:28737 unknown command 486071561 [ 818.280954] binder: 28733:28737 ioctl c0306201 20000240 returned -22 [ 818.300828] binder: 28733:28754 ioctl 40a85321 20000140 returned -22 [ 818.326225] binder: 28733:28755 unknown command 24 [ 818.349461] binder: 28711:28757 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 818.360227] binder: 28733:28755 ioctl c0306201 20000100 returned -22 20:52:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046306}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x48) 20:52:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000007fffffff", @ifru_ivalue=0x907000}) 20:52:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000f000000000002", @ifru_ivalue=0x907000}) 20:52:05 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="008000000000b340000000000000000000"], 0x11) 20:52:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, 0x48) 20:52:05 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = getpid() sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000052}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0xc, 0x3, 0x400, 0x70bd27, 0x25dfdbfc, {0xf, 0x0, 0x9}, [@generic="618388a1f854605803de20d1b608089a", @typed={0x8, 0x6b, @pid=r1}, @nested={0x58, 0x4c, [@typed={0x20, 0x69, @str="6367726f7570236c6f6367726f757073656c696e75785e1300"}, @generic="71b4914149f9f148502d3122e548f04a61534ec67ced9d91863d9f7acc823c84", @typed={0x8, 0x60, @pid=r2}, @typed={0x8, 0x26, @pid=r3}, @typed={0x4}]}, @typed={0x8, 0x36, @ipv4=@loopback=0x7f000001}, @nested={0xc, 0x1, [@typed={0x8, 0x50, @ipv4=@multicast1=0xe0000001}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x8090) r4 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl(r6, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r7 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 818.568748] binder: 28770:28772 ERROR: BC_REGISTER_LOOPER called without request [ 818.576455] binder: 28772 RLIMIT_NICE not set 20:52:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000016000000000002", @ifru_ivalue=0x907000}) 20:52:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x36040000]}, 0x48) [ 818.614418] binder: BINDER_SET_CONTEXT_MGR already set [ 818.633073] binder: 28776:28780 ioctl 40046207 0 returned -16 20:52:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001e300000002", @ifru_ivalue=0x907000}) [ 818.678682] binder: 28776:28780 ERROR: BC_REGISTER_LOOPER called without request [ 818.686423] binder: 28780 RLIMIT_NICE not set 20:52:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200e00) timerfd_gettime(r1, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x6, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x183402, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x40045108, &(0x7f00000001c0)) 20:52:05 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x48) 20:52:05 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\t\x00\x00\x00'], 0xe1) [ 819.361491] binder: 28770:28815 Release 1 refcount change on invalid ref 0 ret -22 20:52:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046303}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000001f000000000002", @ifru_ivalue=0x907000}) 20:52:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000000a000002", @ifru_ivalue=0x907000}) 20:52:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, 0x48) 20:52:06 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x94, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="73f1218c83a721c8d99e8da440b7af3e31e7f89420d568be63f1b3fe9e6ef1047c715b5963072fde476508b02b4d5a6af956576ac5e5805b358c6247d1b151c723af6419cb9fbc67bbada1ba4b93dc2d859e4ecbcb3ac25815", 0x59}, {&(0x7f0000000080)="62b8761ddcee9ec5f6554642699d34e41bfb16b14500c5bc5229e0ec0d4537db61f672eb4b8853decf", 0x29}, {&(0x7f00000000c0)="b8f569e3a8c323e1bccf0701ffb59cf2c5a73a1373f262ea2f0acf1d8ca630b50deeada5d71e3aa9069047d8fe", 0x2d}], 0x3) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0xda, 0xc00) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000002c0)=0x4) 20:52:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="4b8e0b42"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) r4 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='/dev/binder#\x00', 0x0) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='L[', 0x2, r4) 20:52:06 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0x2}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000cda31e80c0496df7da0edfad2f1dc0080000000952c51c8aecc45c0e000005a35dc996af276fcede808"], 0x11) 20:52:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x48) [ 819.561741] binder: 28832:28835 ERROR: BC_REGISTER_LOOPER called without request [ 819.569395] binder: 28835 RLIMIT_NICE not set [ 819.574462] binder: BINDER_SET_CONTEXT_MGR already set [ 819.597398] binder: 28830:28831 ioctl 40046207 0 returned -16 [ 819.624509] binder: 28830:28831 unknown command 1108053579 [ 819.656418] binder: 28830:28831 ioctl c0306201 20000240 returned -22 20:52:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x4, 0x5, 0x6, 0x3, 0x3, [{0x1, 0x100000000, 0x8, 0x0, 0x0, 0x100}, {0x1, 0x1, 0x665c, 0x0, 0x0, 0x100}, {0x10c, 0xb5, 0x1000, 0x0, 0x0, 0x1008}]}) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x1, 0x24}], 0x10}}], 0x2, 0x0) 20:52:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000001c000000000002", @ifru_ivalue=0x907000}) 20:52:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000003e7000002", @ifru_ivalue=0x907000}) 20:52:06 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000]}, 0x48) 20:52:06 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6abc3d48, 0x50002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x100, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x4, 0x9, 0x8, 0x49, 0x0, 0xd38, 0x2, 0x6, 0x7ff, 0x657, 0x0, 0x5, 0x4, 0x7, 0x4, 0x0, 0xfffffffffffff298, 0x6, 0x2, 0x1, 0xefd1, 0x4000000000, 0x9, 0x3, 0x5, 0x7fffffff, 0x5, 0x47, 0x8000, 0x4556, 0x9, 0x4, 0x4, 0x5, 0x0, 0x1000, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x1, 0x2, 0x4, 0x4, 0x4}, r2, 0x1, r3, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046305}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}, 0x48) 20:52:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xb4, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@routing, 0x8) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240)="4241406c93cca3f920d3c60fa90936ec3dbb8f79892448e8ad44a683d086306198cd8264249479df8249642f16d9cc720399a065de2659f88ebbdb62d0a638950b71e290043c0ec2539c3f5ad24d140717dd81967314f216ab7d", &(0x7f0000000340)=""/179}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) r2 = memfd_create(&(0x7f0000000100)='em1procem1bdevsystem#\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000440)=0x0) process_vm_writev(r3, &(0x7f0000000900)=[{&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f00000008c0)=""/10, 0xa}], 0x7, &(0x7f0000001ec0)=[{&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000b40)=""/62, 0x3e}, {&(0x7f0000000b80)=""/52, 0x34}, {&(0x7f0000000bc0)=""/37, 0x25}, {&(0x7f0000000c00)=""/164, 0xa4}, {&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/195, 0xc3}, {&(0x7f0000001e40)=""/98, 0x62}], 0xa, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/184) 20:52:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:07 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1a8a0, 0x3, 0x8, 0x2}, 0x10) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d600000002", @ifru_ivalue=0x907000}) 20:52:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000e1010000000002", @ifru_ivalue=0x907000}) [ 820.365206] binder: 28832:28835 unknown command 1074029315 [ 820.370998] binder: 28832:28835 ioctl c0306201 200002c0 returned -22 [ 820.418335] binder: 28881:28884 ERROR: BC_REGISTER_LOOPER called without request [ 820.426009] binder: 28884 RLIMIT_NICE not set [ 820.453621] binder: BINDER_SET_CONTEXT_MGR already set 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x48) 20:52:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000689000002", @ifru_ivalue=0x907000}) [ 820.464475] binder: 28889:28892 ioctl 40046207 0 returned -16 [ 820.478718] binder: 28889:28892 ERROR: BC_REGISTER_LOOPER called without request [ 820.486456] binder: 28892 RLIMIT_NICE not set 20:52:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001e2000000000002", @ifru_ivalue=0x907000}) 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x48) 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0x48) 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x48) 20:52:07 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x48) 20:52:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046302}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x90ffffff00000000]}, 0x48) 20:52:08 executing program 0: r0 = socket(0x7, 0x6, 0x0) getrandom(&(0x7f0000000480)=""/50, 0x32, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000080)={0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000c00000000000000000000000000b941ec16516021c8bba27e3e4e37e8c3e510cf3907f2c5bdb07e007d2ae92a296d071956538ba5a949c2e2bdfc8acf4f7e11f6a152f01030b53d4e037e644d8659973d8e704c8f8c3aae56f7ef1760cd40c7218c1cb156292fcfe9f496ca163b0e3a4450c5f2741748c98bbad6df37ab0aa69384ed8ac2b2790d76eb7fe4bd0ff008ae4d7fac04ae95f2e17a6c1a813ed61245eb5a5bb8d481fd94e4b715ef2946e12e964c2b993bf4a1d62fbaf9fee6a025c8ce74e5b6b0360d5cc8e16980da985df00b48cdca67c4b5bdfe2845d6c80a6e"], 0x11) accept4$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x3, 0x40, 0x0, 0x7, 0x3, 0xbbfe, 0x6, 0x7, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22}}, 0x800, 0x8d1a}, &(0x7f0000000380)=0x90) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x33, 0x46c092f510c814f4, @tid=r1}) 20:52:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000030000000002", @ifru_ivalue=0x907000}) 20:52:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000d201000000000002", @ifru_ivalue=0x907000}) 20:52:08 executing program 5: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1c2c, &(0x7f0000000100)=[{0x100000000000000, 0x8, 0x8}, {0xfffffffffffff800, 0xfffffffffffffff9, 0x4, 0x1f}, {0x101, 0xfffffffffffffffb, 0x0, 0x9}, {0x20, 0x4, 0x5, 0x4}, {0x1, 0x6, 0x7, 0x1}, {0x0, 0x9, 0xffffffffffffff73, 0x7d38}, {0xd, 0x6, 0x101, 0xfffffffffffffeff}, {0x59, 0x7, 0x800, 0x6}, {0x0, 0x3, 0x0, 0x5}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78) [ 821.282223] binder: BINDER_SET_CONTEXT_MGR already set [ 821.287654] binder: 28930:28931 ioctl 40046207 0 returned -16 [ 821.294377] binder: 28930:28931 ERROR: BC_REGISTER_LOOPER called without request [ 821.301988] binder: 28931 RLIMIT_NICE not set [ 821.386833] binder: BINDER_SET_CONTEXT_MGR already set 20:52:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x1}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80000000, 0x22840) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 20:52:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x48) [ 821.413195] binder: 28946:28947 ioctl 40046207 0 returned -16 [ 821.451980] binder: 28946:28947 ERROR: BC_REGISTER_LOOPER called without request 20:52:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001ca0000000002", @ifru_ivalue=0x907000}) 20:52:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001100000002", @ifru_ivalue=0x907000}) [ 821.459687] binder: 28947 RLIMIT_NICE not set 20:52:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x50]}, 0x48) 20:52:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f01c826650f0966b831010f00d8440f20c03509000000440f22c0260f30b805000000b90b0000000f01c10f22240f22c3b9230800000f3266baf80cb8f09c3c8aef66bafc0cb83d000000ef", 0x4c}], 0x38d, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0x1400000000000000, 0x1000, 0x400, 0x8, 0x1c}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="d900000000000020000000000000000069822536e73305d8bc9cde85c8b04be135b51076b947b24276067eda0456db281a49ac25dec11968f276e53466484fbc3e032925f7194527a9e3f0808b3053c043b349b09491357033364a9321d0313760"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:52:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046356}], 0x0, 0x0, &(0x7f0000000080)}) [ 822.086504] binder: BC_ACQUIRE_RESULT not supported [ 822.091763] binder: 28930:28931 ioctl c0306201 200002c0 returned -22 [ 822.123604] binder: BINDER_SET_CONTEXT_MGR already set [ 822.129087] binder: 28989:28990 ioctl 40046207 0 returned -16 20:52:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000052c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2000) r4 = gettid() sendmsg$nl_generic(r3, &(0x7f0000006480)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006440)={&(0x7f0000005340)={0x10c8, 0x22, 0xc09, 0x70bd2a, 0x25dfdbfb, {0x11}, [@nested={0x10b4, 0x94, [@typed={0x8, 0x86, @ipv4=@broadcast=0xffffffff}, @generic="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", @typed={0x8, 0x6c, @pid=r4}, @generic="0f8861c256636f5124d75e1ca9494b57304ba72480fea03877b2edcd7c96d3e1a9842c3b7c24b7f0ddaf56ac40444a949561ca264c02bd806784f5fd425a866aab939f8a5256aa3f6361a20bca81a47f42be142d35d1cb7c49eddedd7867da142986f15194bc9c3a930c07a54f07374a0801f2cf0ac05c3c66c450fc487a210d8c0fa45ad7269429addf6ab19ab5b159861b5b0a7cde6184115e5208d854"]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x2400c055}, 0x20000044) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000004b00)=""/237) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="94ee0bf69cdda74cbd1a0b630000"], 0x1b4, 0x0, &(0x7f0000000300)}) [ 822.135802] binder: 28989:28990 ERROR: BC_REGISTER_LOOPER called without request [ 822.143431] binder: 28990 RLIMIT_NICE not set sendmmsg(r2, &(0x7f0000004a40)=[{{&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000180)="27a5ab8a6baa2d57669897ae8a8e5d69ab670f0cc7821f600c86115251b5bfa6748f8303bfb034690c6112e8d7a6928a421658bd354efd62d34b82b5f0", 