18131:18132 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:52 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x4) r0 = socket(0x0, 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) getpeername(r0, &(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @broadcast}}, &(0x7f0000000200)=0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) [ 242.886666] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.897920] loop5: p1 p2 p3 p4 < > [ 242.923124] 9pnet: Could not find request transport: fk [ 242.941094] loop1: p1 p2 p3 p4 < > [ 243.021325] 9pnet: Could not find request transport: fk [ 243.065809] 9pnet: Insufficient options for proto=fd 12:59:52 executing program 7: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@mcast2={0xff, 0x2, [], 0x1}, 0x66, r1}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 243.275286] binder: 18206:18209 got transaction to invalid handle [ 243.291503] binder: 18206:18209 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:52 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) write$selinux_create(r0, &(0x7f0000000480)=@objname={'system_u:object_r:ldconfig_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x60) write$P9_RLERRORu(r1, &(0x7f0000000100)={0xd, 0x7, 0x2, {{}, 0x3}}, 0xd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.320844] binder: 18212:18214 got transaction to invalid handle [ 243.320854] binder: 18212:18214 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 243.321498] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.408859] binder: 18159:18163 got transaction to invalid handle [ 243.418080] binder: 18159:18163 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.477588] binder: undelivered TRANSACTION_ERROR: 29201 12:59:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.533318] binder: 18176:18194 got transaction to invalid handle [ 243.536306] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.606251] binder: 18175:18181 got transaction to invalid handle [ 243.617534] binder: 18176:18194 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.654173] binder: 18175:18181 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 243.666148] binder: undelivered TRANSACTION_ERROR: 29201 12:59:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c900000064000000000432000520", 0x54, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:52 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)="2f70726f632f7379732f6e65742f697076342f76732f7363686564756c655f69636d7000fbb320bf478c7dfa4c80778ec02fa087cdf9cdbb076a89f10cc672914cc5a761dab8f3d23be2aa430e7a421d967607aaf89353a0064825827134af9813d59dc356841ebfa2a69c9bd88013d432106cecdc42bc", 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7f, 0xfffffffffffffffa, 0xfffffffffffffffa, "74f2daf203665c3da0e3dfa7745c27c2c5dda895e12561031d75fe17fae0d803ef7deca9f82a5f0f7e2a75f9cbdbecdf852c5529a84ce1ee015f348572f03747c3c970016d97db6bc983395052d09768"}, 0xd8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.697845] loop4: p1 p2 p3 p4 < > [ 243.706974] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.717726] loop3: p1 p2 p3 p4 < > 12:59:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 243.808210] loop0: p1 p2 p3 p4 < > [ 243.873803] loop1: p1 p2 p3 p4 < > [ 243.909437] 9pnet: Insufficient options for proto=fd 12:59:53 executing program 2: mknod(&(0x7f00000001c0)='./bus\x00', 0x1000, 0x758) socket(0x0, 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0xc, 0x3, 0x7}}, 0x14) [ 244.024279] 9pnet: Insufficient options for proto=fd 12:59:53 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000480)=""/72, 0x48, 0x1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x14) connect(r0, &(0x7f0000000700)=@ll={0x11, 0xf7, r1, 0x1, 0x5, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000600)="f7363055a2d1e712fbe2bb62a8fa2a6f13cf7aaf89f075a7671242b1a1d5c15a07fd619d8257a15525184314b5ff3103fd9f9711a52e9990f3655bb1ed1a96791d9c3720d55f592aabe2ac82dcb00b2e3d5169d1cea6b538f514892617a0b876a2cb4d3615146eee0c444a7611f4421d56aadd0fededabc01b7c703d19c36b7b3a2626a9ac74270bad1ea850a2d63a4870d6937055388688dccad316d265c95fb84ceedfb398dc6ecc099cade8d32b22cc08ed30d859ca6c0e14366f47d954473226600b52f737751160") r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x8000001c}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x40000, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:53 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)="2f70726f632f7379732f6e65742f697076342f76732f7363686564756c655f69636d7000fbb320bf478c7dfa4c80778ec02fa087cdf9cdbb076a89f10cc672914cc5a761dab8f3d23be2aa430e7a421d967607aaf89353a0064825827134af9813d59dc356841ebfa2a69c9bd88013d432106cecdc42bc", 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7f, 0xfffffffffffffffa, 0xfffffffffffffffa, "74f2daf203665c3da0e3dfa7745c27c2c5dda895e12561031d75fe17fae0d803ef7deca9f82a5f0f7e2a75f9cbdbecdf852c5529a84ce1ee015f348572f03747c3c970016d97db6bc983395052d09768"}, 0xd8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.088206] 9pnet: Insufficient options for proto=fd 12:59:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.091309] binder: 18289:18290 got transaction to invalid handle 12:59:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:53 executing program 7: mknod(&(0x7f0000000140)='./bus\x00', 0x1000, 0x8000) r0 = open(&(0x7f000054a000)='./bus\x00', 0x2000b00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 244.091318] binder: 18289:18290 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.091725] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.105793] binder: 18268:18274 got transaction to invalid handle [ 244.105803] binder: 18268:18274 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.111300] binder: 18265:18266 got transaction to invalid handle [ 244.111309] binder: 18265:18266 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.111723] binder: undelivered TRANSACTION_ERROR: 29201 12:59:53 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$revoke(0x3, r1) [ 244.155010] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.319630] loop3: p1 p2 p3 p4 < > [ 244.368619] loop4: p1 p2 p3 p4 < > 12:59:53 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) quotactl(0x2, &(0x7f0000000240)='./bus\x00', r0, &(0x7f00000003c0)="b419ab9320ddad70d1783a4d9016ecf94706a215aee68dc37f22e3a51cc3c4892aab") mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') socket$key(0xf, 0x3, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f}, @exit_looper={0x630d}, @exit_looper={0x630d}, @release={0x40046306, 0x4}], 0x1000, 0x0, &(0x7f0000001000)="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"}) [ 244.433790] 