0x3d}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="3595c06f05daeddba0c7174338d33b84a36d3e00df716c99a30d7fcb8b5637e4ea01838157fed8b1ec9a422310f90b344de7d4f82ea5e000026244de0832ecaad6b46c64b7f43786e6986b14d026e0b1ca6da01cfb86279c7e5090e539d83c4681f5ebfcdca4a4eb85cdd40d6c96818d6e3dd1a1fd05cd83ecf9cf9891a2f9897a2f3df6bf33d4b05fc9a468acf5010aa41bed385cce7f11d72545958a3a491a72ee8d2201e92195f6742630154e7b480f07c0b166325fdc92", 0xb9}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000001c0)="e719ca96edbe6f931e87e69135832e8082879f", 0x13}, {&(0x7f00000015c0)="06ccaa83afd41b4c693f2b6e6f19f8e96438b989e393e118d00d40d8cc4b5ff7e24128487fbace30606ef85a6ae7790c5e40ba31741c6e88b3ad5ae81fba03f8a074ed25b0db37419a30c0e329a10edf363b5465e0cba577c9a63ec6bdf1b3090bb64f940d4d0d7ca3a47ee917742dfec534315ce8e637d934df617ccbcbde865d33e06f1826c01ed6b92786abc0dafc5f3de39d50d865d899af9812bd2b46086f5eb2e1bf80cd7acf8ba1", 0xab}, {&(0x7f0000001680)="bf9cf4bc261e728be509692b2856324f77a2de7408991ab917da837121c53cef9b372009f7b7dc3395444276929857d157763106e52abe3f96700391bb474019143132f102d69fe7543c5c12c50e9d1a525baaf0af94b008b67f28456cfa8bcc2c9ff2ce7b9258ed6a5e3a09900cc06654ca0999320fe1aae60aec32350f37", 0x7f}], 0x8, &(0x7f0000000200)=[{0x38, 0x11f, 0x2, "49380f881f4da0057f0a145ce0475a6dce8d0fb31da1c828936dc3560edc298f4667"}], 0x38, 0x800}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001780)="d49d4c7e959cf3db552e21ad8abcdab012e01e325fd6f8f59acdc8686c41b57f255c334978bc48c17907a00684e3531bf5f8aa332f54bb50374f08a3fe832ec336cc4cae18c688932951e90fa8d2e53e82b7289028587770d801b045a58c13f1b856476fe0b424edada425487b3ce4bea6ac7a5469f50f960710708cbd14a5d934aa86f3b5cded49b251bba914a540c2f384b1febce5ba54b400aad40efc4b2014961ce5adc241d90106d6ad0e", 0xad}], 0x1, &(0x7f0000001840)=[{0x1010, 0x103, 0x8, "bf313c887f8fa5c4ce1d98dd5626157cc504effec4b77bb1cf6bd16cca566bf33c4833a2a9ac8dc3dd6748353051d91f0c0b0f989d92fbee16cb89ed5115af5bc9a895d2171d98725a4569bab4d609d078c318a3684561dec5a5ab8d5761e853d3386f4af50a76a8e1724f178ccabe7101f90d8399e15d2308d8098e3298774bba197c8e2c34be8b5d90286a1659f5ca2f6d8a5c08df4ed33aff728a74d6b73c9c340839a4b620f2ba265ba77940cca46f9d36e2a18d734acaed36a9ecab7f03730bd805b89363a5dc7d66a1db14b5ea93674e54290eec0ab1cd591f0672f8345121af6e8bd3250d3cc30f52973ba456487127c8479ae255893fbf7217fc39e4b7760e6fc7c7a46301980c6ec2392c92cec929f464b224ea0745b03134277d8baeccea19bd044debb5612718ade36a9d252d4a09419101c920ef2c57d34ba335c9fdbba349a5487a175c3784791d424f4d9724272b0487f7ac64d5757b1a2bd3d911f62785122c6bcaf8dabac4fcd18f8ffe9d9102d9dcdbbc03bb872615e90b1107781898f6c1a57e75a7979ee5b61914e3ade95182439ab4ecd69059efe854aa194cec2a048d2371867e072768b10d6abde292f57e6732d3d959bb7e713567713706a223570d99a7fe36af66346df90a14125ce80caf599d87b095f59765ec399b0a4dd858d123d7fe7b72e68e0522863b3057407011a8c4655338ab0eab7d58f8b7cd555a8c9aacd0af9f263ceae788ddbf8aacac864b0f7ced7663d1cf34a33f56e708098b58948d3865fe22712fdc6a75febffdc64170665fe3fe67371f9ed00259068db115603cd4da191424a53b9faaca30d1237065bfe18015d4cb02818a1fa3b6d0c8561445412c9b9097f1d7c910bade01c4fcd79c65a51030f00dd7c3a1473e909db9420439ecd80035f61720a016aa94e5d8710863f8ad4e417fc1a9b5c406eaf59de01da68a6763bf6018c2bdb5328be253c81c14d56810bc8446d908d79d6b2648a522f0e6853ce237607ebba083817b1572b18d6847dd80281286a23e91a7970ce9c6f2c6efeb61945ac4f8132c262b0b224989f0489ecaa1568e74d40d6163ccce1f0ccc7878b31a1b8eda585ac9a55787e27a9b4ba63f5ef261e2781e0f5163c8751ec88b18bc639bf1947ff5f4143d26edad3fd7f756c2518bd801d2e50a02047fb8f71ea3be8091c59949f3e8e23a551fafecd653f9dc1c4a0f7191d5342408722da4b941669acbab7e8355dbbad09bc4767554191c46bdc2e3cebe2cec795dfeb512897bce153b22cce3d83f59bda96e5b0c387c35fef4d3c4e9bcf30efc34a88cdd16f09d8f16e6d1e0c98ee1a101b69322a5933699720eea43c75ff7ad4ba3d7d8d23aa04c83e36b0bb17946e34b61aa17fb6f48f33fd89653974527f98b19492b4efef6940bc070f4c1d4424cf8bf574cb5d73f0baea7b12218b9499c92a151b059f9ab355f38216953749437a627db8a3eaedf24522131feaf67634c55be92e0cfb89f4a7205bdcb84cd68efea790b1360f005f5ffa63e6cd8c718eb3ba26093cedd19ddfe82e31971e48dcf6858b86305ca2016794892efa380838e0b04bfd629c13a82badcd5bb1e182044a0f5e89176897609d92192868de1334f5ed4297598c549f8b033c1a3cb846d5ddfbce1b37ac19b6ce63e7cd3708955b9fa7e4875215c22719e9e9df5bbdf6374bc1629a1b1e1f21e1a358987b191e5f6e743e22fb23c840e6382c9c9448c5bce49b048e709c248780f242aa99b4e3389e8854e831730666014dfef41e77c1e9801ee12f679907db83dc18477dfb671226a9f49beaf753758ce6c5ce4adfb0d12b9a676bac1157df10e6710bed57abd395a970e60c720e53fa30ec2b5802a7dd5fee227dabd50e0b2d115434e721bda51b6dc40faffc18560baf7ba6b9203d33a35c492a831997e706b7257f17ad5b15cef742530dbb9e53ca553a1edb949d70a71859f0a7c691f2de39c54f3cb6f7be9b9bebe73aa32ed12fb6da1887ba21f5a3d0b13016cef889a8488349388d68772dd98b3005738422c3280876fbb52c3abd9a96b1fc81a393ebcad102fcaef046be6e9bae3e3187cbdc998b9df626c6180bb5db83648cf8242d0475087f53105b8cdffc3d263d7d8849adc0702e9f40cddf7449286ff4c2f5a33d9c9ab34f67852418ecb29e7171f949e0ea14d06c15873d8fdc1ee52e50fa966b9b02343a5a858b5907f48f5616101d57972c2381c5d099b04ae09cf0f142518396259fba72408ef470e76d8b3e4eb72410a0423b468d2110d28f6d23fcd33076b19d225dca066dc8675eca1ddcedea98cdcaa660f0d5784caff63debbdd385ed75251551c962cc903656fc31cb39133a068d8c0335f6662c5d21e63af28ecb83ad9794f938d5afc9d9fe1de85cc861d68a2a67815a5efcb95fcb9ca784fbb75c56f2bf03ee1cfaf997f94e0039df31a91682e47eb33a561ce7b316d592256df5c1f47c196bbbf55e4d251fb92c7337592ea1c0c638ee575afb23d93ff44bfc216af778b3fae075b40b9b3e322becdf8d1ce848b986a35686b307d0ad93639ca279653dfebb73fb6bb2d742bd6f4732c2f82f4b09f73f209fe78890b3ed97025ff230d106ba5458ee987c53a36702804077b49d5193f26f6023d8806556b22acf7b9e9bb95d7d2725accd86c09979ba06350c7cd32ef590d524136011fcfdd45b94bb224234867ee922ac784c4fa8046208cd27cd2f1940ff1dd23bfa3ce84a776efdbf49a851543a2c0d2e0e90fe2e372a66c7d23cec31f8f45d17a5df638f974591d7c29729564f1c5d772b0b4f50f17b32874c74952544fa3fcfd003180906e85339ec3d5ed64204225635a6b1dc480e59beae0f1f8cb69e53f40832c4cbba92672f293d66b7e28af0976d62b773f4a866bca4fea87b0c66081ce1c607b7a090199738f04511e234f1396879700d28307f9bf416c729d6ff27643ae18c5ba7db77826b55841f1ccd1db60e4c3744d2d020c021d489d89216f87126a90a401cdb3af404e6b81b5c22b249f25e909304e45bfaa1308b0d033491ebd7bb3fd545087936c768ba5ea8c9b37986220a456b87b83ce822de36b9d9cfad698e913baa8798879a0dae1db1d67b6d6a48f41c6b17a12905c6d96226c989211ad1d174efd45cb491d89aa4a957be7ae493b9fc4d51ec02c8981f65f6455a49250e812cc616808440af41356babf6618b1926421f9474667fd2a37b3373ea6d48c4724579df9352f773bed956b4bc4c50d0a4ab45e509e889883a1007ae27a81c591a13cae7576aaab1e9a20305b41846b107b0ce3374985a73565209a55bc6db8dd765df2cbc8907a01c15770c1ee080be18e57a499c3dbb59bcdf0a40a65daa5a3858bfda58e4cb024a4de43d452a9d1378975d0513e48ab83d4ece54036fed65fb331c7a225aa6152bf6bfda875f5b2eedf2dd7453733e06995a46216a77572d346a47ac58cef73c7bbcdf362d73147c1ed1b35f24fa1b9c7d1e319a66d0c42c63c397f9a36a7672fdff1ef44059ca849bd7a9ec512fe397796fd8bcb7c067d268159108743e475f070888a2bd9688dd02e325934e4db369e030434dd7f0ae73639da11d43be1ed126dda73091f8fe46e2a97fd0a7658fd3b5b7dda3cc621bb4503be0e7bccc8fa2de892c652542a36baa0b8efd7e93ef3fe73e9c42c5941b5eca1ea9217d60c5a95998562bfb817d9d5a1f6428db5a98173cd2b3daf017135579d377d178c57b22119f69fae803b061ce2d012686fde3638d56b3ec4a36f0a4cb292776ac5cd4cfca2f83bf8d6bd95d6313738c1616717d4f02f5d73eb230e77a95ce54f6bed8b215a61753e768b38e72173a687c8aa381151dc3c7a7541c1ebc3bbcee5329e0d3a7c940e3e4693f54cf78b7f3e4449b01700133a0d01804fa69e0d013232898ade612398c264df27227d39d49456c511595b0d2485027251a18bd6ace1ad85b61779216beab4239a29fcea552364984e8335d973061accacfcbd28ddc95494e1a885f0f8c1eb0f5c5a09d9ddcfa7554af08d4ce76ae5a51248870221f71cf43207542da82b450ad3190d9a31d87fd3369249d1c40894455efe2d3ff077bc2de56f08387601740e7c7f0cfb871c9f25db532294d8193046cca858914589121bfcd05906c67f490f80855996cac0ef6d02b21c3c4df8668e9a0b3323030151dc69d82b60f04b7cf7059ccf4df6a92b21885812ff6cda191c2ebe721e1835d378cfddef94b18f2446794a61940c0c2dde22e22661d5443c1cf2a97ebe2da4e9a69c7082febbb002b46f2fd37552386512f21f82c4393f38d6b36ec6f7ff6184c98dcd264f70fcb649343fbcc1c8fb83674d87fb92c7d9f6f7e9d7627c858bcbcbc72e74241d78a2c21569765bedefc88d0b77a510bc75c86835deb31a6120b31c45ba791878c1d27375407ae03605d25292360b880b27362c410df41e6e6cb96ce6a46cbddae39879b389952b4a67d0ba6940ece3743c222f537f3d1a7754e59953c3e6e8e62d4466016d6148692ec7061a70b91d3320c1fffc2170ebaea0cc4a039c387ffc060f3f643c0276b1b9abd34f36046910f2bdb14ea3d44d648200de42a24fb1aded162038118e8486881309b0a5482d5955ff2e922cdcd8fed2da7adac5db625aab02d1f324e1b77f8e0c007b8ca0e072a7d3112c188bb8c5be26f0344d81f803b0ca70bed4e26d7ec70cbddadeaa63cae53d7834f8fa8aa6fb9a90a1c91c09d00e6dec44e062e2bbcad47ce3c842af321ff9f268b377788e1f79526b6d9b3ed32055f08bb21788aeb7e6c476a1c89d9d7a342414011726c2e48b896a0c577773bf4bd0553ef84942d30408ef1c7de0c3f5b0457571b172f49efbb162ee31e5a45f4b7f8a5d591aea1fa92f89e010ce53ccd256ae887082408522f90d6e9e6249782b951909bca1c32d7403dc4c6dfc88904b6e3e917bf2ed6de79042576e7a6a850139305b9f5c6a03a8db31653627cbdd33e3c991a3d30d99a410d90aab0fada36580b4ebc2a798ee3fdd2cf701295ac03a9cdd2748e5b8d16b75d9a6ed902bee9fd9adfc668262f1dfae49464cedd21cccf92f30f2fba25140db9aca735bf3ee2bb7c2958c0797d4d9bc73c82bf14e0d2a6096c29f8f87a47171ec66c6fe5f35d368213c29cab1f3326b72ee31d47d0bf7085e51a917ea328173929cf0389a54c36863d0c2e022454bd810659f1f5069b734a8b8ba7dd50e9fcc3764409b5866b7c6aeebcd9f62bd2b072907ffed5b6cc8805d3d78ba3b9d3ceeea02f9888f263f48972969a68713d8b52f19f7a98a7fa46ca30d282a0e7d995aa8480948e02009fff8d4bcc55abd2750d12f3ae3b68db555b96d7616b04f9cfb9f184e1d55104335502ada0c02d5a0be809327de2f6fa261a125d77047653842796477fe2f6a009fd9e09df99e63a4baabdd0ffd83e89fee7c8149cb0562cf225098f8f9dbe93d050bbdb57983b65bf181e2f7cdb1f21dbee39f6d8bd9714eb4814e2b869d50df1e8478791f1e93a5ecfd8c4638a633460081adf5ef88d7e466b8f3e63484487cb5dd40be28def6ef5c523cffba1dd7ccf8605e5b68dcbdd6eda22d6f702dbe56fb150a9a7548aa8a8294791473ba5159207a26645bbedc109774c445d20eb05d533375c626712162b290b2a09602c34a5349af502b8b139c43c187906b69d550faaa9b576afe138689762529cd3d91657e70aa47b163556f893e0215df43020d3fb212886035597f26dcafe6a1e92866f2bec0ac"}, {0xf8, 0x13f, 0x20, "61ff8e7bd93f3054d38b6786f4e7121a587a838422d0491bddb4cead3e018887c0c4d70fcc0696ae91c31327c635fb2cf2a5701672d2aaa6460679194e7bac83778546d8edbd45cd5d32f189087e93eb1d7126450cf3fce72f57e068852dad04e1b9515042abe6d03b61791fd28a26c698f2a9498e8e8eed65f23db67a49b6cd1fbe7d571eecbdb499221ab91b77e85b7874a88eba7a5da4f0154ff0478286a699c3de05b9bba5dc8cb059f394f44e80ea3aebc62cae240b907371d7ebada960a6e1d5200af8b365192d799de0bdeeb7c08133f457146a3d49aa6f8f5c99913def704c0b826b7d"}, {0x1010, 0x1ff, 0x8, "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"}, {0x48, 0x11f, 0x8, "9f43551705073ba86ba47d2f60c8e7660427a345585c8fd1bb58473bfe1ccfd945bb092f8c7a567dee7b27d0d068d59af8eb"}, {0x58, 0x0, 0x6, "f3109c98ebd0cd8b0011baf788b7bbcc3d2aa2e4557e8b2bc51dd419c245e5f543db6fac71a98e69edf44232915986d297db15c17993f75119528f481b8572ba0e75"}, {0x1010, 0x1, 0x1, "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"}], 0x31c8, 0x80}, 0xffffffff80000001}], 0x2, 0x40000) delete_module(&(0x7f0000004ac0)='/dev/binder#\x00', 0x200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x9, 0x80000001, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'team_slave_0\x00'}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x202, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) 20:52:08 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x48) [ 822.218252] binder: BINDER_SET_CONTEXT_MGR already set [ 822.224432] binder: 28996:28997 ioctl 40046207 0 returned -16 [ 822.232468] binder: 28996:28997 unknown command -166990188 [ 822.238213] binder: 28996:28997 ioctl c0306201 20000240 returned -22 20:52:09 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = semget(0x2, 0x3, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000580)=""/4096) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001dd000000000002", @ifru_ivalue=0x907000}) 20:52:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000045000002", @ifru_ivalue=0x907000}) 20:52:09 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x2000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00\x00\x00\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 20:52:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x48) 20:52:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, 0x48) 20:52:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x801) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) close(r0) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0x4) [ 822.435243] binder: 29011:29013 ERROR: BC_REGISTER_LOOPER called without request [ 822.442908] binder: 29013 RLIMIT_NICE not set 20:52:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}, 0x48) 20:52:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000180000000002", @ifru_ivalue=0x907000}) 20:52:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000600000000000002", @ifru_ivalue=0x907000}) 20:52:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x80000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newrule={0x3c, 0x20, 0x0, 0x70bd29, 0x5d1ded, {0xa, 0x94, 0x80, 0x3ff, 0x1, 0x0, 0x0, 0x3, 0x10000}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66b8b4008ec066b8d0000f00d0c4c1edefc199440f20c0350e000000440f22c0f22e0f05b8000000000f23c80f21f835000000000f23f8d9cc64f3ab0f20d835200000000f22d8", 0x47}], 0x1, 0x400000000000000, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000013c0)=ANY=[@ANYRES16=r3, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16=0x0], @ANYRES64=r1, @ANYRES32=r1, @ANYRES16, @ANYRES64=r3, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="663e60ee3b8058078d23a0c091259c6d", @ANYPTR, @ANYRES16=r2, @ANYBLOB="d37f15b818fee677adb964326249a20d9d5e476eff72cdc7d872338a6e2cf21e1beb3b3b8e3e8a49ccd0aa5cfb303e16862b61500e8f26ee2e35df592414e8c6ae57478229dfa45d", @ANYPTR], @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES64=r0]], @ANYBLOB="7d6862a071d0a6b995160805b9e408ae1a75dcb0c17da0293bed2d8d3b1623a0b1bfb7e52827c830290f2e485806be534f75816e0dca37d2ff1ff9a43da56ad8c037"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:52:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff90]}, 0x48) 20:52:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40406301}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:09 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net\x00') ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x8, 0x4, 0x1000, 0x3, 0x7f, 0x9, 0x9, 0x20, 0xffffffff, 0x5, 0x10000, 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x620}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff80000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0x5}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}], 0x4c) 20:52:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000d9010000000002", @ifru_ivalue=0x907000}) [ 822.927216] binder: 28989:28990 unknown command 1074029398 [ 822.933107] binder: 28989:28990 ioctl c0306201 200002c0 returned -22 20:52:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, 0x48) [ 823.028356] binder: BINDER_SET_CONTEXT_MGR already set 20:52:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 823.057353] binder: 29064:29065 ioctl 40046207 0 returned -16 [ 823.092728] binder: 29064:29065 ERROR: BC_REGISTER_LOOPER called without request [ 823.100463] binder: 29065 RLIMIT_NICE not set 20:52:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) ioctl$int_out(r2, 0x2, &(0x7f0000000000)) 20:52:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x80, &(0x7f0000000100)="050000001f11f477677e70") r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x2) r2 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8001, 0x210000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000640)={r3, 0x8a}, &(0x7f0000000680)=0x8) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{r4, r5/1000+30000}, {0x77359400}}, 0x0) r6 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r1, &(0x7f0000000380)=""/177, 0xfffffffffffffdca) close(r6) creat(&(0x7f0000000340)='./file0\x00', 0x0) 20:52:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000c801000000000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x48) 20:52:10 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x8400) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "a185f2b81cabcc09699cbe5b2bc137a3519074d1d874ba843b9a9aeb269885f107f9a9534a3b5b9a3fecf3583b11eec92e9bb85615c1fa1d7a10ebb9a3ffe1b24e922d6fe80d177bd6260997e665f89b41ed72243a31126f0d80d7f7ded2759e3de0d1d4e1a0d19d7a8eedef8964978458ece6770df4cd37109f3cc75ac468db3f23f445d37730e67621dd598ca3e07d375017585ff4f1cfcd717ecc71b31d9f40f1d8af"}, 0xa8) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00'], 0x11) 20:52:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000001ca000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000]}, 0x48) [ 823.361698] binder: 29087:29089 ERROR: BC_REGISTER_LOOPER called without request [ 823.369512] binder: 29089 RLIMIT_NICE not set 20:52:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) write(r2, &(0x7f0000000040)="00f600", 0x3) sendfile(r2, r2, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair(0x1b, 0x80801, 0xe06, &(0x7f0000000180)) ioctl$UFFDIO_COPY(r1, 0x405c5503, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 20:52:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x48) [ 823.831103] binder: 29064:29119 got reply transaction with no transaction stack [ 823.838685] binder: 29064:29119 transaction failed 29201/-71, size 0-0 line 2759 20:52:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40486311}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001cc00000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x48) 20:52:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000040000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 823.908141] binder: undelivered TRANSACTION_ERROR: 29201 [ 823.987625] binder: BINDER_SET_CONTEXT_MGR already set [ 824.000982] binder: 29131:29132 ioctl 40046207 0 returned -16 [ 824.017531] binder: 29131:29132 ERROR: BC_REGISTER_LOOPER called without request [ 824.025263] binder: 29132 RLIMIT_NICE not set 20:52:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'bond_slave_1\x00', 0xe810}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:10 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2400) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x4000000045) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/120, 0x78}], 0x4) 20:52:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x70]}, 0x48) 20:52:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000001000000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000001cc000002", @ifru_ivalue=0x907000}) 20:52:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x48) 20:52:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 824.236539] binder: 29150:29152 ERROR: BC_REGISTER_LOOPER called without request [ 824.244215] binder: 29152 RLIMIT_NICE not set 20:52:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="480c1dbeaf787c7884", 0x9}, {&(0x7f0000000080)="028c6a969983308978f33dbfceb60d2429af6a2993e18abf3cfaaecdbae491b83ccda7c9d94a35dd5ab2803713e9e0fda4472180de6012e81c2ebc0cdf6959afe5cfb940a1c0851f4b7259502b0142fcade6bcc9985cad7aae5bbc648c7f70a36b06882af4d81471b5620ba11212f47b35f4a8c7213d9ffb5419ab3fdd56aa92d2b8d591ada8b6791e1680789c6d8a", 0x8f}, {&(0x7f00000001c0)="a8d3940e3817a8e4f6225b4442d438a5c65cfc4e1acf0ab08ceb627ab84d4090232c820d7a09dbdbb939687ef59c25523c946ca8b6703bd3f4568cddfc9a0e5549841f569c0540454d0246bcb4b3ff9ee3aae368c2d9e1be1451fc458aec703bedf172fd2a7f41990aac718abe45d75a374ec8c39d8a8a85214fea4d1f3eb4a60a92247ba1324bff55a4ff3c6edf4912573ca540b7823c7ef4e0d6f582", 0x9d}], 0x3) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='y'], 0x1) 20:52:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}, 0x48) 20:52:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000500000002", @ifru_ivalue=0x907000}) 20:52:11 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x2000) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000050000000002", @ifru_ivalue=0x907000}) 20:52:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x48) 20:52:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40486312}], 0x0, 0x0, &(0x7f0000000080)}) [ 824.785642] binder_alloc: 29150: binder_alloc_buf, no vma [ 824.791344] binder: 29131:29132 transaction failed 29189/-3, size 0-0 line 2967 [ 824.811008] binder: undelivered TRANSACTION_ERROR: 29189 [ 824.886605] binder: BINDER_SET_CONTEXT_MGR already set [ 824.912117] binder: 29193:29194 ioctl 40046207 0 returned -16 20:52:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d036554d2c3b7814b9266b6a97e8c00c00000000000096c46e490556c027ae0a4c9cd0378d26611b19b77a242154b91e49d2608cda9ba5264fb1432c692e838d8f7f970f0eefd1ef33272cec6520a7e26958a9cda8e52f0fce96b417c331968fea1a722cc70cf7170800da428ed25fe992"], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000003f000000000002", @ifru_ivalue=0x907000}) 20:52:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x48) 20:52:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000029000000000002", @ifru_ivalue=0x907000}) 20:52:11 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x1a800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) [ 825.089573] binder: 29193:29194 ERROR: BC_REGISTER_LOOPER called without request [ 825.097262] binder: 29194 RLIMIT_NICE not set 20:52:11 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x48) 20:52:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 825.137415] binder: 29206:29208 unknown command 1297430224 [ 825.161672] binder: 29206:29208 ioctl c0306201 20000240 returned -22 20:52:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c400000013000100000000000000000100000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008001d00080000000000"], 0xc4}, 0x1}, 0x0) 20:52:12 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="000001000000"], 0x11) 20:52:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x48) 20:52:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000009000000000002", @ifru_ivalue=0x907000}) 20:52:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001a00000000000002", @ifru_ivalue=0x907000}) [ 825.533142] binder: 29236:29239 ERROR: BC_REGISTER_LOOPER called without request [ 825.541067] binder: 29239 RLIMIT_NICE not set 20:52:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x630c}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x48) 20:52:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) clock_getres(0x5, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000000a000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$TIOCCONS(r2, 0x541d) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000000)=0x68) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40181, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, 0x27d, 0x9, 0x200, 0x6, 0x9}, &(0x7f0000000240)=0x6d) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x40, 0x8, 0x5, 0x8, 0x0, 0x6, 0x7ff, r4}, 0x20) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 20:52:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000012000000000002", @ifru_ivalue=0x907000}) 20:52:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000fff000002", @ifru_ivalue=0x907000}) [ 825.677365] binder: 29193:29194 got reply transaction with no transaction stack [ 825.684925] binder: 29193:29194 transaction failed 29201/-71, size 0-0 line 2759 [ 825.707425] binder: undelivered TRANSACTION_ERROR: 29201 20:52:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x48) [ 825.743410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 825.790097] binder: BINDER_SET_CONTEXT_MGR already set [ 825.794354] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 825.803346] binder: 29267:29269 ioctl 40046207 0 returned -16 20:52:12 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000000000), &(0x7f0000000440)="f8bbf827830666cfd6dc252621de1bcc449f4a429a456167a0335c1fc947d254d422c99853dac29142a0f06f1f653a94768238107c68ba6c05eec7cb57dac87f68c252c375ef73a765d78063bcf911bff3547ff6b1afe02014e7a5b8e56d1f44cb7b108d2bc581639643cd01f28d60171b7d831b0fb32f22b0499e0d7cc829ecec416090c3e3681dd3782bb33cb57ee11c0d713b0a1d5d9ff1df") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x82) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000180)={0x7, 0xc5ba, 0x3, 0x400}) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() rt_sigaction(0x30, &(0x7f00000000c0), 0x0, 0x8, &(0x7f0000000140)) getrandom(&(0x7f0000000340)=""/198, 0xc6, 0x3) clone(0x88081100, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000080)) 20:52:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000]}, 0x48) 20:52:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}, 0x48) 20:52:12 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20}}, 0x6, 0x100}, 0x90) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x4000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000080)={@void, @val, @x25}, 0xd) [ 826.006739] binder: 29267:29269 ERROR: BC_REGISTER_LOOPER called without request [ 826.014934] binder: 29269 RLIMIT_NICE not set 20:52:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000011000000000002", @ifru_ivalue=0x907000}) 20:52:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0x48) 20:52:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000004000002", @ifru_ivalue=0x907000}) [ 826.399909] binder: 29307:29308 ERROR: BC_REGISTER_LOOPER called without request [ 826.407826] binder: 29308 RLIMIT_NICE not set 20:52:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x400c630e}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="b805000000b9df0000000f01d9c4e2e5ba4a070f30b805000000b9e49bbeb50f01d926f2f40f005f00f021856b2e6fcd64f4c4e2b93d5761660f2a3d01000000", 0x40}], 0x152, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) shmget$private(0x0, 0x4000, 0x80000000400, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000140)={0x5, 0x696a, [{0x515, 0x0, 0x8}, {0x1, 0x0, 0x7fff}, {0xff, 0x0, 0x2}, {0xe0, 0x0, 0x8}, {0x4cee, 0x0, 0x9}]}) 20:52:13 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) uname(&(0x7f0000000140)=""/115) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000340)=0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000c0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}]}]}, 0x34}, 0x1}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000540)) move_pages(0x0, 0x21c2, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) write$tun(r1, &(0x7f0000000240)={@void, @void, @ipx={0xffff, 0xd7, 0x81, 0x4, {@random=0x1, @current, 0x5133884e}, {@current, @current, 0x3ff}, "7a18378b48e1dd900c92bdf03c40fc83d4e4a11f43ab0e49ec771ec244ef9b30da7be506d6d602dd2bd5b65cb97e08ce7ddd79fa91a7211c37fb6306feb612ad0c81dbc0df6e143b8b59754af3012b00eaafc3e3fa6d4f03c9f3b5c29bc8ff13d0dfe1bfb368aa9b01a84cf319874e498037506324c6ca5ae15dab12e3d7174764e0ec98fa7b913cdbafa8aab6e96bd57ee2dcde0457794ec2d6866c35a548651c3cf97e660564826c06a2892c15e8533e70ae5de1bec64293"}}, 