9pnet: Insufficient options for proto=fd [ 244.436462] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) 12:59:53 executing program 5: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@mcast2={0xff, 0x2, [], 0x1}, 0x66, r1}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 244.609891] 9pnet: Insufficient options for proto=fd 12:59:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.641128] binder: 18282:18284 got transaction to invalid handle [ 244.652088] binder: 18291:18297 got transaction to invalid handle [ 244.664820] 9pnet: Insufficient options for proto=fd [ 244.668693] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) 12:59:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.690481] binder: 18282:18284 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.690682] binder: 18291:18297 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.697112] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.699920] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.833057] loop0: p1 p2 p3 p4 < > 12:59:54 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0x8, 0x70bd29, 0x25dfdbfc, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) r2 = getegid() r3 = getgid() setregid(r2, r3) open(&(0x7f00000002c0)='./bus\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) 12:59:54 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x8001, 0x8, &(0x7f0000000880)=[{&(0x7f0000000480)="2a2f5d78fcf32770d3182100299a04466a491c2bbbb80c7b80d731eba1b7c063eae5c995d6811f30b16732d24e4dd43fddfb36f7b20ea4ea06460fbc7587dd1dbf5c755b670a77b9f954473bb2439240fa7b945763aeb8c3489d872255abcad7a3cfa41937b22d95b0e66f4016a5357101c67d229b05b701c0989bb4140a6966dbe7eba9513292930257f5613a6935365e21ef013223692cbd713b6068b9c7fa7b643383ac0f1c2af2eb4129848fbe89290b8cbaccf542f3124b7023980959b5", 0xc0, 0x1}, {&(0x7f0000000540)="5abdedac95848fbf53e7e57e883367502a285cade1fed487e5524b37e71ca95753ffdc7c45c0b8bf5d5d5e8c56ad6d6dfc1c64194b6d45ad7d42137d23776f85655695376c2794fcd0a0d25c3c0d4d6cc7d5769daec0adf61919386ad640535725e2178e67bec3d80bd93916bbc9171d2c9d5f9cb1017b911b864d3ada8519df8bdd77a4c3e82bd00430905017ec049eed63a6f4ef0220a9f3aa5951", 0x9c, 0x82}, {&(0x7f0000000600)="2e40a9da646b324e4acf5826637305aa4171fdac43901961c522a5c362d96df63ee41c53b71c5e1925f017cdfcf09081c8ea612937d704381625598a542fc35bab16982cb47b583bf175378473a2c311cb", 0x51, 0x1}, {&(0x7f0000000680)="dff62eb24f6b73e745319fab6785bc5f64bc78e6f6184e7bd7fedfb74407d49166247d872976270341371aff320ad49a700c757a6f8563c8c8c67d9404d8d39b9f7bf43fa10a36bccf63529ec36f50c2068a321fa77648d2426970c212d7b6466c8d64f9fd8273746eb1643d767516", 0x6f, 0xfb9}, {&(0x7f0000000100)="e5b0bca9f8d795ba9192dd8c868bad67de54ef15bf5d77b874ef995fb0800a41ace0d595902e60edc814e02c0ec07b", 0x2f, 0x6}, {&(0x7f0000000700)="5ef3767c351f943efed7bddaf2e6010dc54934c725cbee89d8caa6d7f88f453d8a3fc61114d3c68fcaa8e82a6cc5c13a121492b9802f67d0c65037cc340b7ca124b26b5b9bc5de1dd3f2b6e5b057e16fd083207273a3a3cc35591104287078d3449d35917afbe5b30f040e9c5a3b0912426da809b5ee0a7af86f43dc116714eda329c3939947e7b3e6e86263aaf0e2faae6e071d1c1b92a56270a5f14c553b1d2ee35f556c703632b455a7e0676dac540d8820cad6268cdc9523dd56d228c3aaf8563e79d4dd8e215a2f54724238498fc2adfe1d89d97e1d519703ef9e7019065663eb68feffd9a8eba5f9d424016d", 0xef, 0x137b}, {&(0x7f0000000800)="b7776840dda535628b9cfa1681a702845d2988a20eb63e28c8c9b6cf8c4476568d3f7b9ecbf2db46dc04fedf42f88be9747ca75389aacc8ac5194c2af35fa3076e6bd0563c", 0x45}, {&(0x7f00000001c0), 0x0, 0x7fffffff}]) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="339b30817bd71374"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.846613] binder: 18350:18353 got transaction to invalid handle [ 244.846623] binder: 18350:18353 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:54 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000780)='./file0\x00', 0x6, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000480)="5576672c72908e19270ef27935ca56fa51808bd3a4f85fda366f648d6c5700e244d444290c30c2c5aa3897f35b9e8f4c3996e26ab2c505d4219b5a3e019105895e18ca0dd87b1a12513f3162ab064cb331ebbaa61fcf2f09b0f096217942e61a82c48672af422ce91503b2f590681e26cecf96cb30a81c5d25aa0eccff12a7ece970d388353042a00353f77352ecefb354d17683811d8ff55dfa252d2105a749deb58f", 0xa3, 0x6}, {&(0x7f0000000540)="3f081048225f905a34a86211aac1d55d0d9aa1d4f30814fa1e441f16122e83d10c09ac43f42c92f8948a966dbc53bc6d5a23478b282420960f87204a9a8b0145af9c8c4bfca37aecdf946c326ed7e2366064dccd29c9739217b6a6dfb5f470efac7ea878b2a0fcedcc885b6f8fe739f736fcdf24f6e6d36a8e9a4e3f1f338601e01cd9b477041f8b94771a6355a099581b8dd079e47a5a204f694833117e51c2014ef31b6f5e0f250b019d38fb47220081188b2c171461eaa03394fa66015569bc438d59ef53466cd0dfb3ce18aec39d29b7db28b5dff02b90ec7aaaa2c69b426693a6f2b06cd0390aa056", 0xeb}], 0x4010, &(0x7f0000000640)=ANY=[@ANYBLOB="636865636b5f696e7421572b559efe2146441f362f5f7072696e745f6d61736b3d3078666666666666666630303030303030302c73706163655f63616368653d7631"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'security\x00'}, &(0x7f0000000380)=0x54) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioprio_set$pid(0x0, 0x0, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 244.847137] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.940725] binder: 18337:18345 got transaction to invalid handle [ 244.940736] binder: 18337:18345 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 244.941098] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.057524] loop1: p1 p2 p3 p4 < > [ 245.096717] loop3: p1 p2 p3 p4 < > 12:59:54 executing program 7: r0 = socket(0x5, 0x4, 0x3) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) ioctl$sock_ifreq(0xffffffffffffff9c, 0x8916, &(0x7f00000007c0)={'bridge_slave_0\x00', @ifru_addrs=@xdp={0x2c, 0x4, 0x0, 0x32}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000a00)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000a40)={'lo\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000b00)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000c00)=0xe8) getsockname(0xffffffffffffff9c, &(0x7f0000000d00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000d80)=0x80) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000e00)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000000e40)=@hci={0x0, 0x0}, &(0x7f0000000ec0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001140)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001180)={@rand_addr, @multicast1, 0x0}, &(0x7f00000011c0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000007540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000007580)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000007600)={@loopback, @local, 