0xfffffe9c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="61e55b7d1158290100000000000000000000ffffffffffffff02000000000000000000000000000100000808660000002c030000000000000200010300000005021000c91000000000000000000000ffffac1414180000007f0a000000000000073000007fff0a009a00aa010000000000005f3e00000000000006000000000000000900000000000000ba0000000000000007200000000306060800070000000000000080000000000000002000000000000000000000003a02000000000000040120c910fe8000000000000000000000000000aa000000b70e030300000000fe8000000000000000000000000000aa00000000000000000000ffffac141418ff02000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001fe8000000000000000000000000000aa4e234e241030907802070001800000000202000180000000c202765a80000000c13e000181010001c201000180000000304e883e64382018fa0c63779d1da2a79ce6bd5bc51964ac435f72201772109190a77982d0e3768f19c5dc4614aefa321bc97f1312da0cc190c8707e229276c4658e823d24b621333406f4d7b6702bfbc9dee1e51aa5c1592a7427fd99400ed0135865a1233878341a291b38da806a3ff8610758d5eb933294e83e2a5fbca6ed25f503eed2ea0a0061e71ebc24b2f56246a2e4ab0e82d90a39d032cbd8c92f0bff1c2b8f017cb066d19ddee0ac60dd84542d5a42b67038bd7a265a3ffb3398774aca12a74582153b75ff6c2428a4019d5f677596abfaa1e7a35deca5bf3bf91ae2e5c947ed3e1fb2c0b121ad1ca48f1e2fa34be534afb0ae2b52ffd6e233f2c23fee826cafced6ff4b16106f6197b5bce89dce3947d3773683a28fb7ab54d237921c0b63e1e3c899985f412af911e54522d8b056d07b88598f3d4c098c5bfdae84f06982c7ed49314448f01df0ae4b727bbdfce82257105b0d2ceb2d869f39b221f3e29bd0fd4756015506daf1b8515aa8f03c7f69c777262ed06e7ba2603d757cab042a8921431a4e85e8267008d608539c4484cb3a6ff7c77b9cda0bb2e275e6010074d523ed63cbd20c68cac3367f9b1d93cbfdc0d34d3f4bbdaaaa4a63f7953dec90a05d89f3edd39681bf1d7d2b1ff3b868cb78739ce91ef289daf1239d2cf04e551590538bfa2f4365fe4b08574b0408a1a90ec40dade4d6fa47b71a942979ac3ea4af438a1c1d3e58ea31acc55d9476b2381e6cb8315947d44efe5324dc64fbf34808d064b5c4a2356335525c843c52a0d4bc7499b52311562a2dd3d92aec72496362cc495f47c2d6f625c43070d84f39b78703df040c92dc8d54607cc003fc602042700b6770a3894a2946d599de4fa7b535a98bb574751d4c024ae10222730d63e05790eb0a1682299d93593ffcbf170596e3d4e3be030bb8e7cc3c97d6da683aed6ea3febc53524a36adab54c8e61b1a967d18d7f2d0a5a8d99349d801beb60476f4ee765b83972a158a5b589d95c17c348f1edc2cfdf63e650ba32122e18a52d678d48307da173bd053693f109c5cd8ee9a8d5b2dfa1c2e2d5607737794091d597496ab8bc5825a243c6fc284bc63aedd6cbeb1765d398c82a8f68f703bbb354e59e1b79e7e6f794f9cb28b51fba7eee9f073c1a16961705c4f35424d8340def46f354ad6d02dfaba4b037c76d2a7f91311f79c5f1ea50ae9e8041ff344fe088e864ef6147bf4744210481a8e3c43349879f3adf6284fde1c61d8f2a442318b7dce42ebf79f6e2e32476dbab3784489ec39e7cd3714a3dd274b184aa87e87044ec7281cd3dcf3ba045947fa94befcc04a487bd0eae9daf283e8cf9f3664b71862ed7f6dddcdc25efa343b391580287e7b9c23bee4d726f8688b07075cc71ee3bf4edda3c4526efe156e5e3f65a7acc5c2cd405020e1e6ca1d453a6a40847180c55265606796c5df64acf225064292caf1a6b4e168356fcdbd1bd1acae155dc038d05a9148f81d5709aec7ea48d90733a8ea42ffaa2759619cedc8a3d9a710374274eba3050768ac78b39a3a4aef2c4ea3021c1a21d117e5154e747c29b476573c9e2d15dab708d6b6ae469895a57d1c7446b8a83de9c9f2c767ecac1682844c04fd2eb7502c8b843079e515454517eeff178365fd4dca9b020b72592cfddba75535992f900e0ac9a257bcf099e2360f082ecb34afaf69471a80194af6f4df3f3055afec74733403385982adefde19ecc2eea3f3e3fb1ac4a9dc375dad22e309d60b882ed56600c38bc2ca03c773ccb4c794319ca7cf0b55ca5206341acee1993466ccfca3732b1c78c99a03515c9f08fdde2a58300d3e9f72ae85f3e4bd4608bfdf1c1065005f845719736e417091914f57ac868f3e368262adcfeaccd32cddab7c6e4adac26329b5062dd83f367fffd1d0cf189e21369503802712ce540c86c33aada7dfa42c3c218410f9398c6354c3fb4fa47314448b7ead3eb6d450dbcb7656fe5627ac63198e79f23ea8bd716d3c77bfd021b29ce7d366bb339885240b5d35615a362a4884e60588e82bd4f6eeb84dd1f84d3518f4b2a677af3598ebc4955724e0afa423ac58629aa7863a2877b92403a614c3515164114c27ef216997ba04da9a9352294c0b1696ead6f2abcf42bed9c0427943280ea30c73824f781b7cefb105789a8a0fae114d9af3178f2ce1b036b6e67e65af054769d068087502f67c4c0825f26c39d4aee89a740d3cc1a4e29d00e78cf8c80f5e21cf36605451e02dfb71d8fe3c4bf1c1ed35917999eeabebcc8e2bc08d816ff0706d5db1b64552373037ae64019b42f6a52e54601ffd2c771b16dd4e71ea57f330bf0e964c9c251e8d979c906b4e3946978690db8483b6b856a97e800eff06561dcbe6b9f4b3e2271ac4d8895e149b6ea00622c5d3c70e794f832c4e0f5dd35b82b29da22b338ce563acb0560ccfa3f83f0c54b2b5600a4d0061ca7996ea13450fb0290b862c75e8db53d2a04782ca4926916c060f68ae3d6ad7e75eee2c587e6fc3e8b1990105dced6ace4d42e580ca94a555b85e8049472361b4e2e2a48fc75c448fd357bf82919caa291b819d0987f558ae82f437f099702f033fb615150b0c95bc581612cd2d107367e84f848ada62e84302151be612c9a241e353079ef7f507037312cd5477e8700157dd054a09f3c1c9fcb9b4247c8f6044ed037449c7e989eb9a69dedc498781163dd3c903cb6272309f279cf3d1a41dd6d212cefb09306359bcb92f002402306be1a9c305332f5c0266b8c683b240b8e60e1f6295c2806f5b2e4c9602bb212e27588a31e2e454bb3e01f6ef2edc89d6c0f4e28a7ce1af135d2f7e2bb608a4270e2d9325640683b76e9a79c2a434b8fd056f881be8867cbf1790126c9e1098a10230e2d531e1679b97dea0514fd7d43ba0e641f48cf779c93d407df3d76d28d305d88e3b062a6fe37eb74a10e38538b16e7b6ce6af56aee4791719ae3cca3304822d8cc22babf6e288682859d0a6ed53edab105e27964de437bb1d910a9717413dcbf20119eb92e91e939ff47e8a2dcfee6607e34db3da5cc93ffeaf307085b452b026d72231615e96275c0ec07a4a6f0d0f05e328249a98d284f107c9ef437d1b121e048fe83ec1dcf2aa651bcdb32ef1f96219b376a18c0db8ab0bfdb3e9ef1ce8a961583af0d5cf7a2c780e1dd1fe7d9942e12412a363518b9d1b0dbc7426662c431bd014673fefe1b335e30cb122a71c2d997c81d16a70634e5beabff990876484238a898d9e85eb5720e5ed93c4ef128eb630b493043ec2122d37b2838492acb5e4edcb03ce7cf2a18841d8cff24d9cc3a28015da98ef05e4c0f8bfd90b51b5fe372fd5e81aeb8880c8eca7a21b62705ae4409b6ede9421692d35be11bba02f919029bb3ca29c953c67d82ef9cc231f6f82c9752f21bc755222861a3557ea7004116a420c88debe76ef49a19f89f408c63ce32fc61eb6ad3a293bd1eeb1575c9390bd8a0dde9be79fd719929184616e1abcfc85f04235efc0fedc043db486ceffad23a7386b89c76ccf888c132edc205cf22942c4dc6f395909c2969fe83c506345ac8685d402782791edb1d94af979fa3f240178c1fba811b35ae63d1d0351e033cdabded4d02929d20d2a78df9fa6c719e60bf8e8cdd18259dc061bbb1c7943709a856fd20535b24109c1884479743632c59dde61fefb1e5790e6ffdd1fe0c127a803cd493368c788f4b1bcdf7ad9d1e7bdac95ffaafef41ed88548a44b45458bc6a73706bd3573b90409f9b1a2e1241d87a28579e31a8914d40102fea4b25a76ac3859add9078636a8bfcba3d35656b367192786a0f76cb3b97ca621b680cbf1e8da124f86de060ad02824db5d67bbba270a6e4499b979aa6f31d4ce50537033a88e6e0ed5d5e43e890ad32c1b8eb14c61fd0401aa88779d3f0d4166df03f87e238ba05b04cb471a840c05acf742338c6a471f5758f480f080302ff45d187d8a2763c354b4a60d2c800d152e17666b94a96f38eb8c7b342786f71994c748081f54d7e0c763fa4a9077ad0599555f5b68823ee8c05da350bffd7ee7ee71bd9007462ddccd42b13002644208a6fa4c7a3ea97a6e3eac82c4b248ed424444fffd5b704a4b1aea021eda0c6c4938b7dafb76405aac75c8d062aa6b888e8b5d58c612e88b71016c84a2cbeca4f3509a6755da8b87d148b2bdc77ef682cb1d59d18d86884f34120f21bf595a5c97089210650b8d56b9a670f00c3bc8e1e3c40beef8e47663ad0bdad62052d968fdf8eebfd639a8d7b02b8428f76b59bf61be9d1f9f1c8e6d86e2bf2177c03fdf96366fa540dcaeeaa957083ef582eb73be5c098ad2f1167725bb3ff8cb9a8312b5906277d47a0f17a5f84474a4ea31bec29bfd16138e3be1dac2b3f94bbcb49a26f6b5233b326218b44f01bd030c27169642e9b8a508ef0812eb3985353e71d6c9e0686cfcb509beeed87653658be8a1600cf8da7f47e9874e3e67d554d2dcc0cde1ea0c18e366683319eb6c5cfae1272866b2fa4a95fcaf2cb2aa7b116c6bf3cd0800948a8bafc7ec70fd8adc33b1eb8112305c8ffdde58d004b07a46bb2fb36145f62ab84b321e4fdf11043f98dea300e34ed79c2cb3c45d77dbe3a91045c29286a6300b8087fcdd912664eaf553dc66a1ab48358271028589320a5fa02a25623415f3d30736b6f426da2cd4313de5014db73a9728b6c03930360e48c5aa104f1bc4c445f9fb85bcbf74b8a33acb58e005e3d3ab7d087e267acd29b32ef405ebde29ae62748c40e3854a2a968bcaf60005f9aea25fbd0374b81b48d788182cc38d841d440f500f606be0ba75b56fa0ca26f8e6f62318cc13a37e8480e698fdd07773636e29b72273dbba9cfddac9f555942af32c6cbb4630971335fdd4a8e7c17dc50e63cdd4e5708a56fb3a0fea53e23ec5909cd1b98b952f222e8d4175ba927b5faa9a38784d967c87742c8ea972f7a644f38529967e3839e230de4c0528dbb8bd494edd86603925473e8e1599d34ef0de6c42f40cf9fe4a16c82fd799462c00090023c109424a3846fa895522f542bc06a3795c576bc903489a862f8dd4ee935e1d46247f7066aa20424a11a68ed55a09bda9bc5da9919796950a7ca2c850cec5b90c5454b9a9aba3c5940ced56c388fdc8cbf1e21222a3a6c1ebd56b602c6fab398a5049675a7df610cac3fbd689cc18570e5b8776ca9f64ab54f9c724302d9ecd60063bbdc55817236eb2a45b99cd8d86f1aa0b91e426d40558b174efeb0ab865258e856f963154174124eb3f29aa366a1652d5e6d1aa0f8b39ace5b3334baac145a590a8640c8387b975e3d6c78a55dff284c0c68bfe52db46094f7653e2b25dd7eb91c99724a63f2bbf742d8f8db207df4b8cb212e4a059aaf90966dc4e8469f8f1bcf869fbd4f2fbe1c31b595c5d98fd021ad947fbb38db6b808833b38e6bfeeac7aa64ada07883264d28eb83c6bfb49f9e8dce7428eca538fd439157c8a153d30b83a3ab7fb818b5e59096afc17fb3c7d56d942dcb50265bf31508bd97cd1d002a7d639fcd07af228bb6caee4aa436241108397908b3fd675d34af14e915e510ae044363e5807e62051a82a14004a4a698462389281ca5263b78f39c27cf0fa7eeaee162f516a9123a775f5e5b85bc4e291fa27b2792ba05a51aecdaec87b7a67613552b1658540a94cb0da2c31a1e55e72a34be290036d5273b34d3aeec408a9a633a1459a4fb610fea40b7dd5deca9332c160ab59a314d4a635ab549c16d5b430fd3c719c5596b807f7d1764fb156ce6fdf1c5f2b002a802c6be8842bb2e02d0ae5d4388dae467686bad8cf5a22012f811cdfec622229f4e8cc0a492ab784507f2b"], 0x1180) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) 20:52:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000000001e000002", @ifru_ivalue=0x907000}) 20:52:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3604]}, 0x48) 20:52:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001b00000000000002", @ifru_ivalue=0x907000}) [ 826.588555] binder: 29267:29269 unknown command 0 [ 826.593660] binder: 29267:29269 ioctl c0306201 200002c0 returned -22 20:52:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x48) [ 826.685225] binder: BINDER_SET_CONTEXT_MGR already set 20:52:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 826.710960] binder: 29329:29330 ioctl 40046207 0 returned -16 [ 826.748295] binder: 29329:29330 ERROR: BC_REGISTER_LOOPER called without request [ 826.756076] binder: 29330 RLIMIT_NICE not set 20:52:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x48) 20:52:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001d90000000002", @ifru_ivalue=0x907000}) 20:52:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="f20f94ff0f01cf0fc72f6436f0f79b450066b9800000c00f326635000100000f3066b91a09000066b8fdafa70566ba000000000f30650fc7a900700f01cf642e3e0f005a0fb800098ee0", 0x4a}], 0x104, 0x5e, &(0x7f0000000100), 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400002, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000001f81cb15b00"], &(0x7f00000002c0)=0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000200)=0x2) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x5, &(0x7f00000004c0)="86aa7d2d04a8de062094ea0de2229341ad295dbf581ce6cf5242fa973c44bca1f0fd63fadebe052ef672a542e085d32b47abe240e0d6da56dc7d3241c9aeb0007cf42050df6ffd16f992801fd7654d1548df718a00ed5f6f6b366d9889e3ce8dc86b976d7c7b0f204e88430eeb69091c5ed70c89a3a11a0b6b68addc32236d68ea2e94e6df3828803b3aa56387a7dfdbde174d56780738021739616f7a") openat(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0xae) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r4, 0x8912, &(0x7f0000000340)="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") r5 = socket(0x2, 0x100000001, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000002c0)={'lo\x00'}) 20:52:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000b00000002", @ifru_ivalue=0x907000}) 20:52:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:13 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={0x3, {0xff}, 0x80000002, 0x4}, 0x0, 0x8, &(0x7f0000000040)) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x48) 20:52:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000400000002", @ifru_ivalue=0x907000}) 20:52:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000290000000002", @ifru_ivalue=0x907000}) 20:52:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0) linkat(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x400) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x2, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) r4 = semget(0x0, 0x1, 0x20) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0x2, 0x6]) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @loopback={0x0, 0x1}, 0x800}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 20:52:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0xfffffdfd}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:14 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) unshare(0x20000000) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, 0x48) 20:52:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40013, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x40001) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1b4, 0x0, &(0x7f0000000300)}) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x101000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000001900)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001940)={r4, @rand_addr, @broadcast=0xffffffff}, 0xc) r5 = dup2(r2, r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000040)={0x0}) prctl$setendian(0x14, 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="076304400800000009631040", @ANYRES64=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000080)}) [ 827.475990] binder: 29329:29330 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 827.524280] binder: 29389:29390 unknown command 0 20:52:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000146, 0x3, 0x0, 0x3]}) 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff]}, 0x48) [ 827.559232] binder: BINDER_SET_CONTEXT_MGR already set [ 827.561175] binder: 29389:29390 ioctl c0306201 20000240 returned -22 [ 827.589391] binder: 29396:29399 ioctl 40046207 0 returned -16 [ 827.611969] binder: 29396:29399 ERROR: BC_REGISTER_LOOPER called without request [ 827.619683] binder: 29399 RLIMIT_NICE not set [ 827.639186] binder: BINDER_SET_CONTEXT_MGR already set 20:52:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800003e7000000000002", @ifru_ivalue=0x907000}) 20:52:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000d2010000000002", @ifru_ivalue=0x907000}) [ 827.664230] binder: 29389:29390 ioctl 40046207 0 returned -16 [ 827.702614] binder: 29389:29406 unknown command 0 20:52:14 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000000780)={0x0, &(0x7f0000000180)}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x15, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x78, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0xffffffff, @loopback={0x0, 0x1}, 0x6d3a5247}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000007c0)={r1, 0x1000, "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"}, &(0x7f0000000180)=0x1008) seccomp(0x1, 0x0, &(0x7f0000000080)) eventfd2(0x2, 0x1) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000001c0)={"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"}) 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x70000000]}, 0x48) [ 827.725764] binder: 29389:29406 ioctl c0306201 20000240 returned -22 20:52:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x8000) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x6a}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x400000b0]}) 