0x0}, &(0x7f0000007640)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000007780)=0x14, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000077c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f00000078c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007900)={0x0}, &(0x7f0000007940)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000007980)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f00000079c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000007a00)={@remote, @broadcast, 0x0}, &(0x7f0000007a40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000007b00)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000007c00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008200)={'sit0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008300)={0x0, @multicast2}, &(0x7f0000008340)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008440)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f000000d480)=[{{0x0, 0x0, &(0x7f0000009540)=[{&(0x7f0000008480)=""/176, 0xb0}, {&(0x7f0000008540)=""/4096, 0x1000}], 0x2, &(0x7f0000009580)=""/57, 0x39, 0x10001}, 0x3}, {{&(0x7f00000095c0)=@vsock, 0x80, &(0x7f0000009880)=[{&(0x7f0000009640)=""/176, 0xb0}, {&(0x7f0000009700)=""/130, 0x82}, {&(0x7f00000097c0)=""/158, 0x9e}], 0x3, &(0x7f00000098c0)=""/1, 0x1, 0xfffffffffffffff8}, 0x800}, {{0x0, 0x0, &(0x7f0000009e40)=[{&(0x7f0000009900)=""/60, 0x3c}, {&(0x7f0000009940)=""/100, 0x64}, {&(0x7f00000099c0)=""/95, 0x5f}, {&(0x7f0000009a40)=""/179, 0xb3}, {&(0x7f0000009b00)=""/200, 0xc8}, {&(0x7f0000009c00)=""/39, 0x27}, {&(0x7f0000009c40)}, {&(0x7f0000009c80)=""/254, 0xfe}, {&(0x7f0000009d80)=""/162, 0xa2}], 0x9, &(0x7f0000009f00), 0x0, 0x9}, 0x8000}, {{&(0x7f0000009f40)=@nfc, 0x80, &(0x7f000000b400)=[{&(0x7f0000009fc0)=""/135, 0x87}, {&(0x7f000000a080)=""/196, 0xc4}, {&(0x7f000000a180)=""/177, 0xb1}, {&(0x7f000000a240)=""/7, 0x7}, {&(0x7f000000a280)=""/169, 0xa9}, {&(0x7f000000a340)=""/4096, 0x1000}, {&(0x7f000000b340)=""/160, 0xa0}], 0x7, 0x0, 0x0, 0x6}, 0x2}, {{&(0x7f000000b480)=@can={0x0, 0x0}, 0x80, &(0x7f000000c900)=[{&(0x7f000000b500)=""/87, 0x57}, {&(0x7f000000b580)=""/46, 0x2e}, {&(0x7f000000b5c0)=""/148, 0x94}, {&(0x7f000000b680)=""/193, 0xc1}, {&(0x7f000000b780)=""/4096, 0x1000}, {&(0x7f000000c780)=""/173, 0xad}, {&(0x7f000000c840)}, {&(0x7f000000c880)=""/104, 0x68}], 0x8, &(0x7f000000c980)=""/122, 0x7a, 0x7f}, 0x1}, {{&(0x7f000000ca00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f000000cd40)=[{&(0x7f000000ca80)=""/50, 0x32}, {&(0x7f000000cac0)=""/177, 0xb1}, {&(0x7f000000cb80)=""/151, 0x97}, {&(0x7f000000cc40)=""/205, 0xcd}], 0x4, &(0x7f000000cd80)=""/235, 0xeb, 0xfff}, 0x4}, {{&(0x7f000000ce80)=@can, 0x80, &(0x7f000000d1c0)=[{&(0x7f000000cf00)=""/191, 0xbf}, {&(0x7f000000cfc0)=""/145, 0x91}, {&(0x7f000000d080)=""/19, 0x13}, {&(0x7f000000d0c0)=""/153, 0x99}, {&(0x7f000000d180)=""/1, 0x1}], 0x5, &(0x7f000000d240)=""/65, 0x41, 0x1}, 0x1}, {{&(0x7f000000d2c0)=@ax25, 0x80, &(0x7f000000d440)=[{&(0x7f000000d340)}, {&(0x7f000000d380)=""/18, 0x12}, {&(0x7f000000d3c0)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x5f}, 0xbb}], 0x8, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000d740)={0x0, @empty, @broadcast}, &(0x7f000000d780)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000d7c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f000000d8c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000dc80)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f000000dd80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000dec0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ed00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000ecc0)={&(0x7f000000df00)={0xdb4, r1, 0x0, 0x70bd27, 0x25dfdbfd, {0x3}, [{{0x8, 0x1, r2}, {0x1a8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0x3, 0x1, 0x3, 0x4}, {0xffffffffffffffff, 0x100000000, 0x5, 0xd56f}, {0x8, 0x5, 0x5a68}, {0xb859, 0x3, 0x8001}, {0x1be, 0x5, 0x400000, 0x5}, {0x83, 0x0, 0x9, 0x1}, {0x1, 0x10001, 0x3ff, 0x9}, {0x4, 0x8, 0x4, 0x100000000}, {0x662d0158, 0x40, 0x100000001, 0x1}, {0x2c, 0x8, 0x781d, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x1dc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1e0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x1e8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xf9}}}]}}, {{0x8, 0x1, r20}, {0x198, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x1ac, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xee}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8db0}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r27}, {0x1a4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1c1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xab44}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3828}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xbc78}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0xe4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r32}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x3, 0x7, 0x1000, 0x7fff}, {0xfffffffffffffff9, 0xfffffffffffffffe, 0x9d, 0x8}, {0x24, 0xfffffffffffffff7, 0x0, 0x2}, {0x1, 0xfdc0, 0x8657, 0x1}, {0x5c57, 0x100000000, 0x1, 0x1a67}, {0x8dd, 0x0, 0x10000, 0x926}, {0x6, 0x9, 0x7b, 0xfffffffffffffffc}]}}}]}}]}, 0xdb4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r33 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) readlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=""/197, 0xc5) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r33}, 0x2c, {'wfdno', 0x3d, r33}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 12:59:54 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000080"]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:54 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000780)='./file0\x00', 0x6, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000480)="5576672c72908e19270ef27935ca56fa51808bd3a4f85fda366f648d6c5700e244d444290c30c2c5aa3897f35b9e8f4c3996e26ab2c505d4219b5a3e019105895e18ca0dd87b1a12513f3162ab064cb331ebbaa61fcf2f09b0f096217942e61a82c48672af422ce91503b2f590681e26cecf96cb30a81c5d25aa0eccff12a7ece970d388353042a00353f77352ecefb354d17683811d8ff55dfa252d2105a749deb58f", 0xa3, 0x6}, {&(0x7f0000000540)="3f081048225f905a34a86211aac1d55d0d9aa1d4f30814fa1e441f16122e83d10c09ac43f42c92f8948a966dbc53bc6d5a23478b282420960f87204a9a8b0145af9c8c4bfca37aecdf946c326ed7e2366064dccd29c9739217b6a6dfb5f470efac7ea878b2a0fcedcc885b6f8fe739f736fcdf24f6e6d36a8e9a4e3f1f338601e01cd9b477041f8b94771a6355a099581b8dd079e47a5a204f694833117e51c2014ef31b6f5e0f250b019d38fb47220081188b2c171461eaa03394fa66015569bc438d59ef53466cd0dfb3ce18aec39d29b7db28b5dff02b90ec7aaaa2c69b426693a6f2b06cd0390aa056", 