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, 0x48) 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x48) [ 827.892104] binder: 29432:29434 ERROR: BC_REGISTER_LOOPER called without request [ 827.900499] binder: 29434 RLIMIT_NICE not set 20:52:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000]}, 0x48) 20:52:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x48) 20:52:15 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x38de0cee97bbfd21}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) 20:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000009", @ifru_ivalue=0x907000}) 20:52:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000e0010000000002", @ifru_ivalue=0x907000}) 20:52:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x4800000000000000}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f0000000200)=[{r2, 0x100}, {r2}, {r2, 0x9500}, {r1, 0x1000}, {r0, 0x41d0}], 0x30b, &(0x7f00000001c0), &(0x7f0000000180), 0xffffffffffffffd8) read(r2, &(0x7f00000000c0)=""/72, 0x0) [ 828.352615] binder: 29396:29399 IncRefs 0 refcount change on invalid ref -515 ret -22 [ 828.443000] binder: BINDER_SET_CONTEXT_MGR already set 20:52:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x48) 20:52:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x94, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x1f, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in6={0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x1d01c413}, @in6={0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0x1b}, 0x80000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e23}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x7) 20:52:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e101000000000002", @ifru_ivalue=0x907000}) [ 828.465339] binder: 29465:29466 ioctl 40046207 0 returned -16 [ 828.488610] binder: 29465:29466 ERROR: BC_REGISTER_LOOPER called without request [ 828.496490] binder: 29466 RLIMIT_NICE not set 20:52:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1bb2416f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0xfc91) getsockname(r2, &(0x7f00000004c0)=@can={0x0, 0x0}, &(0x7f0000000540)=0x80) connect$packet(r4, &(0x7f0000000580)={0x11, 0xf5, r5, 0x1, 0x8, 0x6}, 0x14) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000045000000000002", @ifru_ivalue=0x907000}) 20:52:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000532000)=0x19) r2 = shmget(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x1f, r3, r4, r5, r6, 0x80}, 0x400, 0x7, 0xe8dc, 0x2, r7, r8, 0x4}) ioctl$TCFLSH(r1, 0x40085500, 0x0) 20:52:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3604000000000000]}, 0x48) 20:52:15 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="31b881000000bc92e17d035d0000000c00"], 0x11) 20:52:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 828.754673] binder: 29432:29486 ERROR: BC_REGISTER_LOOPER called without request [ 828.762451] binder: 29486 RLIMIT_NICE not set 20:52:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x48) 20:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001db00000002", @ifru_ivalue=0x907000}) [ 828.841116] binder: 29497:29498 ERROR: BC_REGISTER_LOOPER called without request [ 828.848824] binder: 29498 RLIMIT_NICE not set 20:52:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r2, r0, 0x0, 0x29ac) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:52:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0xa00000000000000}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0xa, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:15 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, 0x48) 20:52:15 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000100)={{0x2, 0x5}, 'port0\x00', 0x28, 0x1000, 0x9, 0x8000, 0x2, 0x5, 0x6, 0x0, 0x2, 0x6}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20e56d66f30000000800"], 0x20}, 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@deltclass={0x38, 0x29, 0x524, 0x70bd25, 0x25dfdbfb, {0x0, r2, {0x6, 0x6}, {0xffe0, 0xb}, {0xffff, 0xc}}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x800}}}]}, 0x38}, 0x1}, 0x0) 20:52:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000015000000000002", @ifru_ivalue=0x907000}) 20:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001df00000002", @ifru_ivalue=0x907000}) [ 829.313274] binder: BINDER_SET_CONTEXT_MGR already set [ 829.333442] binder: 29533:29536 ioctl 40046207 0 returned -16 [ 829.356808] binder: 29533:29536 ERROR: BC_REGISTER_LOOPER called without request [ 829.364508] binder: 29536 RLIMIT_NICE not set 20:52:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}, 0x48) 20:52:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0xc, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0xfffffffffffffffc) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x16f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 20:52:16 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0061c7e70fe0fcb8bba8988a00000c00000000000000000000000000"], 0x11) 20:52:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001de0000000002", @ifru_ivalue=0x907000}) 20:52:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001d2000000000002", @ifru_ivalue=0x907000}) [ 829.660120] binder: 29497:29498 ERROR: BC_REGISTER_LOOPER called without request [ 829.667792] binder: 29498 RLIMIT_NICE not set 20:52:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x11, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x48) [ 829.758661] binder: 29561:29562 ERROR: BC_REGISTER_LOOPER called without request [ 829.766387] binder: 29562 RLIMIT_NICE not set 20:52:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x7000000}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffff}, 0x13f, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x3c69}, r2}}, 0x30) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = epoll_create(0x80000000000009) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x90000001}) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:52:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd0]}, 0x48) 20:52:16 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"6966623000faffffffffffffff00", 0x400000001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x82, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000017000000000002", @ifru_ivalue=0x907000}) 20:52:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080001600000000000002", @ifru_ivalue=0x907000}) [ 830.162210] binder: BINDER_SET_CONTEXT_MGR already set [ 830.179082] binder: 29583:29584 ioctl 40046207 0 returned -16 [ 830.206948] binder: 29583:29584 ERROR: BC_REGISTER_LOOPER called without request [ 830.214628] binder: 29584 RLIMIT_NICE not set 20:52:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$setstatus(r0, 0x4, 0x46c6c8c646b92078) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}, 0x48) 20:52:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000100)=@can={0x0, 0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1, &(0x7f0000000200)=""/205, 0xcd, 0x7fff}, 0x40000000) connect$can_bcm(r0, &(0x7f0000000340)={0x1d, r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='os2.posix_acl_accesr\x00'], &(0x7f00000000c0)='trusted%+-\x00', 0xb, 0x2) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) 20:52:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000e601000000000002", @ifru_ivalue=0x907000}) 20:52:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000fffffff0000002", @ifru_ivalue=0x907000}) 20:52:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x400200, 0x180) wait4(r1, &(0x7f00000003c0), 0x80000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000240)) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000380)={0xa, &(0x7f00000001c0)=[{0xfff, 0x3}, {0x2, 0x3}, {0x2, 0x897}, {0x0, 0x7}, {0x0, 0x81}, {0x400, 0x4}, {0x8, 0x2}, {0x5, 0x9}, {0x5, 0x8001}, {0x0, 0x2}]}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r5 = semget(0x3, 0x2, 0x81) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f0000001880)="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") semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f0000000100)=""/14) write$tun(r3, &(0x7f0000001840)=ANY=[], 0x0) 20:52:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() recvmmsg(r0, &(0x7f0000003c00)=[{{&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/49, 0x31}}, {{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000003b80)=""/106, 0x6a}}], 0x2, 0x0, &(0x7f0000003d00)={0x77359400}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000001680)='p', 0x1}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x55, 0x2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000002800)="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") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001780)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x1008) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000012c0)={r5, 0x8}, 0x8) tkill(r1, 0x1004000000016) recvfrom$inet(r4, &(0x7f0000001340)=""/155, 0x9b, 0x20, &(0x7f0000001400)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xa3, "8736cc50429a221cac32272330007abf1ca82662c6dd27f4aadd9b8e144db71772830f7a8a0a7a5a25ae2b9de204c47c076d8bde2f04dfc2505952d53aedd1b98f2e902e1e8332e0eb28af434ebf685046adbc5d8dccf11d6b41ae743fa0604902d8a366ca463d7385226244b35d2df20e04da460770706957b18aee7f047601b74d7a8610705f0da380be21eda2e9bf952de45c4e8164071853c1ea2fc3836cb22db1"}, &(0x7f0000000000)=0xab) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000001300)={0x3, 0x7ff, 0x9, 0x103}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x79f}, 0x8) 20:52:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 830.634716] binder: 29620:29622 ERROR: BC_REGISTER_LOOPER called without request [ 830.642517] binder: 29622 RLIMIT_NICE not set 20:52:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x74000000}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x48) 20:52:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000140000000002", @ifru_ivalue=0x907000}) 20:52:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001c800000002", @ifru_ivalue=0x907000}) 20:52:17 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) getrusage(0x1, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl(r0, 0x573, &(0x7f0000000240)="418a15018ef88c36121a007ece7d4ee97d207b0f75465593d66b20ff87f512dcbf53e35b412c7814c85f7a9f5d3fc5c330b9078924c681374be58adcba902b40471082dc2fea79003c00aa6f39dfefbcb38e112b62e21dfbf92edeec43ca7e76f6a05217477f9ff7b743111119b6e87308a9a9051230b5a4ec2420901b0eab544508affb83b06a0d8574c75aaaa145660d253a47011dfd027b59c3193721ac2ae2d9a00a616c616d6a4ac4b6d9493b864b6de144a46faa000ae15c77f1b268d859b08c170db7542cb487426c9db3858bb2aab1a470e8c4cf304722cf42a68fe7b61fc0b7908d0cc581f603b88d27a584dbd995336f50") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x11) 20:52:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 830.950136] binder: 29583:29584 IncRefs 0 refcount change on invalid ref 117440512 ret -22 [ 831.018276] binder: BINDER_SET_CONTEXT_MGR already set 20:52:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 831.041855] binder: 29645:29649 ioctl 40046207 0 returned -16 [ 831.067388] binder: 29645:29649 ERROR: BC_REGISTER_LOOPER called without request [ 831.075077] binder: 29649 RLIMIT_NICE not set 20:52:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}, 0x1000}}, 0x880, 0x4, 0xfffffffffffffffb, 0x4, 0x40}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={r4, 0x9, 0x5, 0xffffffffffffff00, 0x200, 0x3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='/dev/binder#\x00', r3}, 0x10) 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000]}, 0x48) 20:52:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000001e10000000002", @ifru_ivalue=0x907000}) 20:52:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000001d300000002", @ifru_ivalue=0x907000}) 20:52:18 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000c00000000000000000000000000b81d6c0ddee7171b40f9aa9f5e2869840b159e845c9c3fee1f8f48925ff2a1487d49ed704d213ea3f59f12ca6f1e39294cdd6b4916143a2b30e1ed4bea8218f15d86a39bf2fe43b98b76510c6882802d26fcc669f7c60183cbecb2e308ccd70e6c"], 0x11) 20:52:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 831.494899] binder: 29671:29672 unknown command 0 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x48) [ 831.523460] binder: 29671:29672 ioctl c0306201 20000240 returned -22 [ 831.816711] binder: 29645:29649 IncRefs 0 refcount change on invalid ref 1946157056 ret -22 20:52:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0xf503}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0xffffffffffffffff, 0x70bd29, 0x0, {0xd}}, 0xffffff9d}, 0x1}, 0x0) 20:52:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800001c7000000000002", @ifru_ivalue=0x907000}) 20:52:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'tunl0\x00'}}, 0x1e) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffeb, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xffffffffffffff2a, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140)={0x7, 0xfffffffffffffffd, 0x81, 0x8, 0xffffffffffffffff, 0x401, 0xe1b, 0x7, 0x8, 0x8, 0x7ff}, 0xb) fsetxattr(r3, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x1) 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x48) 20:52:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000009000002", @ifru_ivalue=0x907000}) 20:52:18 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x9, 0x8, 0x9, 0xdafd, 0x5, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x4}}, 0x3, 0x3, 0x9, 0xfff, 0x4be2}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}}}, 0xfffffffffffff013, 0x9, 0xfff, 0x3}, &(0x7f00000001c0)=0x98) r3 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa204}) write$tun(r3, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x0, 0x30}, 0xc) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x100000000, 0x100000001, 0x82}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, r4, 0x4, 0x70bd29, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 20:52:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x7400000000000000}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000]}, 0x48) [ 831.959504] binder: 29703:29704 ERROR: BC_REGISTER_LOOPER called without request [ 831.967333] binder: 29703:29704 unknown command 2022514344 [ 832.001625] binder: BINDER_SET_CONTEXT_MGR already set 20:52:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:18 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80080, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x4) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000c1da8ba9042ed4231ae9d8e07aa17e735f6f0000000000000000000000b15f7332fdfaad5299e5eb0600359412c664513a0a299b27a01e97fcbca253e328b5822fb0dfa0ab1ce57c7c11bbb2f8874c05ce3dc0daca6396b67b24bb0207b5e3cb07000000000000001760728209163176e9806619ab9a754f7f2b5348f33b7713ed2567d8ef3b7867367e4b2d7a6326e04fc038c7e985ec9531336e88f2"], 0x11) 20:52:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000000000080", @ifru_ivalue=0x907000}) 20:52:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCGETS(r1, 0x541b, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc1, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000080)) [ 832.024894] binder: 29711:29714 ioctl 40046207 0 returned -16 [ 832.057319] binder: 29711:29714 ERROR: BC_REGISTER_LOOPER called without request [ 832.065442] binder: 29714 RLIMIT_NICE not set [ 832.083155] binder: 29703:29704 ioctl c0306201 20000080 returned -22 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x48) 20:52:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:18 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7e0, 0x4c0000) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x3f, 0x1, 0xfffffffffffffffd, 0x1000, 0x9}, 0xc) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000080)=r0, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000005400)='/dev/dsp#\x00', 0x9, 0x10200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000005440)=0xff, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xa}}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x7}, 0x8) ioctl$TIOCCBRK(r1, 0x5428) 20:52:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x22) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) 20:52:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"7369743000008000000fff0000000002", @ifru_ivalue=0x907000}) 20:52:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}, 0x48) 20:52:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800000000001e1000002", @ifru_ivalue=0x907000}) 20:52:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0x1}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65ab2f90d229db692542e5b78f8b29e0a27800f0104000000000000fb42f376589701a4", 0x0, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) inotify_init1(0x800) ioctl$TIOCSBRK(r1, 0x5427) 20:52:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x48) [ 832.357064] QAT: Invalid ioctl [ 832.367425] QAT: Invalid ioctl 20:52:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200000000010400, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0xff) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x3e3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x121800, 0x0) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000000), 0xfffffffffffffffd}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x1f4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0xffffffffffffffff, 0x40000000000, 0x0, 0x1, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1932, 0x381000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000340)={0x1, r5}) r6 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2, 0x0, 0x0, 0xff}) r7 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f0000000140), 0x20000000000000d3, 0xfff) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x4100, 0x0) unshare(0x400) getsockname(r8, &(0x7f0000000640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000000)=0xffffff81) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x100, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000380)=0x2) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000003c0)={r10, 0x1f, 0x8, 0x4, 0x8, 0x1, 0x5d45, 0x9, {r11, @in6={{0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}, 0xffffffffffffffff, 0x5, 0xbdf, 0x80, 0x9db}}, &(0x7f0000000480)=0xb0) r12 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x40000, 0x0) ioctl$sock_ifreq(r9, 0x8994, &(0x7f00000004c0)={'bond_slave_0\x00', @ifru_settings={0x3, 0x7, @cisco=&(0x7f00000008c0)={0x0, 0x10001}}}) ioctl$PIO_UNIMAPCLR(r8, 0x40247007, &(0x7f0000000a40)={0x20000000, 0x3, 0x1}) mq_timedsend(r6, &(0x7f0000000840), 0x0, 0x8, &(0x7f0000000100)={0x0, 0x989680}) sendto$inet(r8, &(0x7f0000000500)="80968edea45613ff2fe4d22b69ff608dc4fcc4942a64d38497841986519ca984eaec35afb7e04b951a56cdc66601c548172282df58fcf869a3441f59d2e056f697e331dad62f2fd0f38c094530fd2ec2bc49961bc8f79f8dade4d22b56244f3bd50b7ff7b71b7b7ebc90ac48827f057f1bdf77ae958915901e5c24250409036446574795db678cb11919bdbcd70f8571cfbb137aadce1089f68d10f7abdfe190785c0fd83fb6e847a3198c9b53a66261a341959b586c69438af8c4f6cf3b907a4edd74b7eb06bd84da2aa1ffcb309aab58d70f1eefce4ddeabbf99893ac5da2eda707b4f", 0xe4, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000280)=r8) mq_timedreceive(r12, &(0x7f00000007c0)=""/131, 0x10c, 0x20200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f0000000700)={0x9, 0x7fffffff, 0x3, 'queue0\x00', 0xdea}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000001c0)={'team0\x00', r4}) [ 832.582660] binder: 29746:29748 ERROR: BC_REGISTER_LOOPER called without request [ 832.590379] binder: 29748 RLIMIT_NICE not set 20:52:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x5}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x48) 20:52:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000001c0)={0x3, 0x0, 0x9d7a}) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x8001, 0x400, 0xc63a, 0x3}, {0x5, 0x80000001, 0x4, 0x200}, {0x8, 0x1ff, 0x6, 0x101}, {0x80, 0x0, 0x2, 0x200}, {0x9, 0x81, 0x0, 0xfb}, {0x4, 0x6, 0x30, 0x9}, {0x3, 0x200, 0x1, 0x2}, {0x401, 0x1, 0x97, 0x5}]}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r4, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs(r2, &(0x7f0000000040)='auxv\x00') r5 = getpid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r2, 0x16) exit(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x6000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup2(r1, r3) 20:52:19 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000c00000000008846000000000000"], 0x11) 20:52:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800000000001e0000002", @ifru_ivalue=0x907000}) 20:52:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000012000000000002", @ifru_ivalue=0x907000}) [ 832.795223] binder: 29711:29714 IncRefs 0 refcount change on invalid ref 0 ret -22 20:52:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x48) 20:52:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 832.884768] binder: 29792:29793 ERROR: BC_REGISTER_LOOPER called without request [ 832.892621] binder: 29793 RLIMIT_NICE not set 20:52:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x4ab) r3 = getuid() ioprio_set$uid(0x3, r3, 0x20) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r4 = accept$inet(r1, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1000000000000004}, &(0x7f0000000100)=0xffffffffffffff6b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0xfffffffffffffffb, 0x5, 0xfffffffffffffff8, 0x1f, 0x7}, &(0x7f0000000200)=0x98) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xffffffffffffffb1, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f0000000340)}) r6 = dup2(r1, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40000) 20:52:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000000003f000002", @ifru_ivalue=0x907000}) 20:52:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd0ffffff00000000]}, 0x48) 20:52:19 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x1114, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0x400000000a201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x48) [ 833.186454] binder: BINDER_SET_CONTEXT_MGR already set 20:52:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000cd010000000002", @ifru_ivalue=0x907000}) [ 833.226965] binder: 29810:29811 ioctl 40046207 0 returned -16 [ 833.268719] binder: 29810:29811 ERROR: BC_REGISTER_LOOPER called without request [ 833.276486] binder: 29811 RLIMIT_NICE not set 20:52:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000007000002", @ifru_ivalue=0x907000}) 20:52:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ffffff00000000]}, 0x48) [ 833.682635] binder: 29792:29793 IncRefs 0 refcount change on invalid ref 5 ret -22 20:52:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x1e, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0xa, 0x1}], 0x1) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x100) 20:52:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"736974300000800000000001d3000002", @ifru_ivalue=0x907000}) 20:52:20 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000003a40)={0x20000, 0x0, [0x2, 0x4, 0x100, 0x2, 0xe609, 0x9, 0x44, 0x7]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x34a8, 0x0, 0xf, 0x8, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x6}, [@nested={0x2208, 0x48, [@generic="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", @generic="9a5dd695100439dd8cc1a871a993", @generic="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", @typed={0x4, 0x72}, @generic="c9bb380501a7a2498e2b49b7dab4ebe00d0f40a355ecbfeb6728a445caf19a6acc3b9805aa8ba556ba960252c539771dcc7c4dd6c37aa5b8593109c770648089def2d884513aa434b14bef1a98d281282a17ddb3c6c7e22196c4f4fa3e5b186257222649765b73efc96bb60377e6f71563fc4cd8ab0563ded07be1df45c641bd0a7976d1000d3504ef3e2cbabb30de66ba972b2472e138cc2b3e2df86daf4745b87fcc3d1736c7c3dc598ef1feb59b6dec9d9ffb078e2e4ea162fde7", @generic="aa880bd85425d17075b5204ae6306918a441783e3519ae6f9f6950267f9ffeba665d21d0e9caac8430707db518076df8154d38cc223ca033377fa490ea58aa5015fb40208c29d4deff42f5393273907a21149ab7ed37352232ba1129920e9eef33bc21c4cb3b9dc95b7e2a8d44ff45df207f1eedb5ba49c8edbfae5559523fdcf3d7c4c272e4fa549c14c8728c8891b9b973ba175969b80a96c0b820d33a252aac7ffe88d4bf02d9f8654ff2dbe83c486a451e34188f07e6cf3fb3b0a010a91910b71705bdf01b858778", @generic="08a73dd2ff59dbd135e96bb150351810bba377e8e92ea8bdcc3a5bd7a3220955c5a8bcd860b5ff004d9c89158b515b98d7b8b73085df64f231aa5dd0b72b41", @generic="67b321cf152e2b5a043def26f33f8a5626e1401b0b0c4c92c5c5894c6fdf94957825b7629f80a60795868d"]}, @nested={0x4, 0x7}, @generic="0e2462e0e334275c920bf30c4c6cfe1727f6425c668e8c6179b3f6a5e8c1f8c2e2b95c02c643b692b654f14cd8018bf9a2564ae785fad6a70292f2c729419383d1a979f085a542d717ecdbfa8e9d6d940586e52c47dd906f08214e8274acbf18000b", @nested={0xa8, 0x57, [@generic="dec17eed41210994bccc82a614a5dd23dfa4355ea065420676da87c6e68c04edc83795d4dfb8821929a488301cc4d8de2d0cda1e1dfc404fb1e23dcba100c6e16f85af5bf19c981c48b1de0b14fb87ff765bc08c52804155d27fcfce1b2dd2b810f895882e4b990a86201de9722c97a1163c605ef37c1be0ae6f69bde0796b3f7dee855ef103b645dd8edbda31a483a0b7b76ecb72e01b6d21492f4cfe5c4d21e9f0"]}, @nested={0x15c, 0x8a, [@typed={0x8, 0x85, @uid=r3}, @generic="ba4f6ea8eb56a62786bb643b13de14fba73f00f664d02404e1f89516909b816802d73bae2a9668e3862722800f03ff8342621d2b9af74e223dbdaaeb9d7e9a7859c15a818cdd7b8ad96c6cae4e9402aca226329293dd286d221d4ebb9b59b5b67b9eaa4f77d2c38c31e9a72a0ea1bb5d41", @generic="3147e61670ded51d148ad60dea4a9f889ba0715fa8c0418e730484f94851322fa08e7e4190cb0631e2657b99df86323290a82c7d1c018005d9132e5eefe8cc0869d7ffa712af29952b9c52e651a70e21290cb7495c02130d0c0b854ab43be6a484ed53408356c33bb445da0060d2dec03f52944e0d2b2f843bf761bb0fd74b2d54ec7decd65b1e70efff14f0749853293343a43718e212c1cc57eb099772b20e29925e3cae143787cea7bd26ba5565e25872f586e5c52dbd7222a674754f4439c6528dab3fecb6afe189b7f6282b2416ee7db0aa240400607e53d28b"]}, @typed={0x8, 0x29, @uid=r4}, @typed={0x8, 0x45, @uid=r5}, @typed={0xc, 0x55, @u64=0x7}, @nested={0x1004, 0x0, [@generic="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"]}]}, 0x34a8}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xc}, @val, @x25}, 0x11) 20:52:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x7a}], 0x0, 0x0, &(0x7f0000000080)}) 20:52:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x48) 20:52:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"73697430000080000000000015000002", @ifru_ivalue=0x907000}) [ 833.868113] binder: 29846:29847 ERROR: BC_REGISTER_LOOPER called without request [ 833.875932] binder: 29847 RLIMIT_NICE not set [ 834.083284] binder: BINDER_SET_CONTEXT_MGR already set [ 834.089606] binder: 29810:29864 ioctl 40046207 0 returned -16 [ 834.118838] binder: 29810:29868 ERROR: BC_REGISTER_LOOPER called without request [ 834.126479] binder: 29868 RLIMIT_NICE not set 20:52:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='/dev/binder#\x00', 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x2b38f3b9) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000300)=""/145) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x630b}], 0x1b4, 0x0, &(0x7f0000000300)}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)}) r5 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)}) getsockname$inet6(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) 20:52:20 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x48) 20:52:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x1000000000000192) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000080)={0x5}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) r4 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffff8}, 0x9}, r5}}, 0x30) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:52:20 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/102, 0x66}, &(0x7f0000000180), 0x20}, 0x20) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xc}, @val, @x25}, 