0xeb}], 0x4010, &(0x7f0000000640)=ANY=[@ANYBLOB="636865636b5f696e7421572b559efe2146441f362f5f7072696e745f6d61736b3d3078666666666666666630303030303030302c73706163655f63616368653d7631"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'security\x00'}, &(0x7f0000000380)=0x54) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioprio_set$pid(0x0, 0x0, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 245.343741] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 245.388726] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 12:59:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 245.399810] blk_update_request: 2965 callbacks suppressed [ 245.399816] blk_update_request: I/O error, dev loop3, sector 301 [ 245.399843] blk_update_request: I/O error, dev loop3, sector 1 [ 245.399862] blk_update_request: I/O error, dev loop3, sector 301 [ 245.399868] buffer_io_error: 2945 callbacks suppressed 12:59:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:54 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'system.', 'md5sumvmnet0.[wlan0\x00'}, &(0x7f0000000480)=""/176, 0xb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='./file0\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000540)=0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 245.399873] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 245.399877] blk_update_request: I/O error, dev loop3, sector 1 [ 245.399882] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 245.399902] blk_update_request: I/O error, dev loop3, sector 5 [ 245.399911] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 245.399915] blk_update_request: I/O error, dev loop3, sector 301 12:59:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 245.399920] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 245.399949] blk_update_request: I/O error, dev loop3, sector 301 [ 245.399954] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 245.399969] blk_update_request: I/O error, dev loop3, sector 1 [ 245.399974] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 245.399984] blk_update_request: I/O error, dev loop3, sector 301 [ 245.399989] Buffer I/O error on dev loop3p4, logical block 0, async page read 12:59:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 245.399999] blk_update_request: I/O error, dev loop3, sector 5 [ 245.400028] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 245.400032] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 245.400063] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 245.555789] binder: 18442:18444 got transaction to invalid handle [ 245.555801] binder: 18442:18444 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:55 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x4a0002, 0x0) fadvise64(r0, 0x0, 0x5, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) wait4(r2, &(0x7f00000001c0), 0x1, &(0x7f0000000480)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x31f) 12:59:55 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./bus\x00', r2, &(0x7f0000000200)='./bus\x00', 0x1000) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) fgetxattr(r0, &(0x7f0000000240)=@random={'osx.', '\x00'}, &(0x7f0000000280)=""/201, 0xc9) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) [ 245.556363] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.571180] binder: 18406:18410 got transaction to invalid handle [ 245.571189] binder: 18406:18410 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 245.671572] loop5: p1 p2 p3 p4 < > 12:59:55 executing program 2: mknod(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x80000000) socket(0x0, 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) [ 245.673357] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.689178] binder: 18411:18506 got transaction to invalid handle [ 245.689190] binder: 18411:18506 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 245.760894] 9pnet: Insufficient options for proto=fd [ 245.794213] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.834218] loop0: p1 p2 p3 p4 < > [ 245.908386] loop4: p1 p2 p3 p4 < > [ 245.942496] 9pnet: Insufficient options for proto=fd [ 245.953185] loop3: p1 p2 p3 p4 < > [ 246.175481] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 246.334212] binder: 18515:18516 got transaction to invalid handle [ 246.334222] binder: 18515:18516 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 246.335137] binder: 18496:18499 got transaction to invalid handle [ 246.335146] binder: 18496:18499 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 246.336092] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.336185] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.400690] 9pnet: Insufficient options for proto=fd [ 246.416322] 9pnet: Insufficient options for proto=fd [ 246.500584] binder: 18511:18514 got transaction to invalid handle 12:59:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:55 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffd, 0x1b8, &(0x7f0000000380)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={[], 0x3c, 0x2, 0x400, 0x9, 0x1, r1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000380)={0x303, 0x33}, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) timerfd_create(0x1, 0x800) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0xfff) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) sched_getparam(r3, &(0x7f0000000280)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000008996f"]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:55 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000000d00000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) ioctl(r1, 0x0, &(0x7f0000000180)="85813e143a8692ae37a73066d7fe9dbea3a3d8b6d2f4e6693f324e87df34e904f4ad155b3aedee1ca9da64fb5f8c6dab6bda05a76f362cebe0d55599b2966749ee97032a4445643e402b660bfc1c2bc20e1852d1e1") mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) getsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000340), &(0x7f00000003c0)=0x7601620f26fd073a) 12:59:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:55 executing program 2: mknod(&(0x7f00000001c0)='./bus/file0\x00', 0x1000, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$TIOCSBRK(r1, 0x5427) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14) fcntl$setpipe(r1, 0x407, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@empty, 0xd, r2}) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="2c776679db8b8860ff97335918f29825a11879044a9776ec1acdcf07c1bad726a66c3fd45947516e7e6e2a5744700f621b376513a6acbbfe01012e81822023929d29dd175c895e774b88132f67e4d8ba244ddc7c7e146107acaae9f02bad2f179536b846a0846aa51f2f08226ab8187c4711b0165a79538cd68216443ab42c23e62130", @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) 12:59:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 246.500593] binder: 18511:18514 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 246.500875] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.534258] binder: 18532:18533 got transaction to invalid handle [ 246.534267] binder: 18532:18533 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 246.534651] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.697590] loop4: p1 p2 p3 p4 < > [ 246.736014] 9pnet: Insufficient options for proto=fd 12:59:55 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) [ 246.761503] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 246.769429] loop3: p1 p2 p3 p4 < > 12:59:55 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000cc0)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@newtclass={0x6c, 0x28, 0xb1c, 0x70bd27, 0x25dfdbfe, {0x0, r2, {0xffff, 0x2}, {0x0, 0xe}, {0xffff, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0xfffffffffffffc01}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}]}}, @TCA_RATE={0x8, 0x5, {0x200}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x9) ioctl$TUNSETLINK(r3, 0x400454cd, 0x33e) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x1, 0x2, 0x2}, 0x23ab}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in6=@ipv4}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="efffffffff80ffffe76c97b1906fc26d68360b1fc26c8d5411a6f1927822179d0e877cfe57b4b3ad51bf93e66a726b62b784a507da1dc3b8d17963f72fa89672743334d28b0120e625d3526600a9c51236906153bd2747693831f28241b46f935acf"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 246.874248] 9pnet: Insufficient options for proto=fd [ 246.912981] 9pnet: Insufficient options for proto=fd 12:59:56 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0xfffffffc) r0 = socket(0x0, 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYBLOB="2c83"]) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) fsync(r1) lstat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) mount$9p_unix(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=unix,access=', @ANYRESDEC=r2, @ANYBLOB="2c63616368653d6c6f6f73652c616e616d653d3870002c63616368653d6c6f6f73652c6163636573733d35d595e8198ec55760dd0700a3230fbc08c17952f4ac616213314c56a3f576de8711", @ANYRESDEC=r3, @ANYBLOB=',noextend,cache=fscache,\x00']) [ 247.020562] 9pnet: Insufficient options for proto=fd [ 247.098475] 9pnet: p9_fd_create_unix (18681): problem connecting socket: ./bus: -111 12:59:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.140601] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 247.192549] 9pnet: Insufficient options for proto=fd 12:59:56 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000f9f7b5214fa49d6f5066656cc0a0f1126b19d8db57a7d1b5925b509d464f865a59648d739530df005d101a32075989fd88951e80000feced047800000000a2c2b081dedcaad5a77dff31504ca1f0ada3bd862c5094f3c7abc57b5995ecaabba39cb09c"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.214931] binder: 18612:18615 got transaction to invalid handle 12:59:56 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000480)={@mcast2, 0x0}, &(0x7f00000004c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0xfffffffffffffe0f}, 0xffffffffffffff5a) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.264941] binder: 18612:18615 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:56 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000480)={{0x7b0b, 0xdf}, 'port0\x00', 0x4a, 0x21020, 0x3, 0x80, 0x5, 0x400, 0xfffffffffffffffe, 0x0, 0x7, 0xa13}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 12:59:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.289398] binder: 18619:18625 got transaction to invalid handle [ 247.289407] binder: 18619:18625 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.289810] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.319058] binder: 18606:18621 got transaction to invalid handle [ 247.319066] binder: 18606:18621 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.340035] binder: undelivered TRANSACTION_ERROR: 29201 12:59:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca759") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.535546] binder: 18607:18608 got transaction to invalid handle 12:59:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.535557] binder: 18607:18608 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.536164] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.697108] loop2: p1 p2 p3 p4 < > [ 247.697145] loop2: partition table partially beyond EOD, truncated [ 247.699273] loop2: p1 start 1 is beyond EOD, truncated 12:59:56 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266648c6f3d62755692b300f92cd2558edabb239d0614cd6f15368837716405ab4da2e5a27db80994652ffefcc2c19d", @ANYRESHEX=r0, @ANYBLOB='}o=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x8000000000006, 0x3, 0x80000002, 0x50, 0x1}) [ 247.699292] loop2: p2 start 101 is beyond EOD, truncated [ 247.699297] loop2: p3 start 201 is beyond EOD, truncated [ 247.699317] loop2: p4 start 301 is beyond EOD, truncated [ 247.705635] loop4: p1 p2 p3 p4 < > [ 247.736557] loop3: p1 p2 p3 p4 < > [ 247.761212] loop1: p1 p2 p3 p4 < > [ 247.761282] loop1: partition table partially beyond EOD, truncated [ 247.762716] loop1: p1 start 1 is beyond EOD, truncated [ 247.762736] loop1: p2 start 101 is beyond EOD, truncated [ 247.762755] loop1: p3 start 201 is beyond EOD, truncated [ 247.762775] loop1: p4 start 301 is beyond EOD, truncated [ 247.806942] binder: 18745:18747 got transaction to invalid handle [ 247.806951] binder: 18745:18747 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.807931] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.882804] 9pnet: Insufficient options for proto=fd [ 247.910653] binder: 18755:18756 got transaction to invalid handle [ 247.910662] binder: 18755:18756 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.911241] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.912394] 9pnet: Insufficient options for proto=fd [ 247.969827] binder: 18739:18741 got transaction to invalid handle [ 247.969837] binder: 18739:18741 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 247.970249] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.976737] binder: 18700:18701 got transaction to invalid handle [ 247.976747] binder: 18700:18701 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:57 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f00000001c0)=0x80) r2 