0x11) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) inotify_rm_watch(r0, r2) 20:52:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"736974300000800000000001cc000002", @ifru_ivalue=0x907000}) 20:52:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000012000002", @ifru_ivalue=0x907000}) 20:52:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}, 0x48) [ 834.331884] binder: BINDER_SET_CONTEXT_MGR already set 20:52:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xfdc2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60}, {&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/62}], 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 20:52:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={"73697430000080000000000003000002", @ifru_ivalue=0x907000}) [ 834.364076] binder: 29885:29887 ioctl 40046207 0 returned -16 [ 834.398328] binder: 29885:29887 ERROR: BC_REGISTER_LOOPER called without request [ 834.406051] binder: 29887 RLIMIT_NICE not set 20:52:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="366536f26f660f22c066b871e5ee230f23c80f21f86635040030000f23f80f38f0b7cedb66b9ab0a000066b80300000066ba000000000f300f01cf66b8b4c800000f23d00f21f866353000000f0f23f8ba410066ed66b9be09000066b80000000066ba008000000f30f30f001e0000", 0x6f}], 0x1, 0x24, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x7f, @mcast1={0xff, 0x1, [], 0x1}, 0x61}, @in6={0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, @in6={0xa, 0x4e24, 0x8000, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}], 0x74) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x101, 0x0, 0x9, 0x0, 0x1, 0xffffffff, 0x80000001, 0xffffffffffff0001, 0xf4, 0xac, 0x2cfd589e, 0x0, 0x0, 0x8d1, 0x4, 0x8, 0xc4c5, 0x0, 0x3}) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x3) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4000, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000080)="0502313a9abb4511e67f1bd22e2a4b1102338413be42252cf4e10a131929b82abb2ac6c5aaa4d07e62353d8264df116629af313f10ea48998695d87feee41230945088b58e423ab45c7b0e0dc3c8fa98f55c6604808866e3a6ba35a4a41c5baa31a20a7a72eac73b26348854b879d599") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:52:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x0, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x48) 20:52:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x404000008912, &(0x7f0000000100)="295ee10800000077671070") ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={"7369743000008000000fff0000000002", @ifru_ivalue=0x907000}) SeaBIOS (version 1.8.2-20171130_102032-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2290: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in extract_kernel input_data: 0x000000000831d2e9 input_len: 0x00000000031c3e1e output: 0x0000000001000000 output_len: 0x00000000092449b0 kernel_total_size: 0x000000000a504000 trampoline_32bit: 0x000000000009d000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Linux version 4.18.0-rc3+ (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC)) #131 SMP Thu Jul 5 16:48:05 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 nopcid [ 0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] Malformed early option 'vsyscall' [ 0.000000] nopcid: PCID feature disabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 0.000000] Hypervisor detected: KVM [ 0.000000] last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.000000] last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2310-0x000f231f] mapped at [(____ptrval____)] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F22D0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] SRAT: PXM 0 -> APIC 0x00 -> Node 0 [ 0.000000] SRAT: PXM 0 -> APIC 0x01 -> Node 0 [ 0.000000] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] [ 0.000000] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0xbfffffff] [ 0.000000] ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x21fffffff] [ 0.000000] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0xbfffffff] -> [mem 0x00000000-0xbfffffff] [ 0.000000] NUMA: Node 0 [mem 0x00000000-0xbfffffff] + [mem 0x100000000-0x21fffffff] -> [mem 0x00000000-0x21fffffff] [ 0.000000] NODE_DATA(0) allocated [mem 0x21fffa000-0x21fffdfff] [ 0.000000] kvm-clock: cpu 0, msr 2:1fff8001, primary cpu clock [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: using sched offset of 5466669609 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] Reserved but unavailable: 111 pages [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns [ 0.000000] random: get_random_bytes called from start_kernel+0x112/0x949 with crng_init=0 [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] percpu: Embedded 56 pages/cpu @(____ptrval____) s188488 r8192 d32696 u1048576 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 1935228 [ 0.000000] Policy zone: Normal [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 nopcid [ 0.000000] Memory: 6499788K/7863876K available (110620K kernel code, 12324K rwdata, 16056K rodata, 3968K init, 23144K bss, 1364088K reserved, 0K cma-reserved) [ 0.001000] Running RCU self tests [ 0.001000] Hierarchical RCU implementation. [ 0.001000] RCU lockdep checking is enabled. [ 0.001000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.001000] RCU callback double-/use-after-free debug enabled. [ 0.001000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 [ 0.001000] NR_IRQS: 4352, nr_irqs: 440, preallocated irqs: 16 [ 0.001000] Console: colour VGA+ 80x25 [ 0.001000] console [ttyS0] enabled [ 0.001000] console [ttyS0] enabled [ 0.001000] bootconsole [earlyser0] disabled [ 0.001000] bootconsole [earlyser0] disabled [ 0.001000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.001000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.001000] ... MAX_LOCK_DEPTH: 48 [ 0.001000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.001000] ... CLASSHASH_SIZE: 4096 [ 0.001000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.001000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.001000] ... CHAINHASH_SIZE: 32768 [ 0.001000] memory used by lock dependency info: 7391 kB [ 0.001000] per task-struct memory footprint: 1920 bytes [ 0.001000] ACPI: Core revision 20180531 [ 0.001000] APIC: Switch to symmetric I/O mode setup [ 0.001347] x2apic enabled [ 0.003010] Switched APIC routing to physical x2apic. [ 0.006834] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 0.007000] tsc: Detected 2300.000 MHz processor [ 0.007038] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns [ 0.008027] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=2300000) [ 0.009009] pid_max: default: 32768 minimum: 301 [ 0.010597] Security Framework initialized [ 0.011013] Yama: becoming mindful. [ 0.011581] SELinux: Initializing. [ 0.012340] AppArmor: AppArmor disabled by boot time parameter [ 0.018444] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.022058] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.023158] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.024719] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.026752] CPU: Physical Processor ID: 0 [ 0.027058] mce: CPU supports 32 MCE banks [ 0.028162] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 0.029010] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 0.030027] Spectre V2 : Mitigation: Full generic retpoline [ 0.031010] Speculative Store Bypass: Vulnerable [ 0.032735] Freeing SMP alternatives memory: 64K [ 0.036000] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 0.037246] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 0.038226] Hierarchical SRCU implementation. [ 0.040057] NMI watchdog: Perf event create on CPU 0 failed with -2 [ 0.040914] NMI watchdog: Perf NMI watchdog permanently disabled [ 0.042214] smp: Bringing up secondary CPUs ... [ 0.044495] x86: Booting SMP configuration: [ 0.045012] .... node #0, CPUs: #1 [ 0.001000] kvm-clock: cpu 1, msr 2:1fff8041, secondary cpu clock [ 0.048534] smp: Brought up 1 node, 2 CPUs [ 0.049038] smpboot: Max logical packages: 1 [ 0.050012] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 0.053378] devtmpfs: initialized [ 0.064844] kworker/u4:0 (24) used greatest stack depth: 23840 bytes left [ 0.067126] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns [ 0.069112] futex hash table entries: 512 (order: 4, 65536 bytes) [ 0.070697] xor: automatically using best checksumming function avx [ 0.072404] RTC time: 20:52:29, date: 07/05/18 [ 0.081116] NET: Registered protocol family 16 [ 0.084335] audit: initializing netlink subsys (disabled) [ 0.086153] audit: type=2000 audit(1530823948.947:1): state=initialized audit_enabled=0 res=1 [ 0.090788] cpuidle: using governor menu [ 0.093099] ACPI: bus type PCI registered [ 0.095160] PCI: Using configuration type 1 for base access [ 0.104720] kworker/u4:1 (51) used greatest stack depth: 22816 bytes left [ 0.145135] kworker/u4:0 (207) used greatest stack depth: 21704 bytes left [ 0.371491] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 0.374199] cryptd: max_cpu_qlen set to 1000 [ 0.393030] raid6: sse2x1 gen() 1730 MB/s [ 0.410013] raid6: sse2x1 xor() 1005 MB/s [ 0.427028] raid6: sse2x2 gen() 3089 MB/s [ 0.444021] raid6: sse2x2 xor() 1945 MB/s [ 0.461015] raid6: sse2x4 gen() 6078 MB/s [ 0.478013] raid6: sse2x4 xor() 3179 MB/s [ 0.495023] raid6: avx2x1 gen() 3906 MB/s [ 0.512076] raid6: avx2x1 xor() 2058 MB/s [ 0.529016] raid6: avx2x2 gen() 7390 MB/s [ 0.546012] raid6: avx2x2 xor() 3751 MB/s [ 0.563011] raid6: avx2x4 gen() 11675 MB/s [ 0.580013] raid6: avx2x4 xor() 6091 MB/s [ 0.580744] raid6: using algorithm avx2x4 gen() 11675 MB/s [ 0.581010] raid6: .... xor() 6091 MB/s, rmw enabled [ 0.582011] raid6: using avx2x2 recovery algorithm [ 0.583855] ACPI: Added _OSI(Module Device) [ 0.584028] ACPI: Added _OSI(Processor Device) [ 0.585012] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.586011] ACPI: Added _OSI(Processor Aggregator Device) [ 0.586818] ACPI: Added _OSI(Linux-Dell-Video) [ 0.778035] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.275840] ACPI: Interpreter enabled [ 1.276224] ACPI: (supports S0 S3 S4 S5) [ 1.277012] ACPI: Using IOAPIC for interrupt routing [ 1.278222] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.281646] ACPI: Enabled 16 GPEs in block 00 to 0F [ 1.891299] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.892043] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 1.893147] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 1.894172] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 1.898815] PCI host bridge to bus 0000:00 [ 1.899028] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.900020] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.901020] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.902019] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 1.903022] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.941199] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 2.002088] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.005862] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.009592] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.013218] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.016487] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.380416] vgaarb: loaded [ 2.382695] SCSI subsystem initialized [ 2.384836] ACPI: bus type USB registered [ 2.386313] usbcore: registered new interface driver usbfs [ 2.387225] usbcore: registered new interface driver hub [ 2.388224] usbcore: registered new device driver usb [ 2.390276] pps_core: LinuxPPS API ver. 1 registered [ 2.391017] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 2.392085] PTP clock support registered [ 2.394261] EDAC MC: Ver: 3.0.0 [ 2.399250] Advanced Linux Sound Architecture Driver Initialized. [ 2.400359] PCI: Using ACPI for IRQ routing [ 2.404109] Bluetooth: Core ver 2.22 [ 2.404834] NET: Registered protocol family 31 [ 2.405013] Bluetooth: HCI device and connection manager initialized [ 2.406046] Bluetooth: HCI socket layer initialized [ 2.407019] Bluetooth: L2CAP socket layer initialized [ 2.408123] Bluetooth: SCO socket layer initialized [ 2.409050] NET: Registered protocol family 8 [ 2.409696] NET: Registered protocol family 20 [ 2.410214] NetLabel: Initializing [ 2.411011] NetLabel: domain hash size = 128 [ 2.411617] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 2.413044] NetLabel: unlabeled traffic allowed by default [ 2.414911] nfc: nfc_init: NFC Core ver 0.1 [ 2.415286] NET: Registered protocol family 39 [ 2.418201] clocksource: Switched to clocksource kvm-clock [ 2.905659] VFS: Disk quotas dquot_6.6.0 [ 2.906504] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.907908] FS-Cache: Loaded [ 2.909107] CacheFiles: Loaded [ 2.909876] pnp: PnP ACPI init [ 2.920588] pnp: PnP ACPI: found 7 devices [ 2.962480] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.964665] NET: Registered protocol family 2 [ 2.967444] tcp_listen_portaddr_hash hash table entries: 4096 (order: 6, 294912 bytes) [ 2.969407] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 2.972745] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 2.977812] TCP: Hash tables configured (established 65536 bind 65536) [ 2.980049] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 2.981619] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 2.983551] NET: Registered protocol family 1 [ 2.985817] RPC: Registered named UNIX socket transport module. [ 2.986851] RPC: Registered udp transport module. [ 2.987580] RPC: Registered tcp transport module. [ 2.988379] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 2.990613] NET: Registered protocol family 44 [ 2.991470] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.993335] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 2.994324] software IO TLB [mem 0xbbff3000-0xbfff3000] (64MB) mapped at [(____ptrval____)-(____ptrval____)] [ 2.997047] RAPL PMU: API unit is 2^-32 Joules, 3 fixed counters, 10737418240 ms ovfl timer [ 2.998401] RAPL PMU: hw unit of domain