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) lstat(&(0x7f0000000880)='./bus\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@local}}, &(0x7f0000000a80)=0xe8) stat(&(0x7f0000000ac0)='./bus\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000c40)={&(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000280)="7f02640da8505463642a8f789a12933b3881396f4d0517d167079d54a1091fcd90d4eaed535cda9da3f832eaba2adf21fc79178f12efc9bf939ea6497af87a6afbe3c98a40aa9571f6b6aefed55ffd", 0x4f}, {&(0x7f0000000300)="22631438cf860da80781e9c5cf307983883bb22569d7e760fb0a86939456a9d95f1e03ec233676c6dd310e2975f02cd88e64eb6293a18d6f208558408574d98c756406e35a6bfc6cb50efecc3e280fa39cffbc57fad1bf49b043e57fb22fa33c4d", 0x61}, {&(0x7f0000000380)="06f337acee08e62e7350858cb1", 0xd}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f00000003c0)="d4abec474d3c103a05b0155329d78ac044b9e7f639da57e90bde4c3c755b43df3a15884aa065a3fdfef7e2389b486a13dfa60fb12fdec95fd4406fca93871bf0ff34b5a484dda174051f122badd295bc8e773561577f269a37611f841277e9ee1774c594255796b694e3c74b5036fc724d8440557a322abb3f12ecc0b6d89b8ea86dbf8bc0c187e9804eb6ee86dca0ecb14edc2b40c6288fcc87d94fbecc9a06e96eb6738481bc1c2be78cebeba0eb2842fc39fd84486243f64e435b8178a4e6fd8067a9d96aa907b1f88e68e777ab48acfb624a2865e448d2178f7986ee51b0bb055bdf853729090a", 0xe9}, {&(0x7f00000004c0)="5edb8cdcc0a8f73b85e0fed4d3280e8c414af24769d68402a940f3d305f4cab04aea68d12771c6478a1f6c3679a0310411791bf4014e421163c5e3fa9a223848694889534cda70f15f3e24b9a5ae49176401788b505ee04aa939aff12223f5c036d0f46064ee1c8888682225186b4e85d31eaadeeb3f182c9ecbbf75dc5418b65c0c6e94dadc49d0873c353f3e98f925722a23770da8844838462c824795f1a84746ce309a733798c5d220544e45e0eae38c815ecacdb3b2f5932dd34bc86c54cc1d9d62e5b4607a5284fa691d48feb08098d9f086cb5ba00b53c7412ab162aa8479053e2fcaf83ffab1af85a86474d860", 0xf1}, {&(0x7f00000005c0)="d41e4eb3c86b66bdbf9db5a9f3b186b90734bc1aae1e59c46498250b1e80605c76868173", 0x24}, {&(0x7f0000000600)="104f093e0a8b02a2067770", 0xb}, {&(0x7f0000000640)="6d0c50e4e7530a3cd08acb8298fcee9c04eb1907e922e41a4ce02f1b89eaeb3a413525c2a788f5dff11431c9990845bad78d86259f4e321dced01aaffbcaa9089be89c65ff7af116f84b621401de350fdb64d6c5785c2bc880a1afaba86a23a4260f667822a980bba0542bb84f4dcfef649371ece0323d357a31c0bb943656b3b73677170f8c568805bb3bce62bf2fce28db1ca373945a6d580c98b6213eed4103150974b9c80bade8f16643078b795979f59fa91bb0fe01104a01b7954c3d0b0cb01a3e7e82803d9e23615c1594e69c8983ffbc399806", 0xd7}], 0x9, &(0x7f0000000b80)=[@rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r1, r1]}], 0x90, 0x40004}, 0x4040) r8 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) flistxattr(r1, &(0x7f0000001000)=""/4096, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 12:59:57 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x4, 0x1ff, 0x5, 0x7b3}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:57 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000000d00000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) ioctl(r1, 0x0, &(0x7f0000000180)="85813e143a8692ae37a73066d7fe9dbea3a3d8b6d2f4e6693f324e87df34e904f4ad155b3aedee1ca9da64fb5f8c6dab6bda05a76f362cebe0d55599b2966749ee97032a4445643e402b660bfc1c2bc20e1852d1e1") mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) getsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000340), &(0x7f00000003c0)=0x7601620f26fd073a) 12:59:57 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000001000000000000aafdc576a48de7621aa04382e6f175ef731a86f67206f82bd3f3b16f6c15608e80505060dcad7804e60f4519d3d62fe95af82fc831c95549be1fdb3ae4a1b1d88aa2abc457b037", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) 12:59:57 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x10}, 0x14}, 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind(r0, &(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sockfs\x00', 0x0, 0x0) 12:59:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 247.977220] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.100669] binder: 18720:18723 got transaction to invalid handle [ 248.100679] binder: 18720:18723 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 248.100969] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.180712] binder: undelivered TRANSACTION_ERROR: 29201 12:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8040080}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x102, 0x70bd27, 0x25dfdbfd, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x700000000000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x20048005) 12:59:57 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0xffffffff8000201f}) fstat(r0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'veth1_to_team\x00', @ifru_settings={0x5e6, 0x40b3, @fr_pvc_info=&(0x7f0000000000)={0x3f, 'erspan0\x00'}}}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000076eff4)) epoll_wait(r0, &(0x7f0000ca7000)=[{}], 0x1, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)={0x100000001, 0x50, "f3331243dc6f1745a3ddbdfba6574c9d5565cf06c2defa76ac1e4b2ce50eb12b5eb935510c1153d9136844e8f8272d6fd77057772926ac6599dbe04759b50ec376efd6297ba67e9287025811661d5304"}) 12:59:57 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000180)=0x4, 0x1eb) r0 = socket(0xf, 0xb, 0x80000000) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffff9c) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000013c0)={0x5, 0x8, 0x1, 0x7, 0x80000000}) accept(r0, &(0x7f0000001500)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001400)=0x80) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003780)=[{{&(0x7f0000000100)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}, {{&(0x7f0000001280)=@nfc, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50, 0x32}, {&(0x7f0000001340)=""/78, 0x4e}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000001440)=""/67, 0x43}, {&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000240)=""/56, 0x38}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/30, 0x1e}, 0x400000000000000}], 0x3, 0x0, &(0x7f0000000000)={0x77359400}) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)) 12:59:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x400004) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x4, 0x3, 0x0, 'queue1\x00', 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0x1000, {0xa1, 0x3, 0x7}, 0x10, r3, r4, 0x0, 0x1, 0x8, 0xf59, 0x2, 0xef, 0x5, 0xc0b2, 0x3, 0x9, 0x4, 0x1, 0x7fff, 0x3, 0xf43}}, 0xa0) [ 248.303584] binder: 18793:18799 got transaction to invalid handle [ 248.306796] loop0: p1 p2 p3 p4 < > [ 248.315195] binder: 18793:18799 transaction failed 29201/-22, size 1543731582371834872--5918749912207421856 line 3018 [ 248.327794] loop3: p1 p2 p3 p4 < > 