pp0-core 2^-0 Joules [ 2.999232] RAPL PMU: hw unit of domain package 2^-0 Joules [ 3.000168] RAPL PMU: hw unit of domain dram 2^-16 Joules [ 3.001241] VPID CAP should not exist if not support 1-setting enable VPID VM-execution control [ 3.005148] kvm: already loaded the other module [ 3.006300] Machine check injector initialized [ 3.010469] Scanning for low memory corruption every 60 seconds [ 3.046834] Initialise system trusted keyrings [ 3.048333] workingset: timestamp_bits=40 max_order=21 bucket_order=0 [ 3.053172] DLM installed [ 3.055525] NFS: Registering the id_resolver key type [ 3.056407] Key type id_resolver registered [ 3.057062] Key type id_legacy registered [ 3.057784] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 3.058942] Installing knfsd (copyright (C) 1996 okir@monad.swb.de). [ 3.061741] ntfs: driver 2.1.32 [Flags: R/W]. [ 3.062985] fuse init (API version 7.27) [ 3.065302] JFS: nTxBlock = 8192, nTxLock = 65536 [ 3.073240] SGI XFS with ACLs, security attributes, realtime, no debug enabled [ 3.076508] 9p: Installing v9fs 9p2000 file system support [ 3.077496] FS-Cache: Netfs '9p' registered for caching [ 3.080902] gfs2: GFS2 installed [ 3.082848] FS-Cache: Netfs 'ceph' registered for caching [ 3.083678] ceph: loaded (mds proto 32) [ 3.114085] NET: Registered protocol family 38 [ 3.115648] async_tx: api initialized (async) [ 3.116382] Key type asymmetric registered [ 3.117038] Asymmetric key parser 'x509' registered [ 3.117930] Key type pkcs7_test registered [ 3.118744] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) [ 3.120342] io scheduler noop registered [ 3.120997] io scheduler deadline registered [ 3.121899] io scheduler cfq registered (default) [ 3.122614] io scheduler mq-deadline registered [ 3.123347] io scheduler kyber registered [ 3.124043] io scheduler bfq registered [ 3.128751] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 3.130278] ACPI: Power Button [PWRF] [ 3.131521] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 3.132806] ACPI: Sleep Button [SLPF] [ 3.148171] PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 3.149146] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 3.161348] PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 3.162274] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 3.168374] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 3.191682] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 3.218201] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 3.243093] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 3.267469] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 3.275267] Non-volatile memory driver v1.3 [ 3.276743] Linux agpgart interface v0.103 [ 3.279556] [drm] radeon kernel modesetting enabled. [ 3.281165] [drm] amdgpu kernel modesetting enabled. [ 3.320759] brd: module loaded [ 3.341528] loop: module loaded [ 3.386671] null: module loaded [ 3.390186] nfcsim 0.2 initialized [ 3.391588] Loading iSCSI transport class v2.0-870. [ 3.409061] scsi host0: Virtio SCSI HBA [ 3.465355] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.817841] random: fast init done [ 4.063361] tsc: Refined TSC clocksource calibration: 2299.788 MHz [ 4.065065] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x21266cf7f05, max_idle_ns: 440795268182 ns [ 4.265699] sd 0:0:1:0: Attached scsi generic sg0 type 0 [ 4.267113] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 4.268478] Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) [ 4.268919] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 4.272821] sd 0:0:1:0: [sda] Write Protect is off [ 4.276809] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 4.291307] eql: Equalizer2002: Simon Janes (simon@ncm.com) and David S. Miller (davem@redhat.com) [ 4.296181] sda: sda1 [ 4.298774] MACsec IEEE 802.1AE [ 4.300683] tun: Universal TUN/TAP device driver, 1.6 [ 4.306898] sd 0:0:1:0: [sda] Attached SCSI disk [ 4.331147] vcan: Virtual CAN interface driver [ 4.332382] vxcan: Virtual CAN Tunnel driver [ 4.333374] slcan: serial line CAN interface driver [ 4.334369] slcan: 10 dynamic interface channels. [ 4.335496] CAN device driver interface [ 4.336427] enic: Cisco VIC Ethernet NIC Driver, ver 2.3.0.53 [ 4.338032] e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI [ 4.339597] e100: Copyright(c) 1999-2006 Intel Corporation [ 4.340731] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 4.342397] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 4.343682] e1000e: Intel(R) PRO/1000 Network Driver - 3.2.6-k [ 4.345072] e1000e: Copyright(c) 1999 - 2015 Intel Corporation. [ 4.346600] sky2: driver version 1.30 [ 4.348696] PPP generic driver version 2.4.2 [ 4.350525] PPP BSD Compression module registered [ 4.351664] PPP Deflate Compression module registered [ 4.352843] PPP MPPE Compression module registered [ 4.354092] NET: Registered protocol family 24 [ 4.355172] PPTP driver version 0.8.5 [ 4.356710] mac80211_hwsim: initializing netlink [ 4.370101] usbcore: registered new interface driver asix [ 4.371619] usbcore: registered new interface driver ax88179_178a [ 4.372981] usbcore: registered new interface driver cdc_ether [ 4.374509] usbcore: registered new interface driver net1080 [ 4.376157] usbcore: registered new interface driver cdc_subset [ 4.377950] usbcore: registered new interface driver zaurus [ 4.379327] usbcore: registered new interface driver cdc_ncm [ 4.395690] aoe: AoE v85 initialised. [ 4.397752] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 4.399172] ehci-pci: EHCI PCI platform driver [ 4.401237] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 4.402713] ohci-pci: OHCI PCI platform driver [ 4.403846] uhci_hcd: USB Universal Host Controller Interface driver [ 4.405601] usbcore: registered new interface driver usblp [ 4.407158] usbcore: registered new interface driver usb-storage [ 4.409184] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 4.411867] i8042: Warning: Keylock active [ 4.414545] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 4.415469] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 4.419096] mousedev: PS/2 mouse device common for all mice [ 4.424460] rtc_cmos 00:00: RTC can wake from S4 [ 4.426864] rtc_cmos 00:00: registered as rtc0 [ 4.428058] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 4.429579] i2c /dev entries driver [ 4.432518] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 4.434844] i2c-parport-light: adapter type unspecified [ 4.436333] usbcore: registered new interface driver RobotFuzz Open Source InterFace, OSIF [ 4.438332] usbcore: registered new interface driver i2c-tiny-usb [ 4.442382] device-mapper: ioctl: 4.39.0-ioctl (2018-04-03) initialised: dm-devel@redhat.com [ 4.444996] device-mapper: raid: Loading target version 1.13.2 [ 4.446626] usbcore: registered new interface driver btusb [ 4.449396] usnic_verbs: Cisco VIC (USNIC) Verbs Driver v1.0.3 (December 19, 2013) [ 4.451083] usnic_verbs:usnic_uiom_init:585: [ 4.451091] IOMMU required but not present or enabled. USNIC QPs will not function w/o enabling IOMMU [ 4.454264] usnic_verbs:usnic_ib_init:649: [ 4.454269] Unable to initalize umem with err -1 [ 4.457389] iscsi: registered transport (iser) [ 4.458544] OPA Virtual Network Driver - v1.0 [ 4.466881] hidraw: raw HID events driver (C) Jiri Kosina [ 4.471997] usbcore: registered new interface driver usbhid [ 4.473585] usbhid: USB HID core driver [ 4.477143] NET: Registered protocol family 40 [ 4.479965] ashmem: initialized [ 4.535762] NET: Registered protocol family 26 [ 4.537162] Mirror/redirect action on [ 4.538285] Simple TC action Loaded [ 4.540509] netem: version 1.3 [ 4.541241] u32 classifier [ 4.541832] Actions configured [ 4.545145] nf_conntrack_irc: failed to register helpers [ 4.546238] nf_conntrack_sane: failed to register helpers [ 4.583551] nf_conntrack_sip: failed to register helpers [ 4.587486] xt_time: kernel timezone is -0000 [ 4.588823] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) [ 4.590286] IPVS: Connection hash table configured (size=4096, memory=64Kbytes) [ 4.592257] IPVS: ipvs loaded. [ 4.592820] IPVS: [rr] scheduler registered. [ 4.593761] IPVS: [wrr] scheduler registered. [ 4.594696] IPVS: [lc] scheduler registered. [ 4.595684] IPVS: [wlc] scheduler registered. [ 4.596557] IPVS: [fo] scheduler registered. [ 4.597394] IPVS: [ovf] scheduler registered. [ 4.598240] IPVS: [lblc] scheduler registered. [ 4.599077] IPVS: [lblcr] scheduler registered. [ 4.600050] IPVS: [dh] scheduler registered. [ 4.600882] IPVS: [sh] scheduler registered. [ 4.601653] IPVS: [mh] scheduler registered. [ 4.602414] IPVS: [sed] scheduler registered. [ 4.603317] IPVS: [nq] scheduler registered. [ 4.604356] IPVS: ftp: loaded support on port[0] = 21 [ 4.605483] IPVS: [sip] pe registered. [ 4.606560] ipip: IPv4 and MPLS over IPv4 tunneling driver [ 4.610371] gre: GRE over IPv4 demultiplexor driver [ 4.611557] ip_gre: GRE over IPv4 tunneling driver [ 4.617898] IPv4 over IPsec tunneling driver [ 4.622088] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully [ 4.624084] Initializing XFRM netlink socket [ 4.624589] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 4.625600] NET: Registered protocol family 10 [ 4.641911] Segment Routing with IPv6 [ 4.643279] mip6: Mobile IPv6 [ 4.647216] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 4.652356] ip6_gre: GRE over IPv6 tunneling driver [ 4.659362] bpfilter: Loaded bpfilter_umh pid 2227 Started bpfilter [ 4.662388] NET: Registered protocol family 17 [ 4.663241] NET: Registered protocol family 15 [ 4.664249] Bridge firewalling registered [ 4.665851] can: controller area network core (rev 20170425 abi 9) [ 4.667313] NET: Registered protocol family 29 [ 4.668093] can: raw protocol (rev 20170425) [ 4.668787] can: broadcast manager protocol (rev 20170425 t) [ 4.669669] can: netlink gateway (rev 20170425) max_hops=1 [ 4.670821] Bluetooth: RFCOMM TTY layer initialized [ 4.671701] Bluetooth: RFCOMM socket layer initialized [ 4.672629] Bluetooth: RFCOMM ver 1.11 [ 4.673219] Bluetooth: BNEP (Ethernet Emulation) ver 1.3 [ 4.673971] Bluetooth: BNEP filters: protocol multicast [ 4.674770] Bluetooth: BNEP socket layer initialized [ 4.675514] Bluetooth: HIDP (Human Interface Emulation) ver 1.2 [ 4.676428] Bluetooth: HIDP socket layer initialized [ 4.677798] RPC: Registered rdma transport module. [ 4.678558] RPC: Registered rdma backchannel transport module. [ 4.679929] NET: Registered protocol family 41 [ 4.680996] lec:lane_module_init: lec.c: initialized [ 4.681798] mpoa:atm_mpoa_init: mpc.c: initialized [ 4.682655] l2tp_core: L2TP core driver, V2.0 [ 4.683350] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 4.684118] 8021q: 802.1Q VLAN Support v1.8 [ 4.695287] DCCP: Activated CCID 2 (TCP-like) [ 4.696270] DCCP: Activated CCID 3 (TCP-Friendly Rate Control) [ 4.697721] sctp: Hash tables configured (bind 64/64) [ 4.700211] NET: Registered protocol family 21 [ 4.701544] Registered RDS/infiniband transport [ 4.702799] Registered RDS/tcp transport [ 4.703535] tipc: Activated (version 2.0.0) [ 4.704563] NET: Registered protocol family 30 [ 4.705874] tipc: Started in single node mode [ 4.706786] NET: Registered protocol family 43 [ 4.707813] 9pnet: Installing 9P2000 support [ 4.711051] NET: Registered protocol family 36 [ 4.711996] Key type dns_resolver registered [ 4.712778] Key type ceph registered [ 4.713673] libceph: loaded (mon/osd proto 15/24) [ 4.714510] openvswitch: Open vSwitch switching datapath [ 4.716912] mpls_gso: MPLS GSO support [ 4.733098] AVX2 version of gcm_enc/dec engaged. [ 4.733892] AES CTR mode by8 optimization enabled [ 4.741504] sched_clock: Marking stable (4741459949, 0)->(6429414988, -1687955039) [ 4.745359] registered taskstats version 1 [ 4.746041] Loading compiled-in X.509 certificates [ 4.747672] zswap: default zpool zbud not available [ 4.748700] zswap: pool creation failed [ 4.754280] Btrfs loaded, crc32c=crc32c-intel [ 4.758257] Key type big_key registered [ 4.760379] Key type encrypted registered [ 4.762497] Magic number: 10:841:901 [ 4.763282] block nbd1: hash matches [ 4.763940] clocksource clocksource0: hash matches [ 4.764962] acpi PNP0501:01: hash matches [ 4.765877] console [netcon0] enabled [ 4.766438] netconsole: network logging started [ 4.767830] gtp: GTP module loaded (pdp ctx size 104 bytes) [ 4.770597] rdma_rxe: loaded [ 4.771453] cfg80211: Loading compiled-in X.509 certificates for regulatory database [ 4.775756] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' [ 4.777582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 4.778265] ALSA device list: [ 4.779108] cfg80211: failed to load regulatory.db [ 4.779419] #0: Dummy 1 [ 4.780529] #1: Loopback 1 [ 4.781160] #2: Virtual MIDI Card 1 [ 5.050131] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 [ 5.054181] md: Waiting for all devices to be available before autodetect [ 5.055265] md: If you don't use raid, use raid=noautodetect [ 5.059882] md: Autodetecting RAID arrays. [ 5.060775] md: autorun ... [ 5.061242] md: ... autorun DONE. [ 5.160637] EXT4-fs (sda1): INFO: recovery required on readonly filesystem [ 5.161820] EXT4-fs (sda1): write access will be enabled during recovery [ 5.926365] EXT4-fs (sda1): recovery complete [ 5.931933] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null) [ 5.933192] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 5.934605] devtmpfs: mounted [ 5.945871] Freeing unused kernel memory: 3968K [ 5.946653] Kernel memory protection disabled. [ 6.474728] SELinux: Disabled at runtime. [ 6.500364] audit: type=1404 audit(1530823955.361:2): enforcing=0 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=0 old-enabled=1 lsm=selinux res=1 INIT: version 2.88 booting [ 6.752816] stty (2306) used greatest stack depth: 18296 bytes left [info] Using makefile-style concurrent boot in runlevel S. [....] Starting the hotplug events dispatcher: udevd[ 7.949516] udevd[2418]: starting version 175 [?25l[?1c7[ ok 8[?25h[?0c.