12:59:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3a) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x42, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000280)=0x1, 0x15e) close(r1) 12:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="029bf92ded54d7f14b8913a15cc83d6d345f8f762070e0e521c92195caffc363f3fd5fcbcce37f3125b7fce6ce4c06934993f5a88a63a5a41d70ec6ebd141da5030000003bbf2ee7ed2a9b6b0db10837116222bda178b5372ae6ab940ae8cdf86943f8080fc17991f26be6c15ef189423621e3153080d10000ac6b9cfc8083137b94663d9ece4ecf5e8a26b852882bd76ea74d361524451be226235029d11185742c33e4f0b3590ba83a908dfa606df67eba436fb2d8c0f441b27771b6523fa503c87938ef32e8f9bef542262ec87e89ba1c3e0ae95fcb") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 12:59:57 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="b65026e34cc6f733ea099ccf642f399f98ef95edec2462bc655af3fa66fbab343ff127518023c6892352e3438664d4e9f7db1898c1dbee82a082e45984938ea18f43b636efc233b0eec16e77514173600b063553728525bfd6287a7dfa8cbea66920629601b9360893db0c0a98fb756c11053080800149bf97d64385d4de6af5de62211a49d34a663ed084dbd58a0ba600731ed35d18e493c061b9653be8e418a9f8c83b7d344cd7468f41dcd258a3cc1700a82d657c8b926d9769c2f34e65a7b760a65b6bb84e4a288c7642", 0xcc}, {&(0x7f00000002c0)="a0be5e10d13109449a2d42b98dc10ddd3e1462", 0x13}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x710, 0x4000000}, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r1, &(0x7f0000000380)=r2, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000420007031dfffd946f61830002200a00090003fcff1c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 12:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f7620702a9965d50909ae0d1a64a3bfabadbdaee76469915bea86cc5e997164e130efe225753972218f5c63d05d9d56fed027e7ad3ed3b91e5dbfbee377e53e919b97a65a33d7ba3c376ffd4521e78befd732ac7ed53d734fe40910e6ba08c19c9befd4ce67ab") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 248.477836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50764 sclass=netlink_route_socket pig=18852 comm=syz-executor5 [ 248.479799] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.543490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50764 sclass=netlink_route_socket pig=18861 comm=syz-executor5 [ 248.634494] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 248.675572] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 12:59:57 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x4, 0x1ff, 0x5, 0x7b3}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 248.728007] binder: 18798:18802 got transaction to invalid handle [ 248.735937] binder: 18789:18801 got transaction to invalid handle [ 248.742771] binder: 18789:18801 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 248.753350] binder: 18798:18802 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 248.764078] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.770353] binder: undelivered TRANSACTION_ERROR: 29201 12:59:58 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d661f9e12a000000800", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x3, {{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) 12:59:58 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = getpgrp(0x0) ptrace$setregs(0xf, r1, 0x200000000000002, &(0x7f0000000480)="0e34ff8742156e30afea5a861bf9c1482a172570c9c42db4715197c4c01e82d1ddfb1e6f067b6982d20c50a97de62f4ca15eaecad7f6731158ceff69269e925aed727c8cdd66fb9fea6fb367f7bc5972a09aa77b6242da7d6788fd8efafea0fe4c9f7d3bd19077837d18fe3dd2b97ec3") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) tgkill(r3, r4, 0x25) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000100010000000000001d509fc6456ea4e6a68e59f63b12ab87fef02f010d75995ee5f0f68cc974a48dde2494787840704989bae541af52577caf02bedcecadcf4bf7f260fde6bedc60cdc41539754247f5df37a4ab2186942f492f63e58f6e2c5e1e747c262c8e06a7d733f46ea250dd8415c399d9220ccd882eab8ef89cc616c481e710059c0071969de4b29b29d284f29458eb8c0b9157fb0aecfbe41cafd9959944d71eddebc04457b009b1dfbf09da30556360b4ced167da62c9f953c9de4bc572de02321f1e84783ccdb6c37694", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0xdab, 0x0, 0x81, 0x7, 0x3, 0x6, 0x1, 0x359, 0x38, 0x2de, 0x1, 0x9, 0x20, 0x2, 0x4, 0x3, 0x2}, [{0x60000007, 0x0, 0x6, 0x5b33, 0x4cf1, 0xfff, 0x1, 0x81}, {0x7, 0x0, 0x8000, 0x9, 0x1, 0x7f, 0x9, 0xffffffff}], "799986aa9fc33fdfcccaf19242307522de0d8dce8f910b7f0551b78f69c0f4c3dcab9713fa53f99fc8c67b4e4a8b60e0d9a6f884a4cf773bfbd3f04381b3573b453e8ffd06622a4ccbd75dec4d5155cd875d91e38550cf042785946dd469d379859d813db31687c289138676afc63a469f3b1ba3e5abfd18c3c57fcae8700d777578c84333aed8bfd79e94ddad8451778020ded3", [[], [], [], [], [], []]}, 0x70c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 12:59:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="b65026e34cc6f733ea099ccf642f399f98ef95edec2462bc655af3fa66fbab343ff127518023c6892352e3438664d4e9f7db1898c1dbee82a082e45984938ea18f43b636efc233b0eec16e77514173600b063553728525bfd6287a7dfa8cbea66920629601b9360893db0c0a98fb756c11053080800149bf97d64385d4de6af5de62211a49d34a663ed084dbd58a0ba600731ed35d18e493c061b9653be8e418a9f8c83b7d344cd7468f41dcd258a3cc1700a82d657c8b926d9769c2f34e65a7b760a65b6bb84e4a288c7642", 0xcc}, {&(0x7f00000002c0)="a0be5e10d13109449a2d42b98dc10ddd3e1462", 0x13}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="800000000000000001010000070000000ed1ff924425aa75b40751049bd7676220ea64314887c2031cbd32b0653e99d9ed17c5394b48d7283c5e2c1586ee66cc0a6859dd1965b203ba4942a83a1e23bd7583cecb875319bc5f691e60d07c587c83a0f4d48d004a31872a4ce0ec96051c8f7cd330bbb286569b959273410cd1d008010000000000000d010000ff0100000b2ff3e4c7ff2ce8e3d12b77e29573a6deafe49879d8b29d593151b20ba89cd27296027afaaa150194d96c77d7762f6632bc376d00e3a7976f9b310628d527b1f2e36ab42ade5246713b8e9fb21b1af9f8d47f4f5c3c4fea1b6026d33749ada93560ffa328d851eb1719dca1eab947fe835fb11c045744f5cecb2468ea7d9ab43ac9facccbba95da1b79ec8306e6c4f542f560caf7da4061ba33fa048a471cb169268ab1f68c80a48ba451d96d3375956a9d3c5e8f68a094201c1153494de22d3d4840d0d05c3e7604374f497edef0f7a3aff673196293c238153cd886f1c245cab78e3d16fcb53bc0098282c603d6adf365234989000000f0000000000000000301000004000000360029834a4f46f28697a469668a5c1a5c07da2724b8267d680697b49b3478b72c4384cd9055f04b5f3520d4528d8df5560525a3093e604cf1560c1c6598e5a7b8732f97790618fb09f4c1f0dd5150a5ac7fa1111d4a41e8472b7196338d282591f449eb60616ccf6b1da9e56b0e8d327d13caf5818afa6c34ea6442dfbb3e23d40e6b581d78761753e6b0b8294b36fff023ad1276c382d0574fc6c4ca9528a0c89b982ce1f8826ec736be8c7122b1dea4b78b32695632db0f43f39c02faaab8ff7d3efbbd9f3ad19d65b63f9602daa33a1a875532bd8782d38350f200000000c8000000000000000a010000070000003f0d0877406740745e582465b41bbf869dbeb8577d3c32e8049db09b0a2a5c95d2580ad23149a84f6be4aae69e59079caf014aadd0d94ca385ad1a8fdfd5a6ae77d2e3dcd225f885178cf53acd38585a909f21d28a8100c0e993a985d3d8565fbbc4b6a786e9805e726ab6979c248f497ea08c3db6f5f059fd475cd4a06468104a3325ba73a3542ca63306d5768dc3c313ffc501bccfb48e07e0ffc87f8dc5a0978c8e45a1613cb80f2270df0b7b6b3bc40fe5b384edd98d0001000000000000090100000100008078dfe48e217547eaf56830e29eceed0af6d61ecbe73ea45bb40bba424af5ebe5dd5549f82d17b09943530195089dc2cda0bc30b7156c34e7520fc897a2fcc00657d9bfdcb556663fa663f9a0c73c7144f188900fc24bf066114b0641495da957a9665e99074ed869bac535667926e38593f5319921f3266f2964db260582fc1a582b947d50ca8553ef08423a0af918aaacea475c57acc80a4e5510cb5f2b540d47049796870fa81d61d7415198d37a4f66fd3c4ea0b6c01f6ede90702724e21f5b7ab617a363afc7882137c79c2c52273f88a45d604a59441d19b45e5efa219122421cfd3705ee23970300e47de55200d000000000000000180100005c89000018da7575cb2adef6aaa9836cf52332b1511f7e7c2205070a2015bf334b56d5004ebc77d37504635149fa0999dd3f052777345a2dc499936ccd3c8208b7bbc919e9ef4d7af6ecf22fa7381a465d169199eff2c284d1ed0160a450ef93209ee56767fefafeb6143a6fb37ad622cf687ee2508d504559a4101699858dd3265aff0703dedd221c96d0d5d33c7a7ca2e7ec5df988d2ee153e9ef583c5780e0b2e164bb14b60581f0a436cc20cc88890eb14c823dd6787f54ba14832923a05b2332f4bf0000000000000001f01000008000000db1ef7fe2ec2e027d1a68239557600f31aa46e514bad56159a982d82b29eadb8d631e97b22510bd6c6820bde448253c8b7cb04cfd21b393f534d76079eed7313e0fdcecf65cec8713aca4a0dec7c3f56576bc4c3d2a8c9390edf96a282f75e569a010b8b2c627de56319c888ce3a74cb946c189696e6d3bb044bd9b8ee437ccbafcd6edc270747ea1c110210f237262085a5d5e13a64b67b23d6ec3be4fb518184355408f0d5d5e021ad57d58b2d8aabc8d83b722e9ba29d3e2e491fd02728f008a4c6ac7ddf4c4de6410824cd8b6a7e8f59ba8f2ac7d51b534ce9041f710500c8000000000000000a01000003000000b272dad3972c5e25cc3411ee53e5a9960afbf5cae79aa872074fb018d06b03db5bae392c9644e45d1a12565a575e789b2cd6295eb83afe14bc19fe35f4b36c466138d107ae79180185f6c226e8a25dd52b28401bc3a4608a465435d05888df0a0e95767c7de43a04dfee2ae085df159e7a11960db307f283bdec025b4d279a5938dabf9babbdb495239cae6f7e7b1d6907eb20d13a58487abfd65d6b848a95e75b7cad61973ce48942e3a752e63d94c5956e05156ad7720048000000000000000600000009000000951f863bd051cf40ac277ef53826291bb7f1b2ca33b123fd326937c72f0f6a7bb151d68cf11d036e81"], 0x710, 0x4000000}, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r1, &(0x7f0000000380)=r2, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000420007031dfffd946f61830002200a00090003fcff1c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 12:59:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x4, 0x1ff, 0x5, 0x7b3}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) fstat(r2, &(0x7f0000000040)) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) [ 249.186469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50764 sclass=netlink_route_socket pig=18898 comm=syz-executor5 12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="157072000000000000000000000000000000000000000000000000000000", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x1}, {0xba8, 0x7f}, 0x5, 0x2}) 12:59:58 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 249.239674] 9pnet: Could not find request transport: fž  [ 249.261418] 9pnet: Could not find request transport: fž  12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) memfd_create(&(0x7f00000000c0)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000100)) fcntl$setlease(r0, 0x400, 0x3) [ 249.268017] binder: 18893:18905 got transaction to invalid handle [ 249.268027] binder: 18893:18905 transaction failed 29201/-22, size 8415412370949889689-4645595593301724580 line 3018 [ 249.308264] loop0: p1 p2 p3 p4 < > [ 249.371915] binder: undelivered TRANSACTION_ERROR: 29201 12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 12:59:58 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000900)={{}, 'port0\x00'}) memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) bind$unix(r0, &(0x7f0000000180)=@abs={0xf3f88ab20d182dd1, 0x0, 0x4e20}, 0x6e) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$setname(0xf, &(0x7f0000000140)='/dev/loop#\x00') setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000066fff4)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000200)) [ 249.470317] loop3: p1 p2 p3 p4 < > 12:59:58 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/113, 0x71}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000840)=""/172, 0xac}], 0x7, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000009c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x9, &(0x7f0000000a00)=""/27) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12c0c860}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@getroute={0x14, 0x1a, 0x201, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8011) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="008d0100000000000000f3274e1a13ee429dc354e5608feae9e38f10ef2b0aa4575e3f6319ca9bd50500e5163f05ed2e2adbcd8300000000000000000000"]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006f406600000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r4) 12:59:58 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = getpgrp(0x0) ptrace$setregs(0xf, r1, 0x200000000000002, &(0x7f0000000480)="0e34ff8742156e30afea5a861bf9c1482a172570c9c42db4715197c4c01e82d1ddfb1e6f067b6982d20c50a97de62f4ca15eaecad7f6731158ceff69269e925aed727c8cdd66fb9fea6fb367f7bc5972a09aa77b6242da7d6788fd8efafea0fe4c9f7d3bd19077837d18fe3dd2b97ec3") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) tgkill(r3, r4, 0x25) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:58 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) 12:59:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="9caccc070011b26c762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x402) recvmmsg(r0, &(0x7f0000003600)=[{{&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f00000014c0)=""/130, 0x82}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001580)=""/149, 0x95}], 0x8, 0x0, 0x0, 0xfffffffffffffff8}, 0x4}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002700)=""/168, 0xa8, 0x81}, 0x7}, {{&(0x7f00000027c0), 0x80, &(0x7f0000002b40)=[{&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/219, 0xdb}, {&(0x7f00000029c0)=""/139, 0x8b}, {&(0x7f0000002a80)=""/114, 0x72}, {&(0x7f0000002b00)=""/28, 0x1c}], 0x5, &(0x7f0000002bc0)=""/204, 0xcc, 0x4baeea2b}, 0x7}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002d40)=""/244, 0xf4}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)=""/210, 0xd2}, {&(0x7f0000002f80)=""/100, 0x64}, {&(0x7f0000003000)=""/205, 0xcd}, {&(0x7f0000003100)=""/183, 0xb7}], 0x6, &(0x7f0000003240)=""/231, 0xe7, 0x1}, 0x200}, {{&(0x7f0000003340)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/51, 0x33}, {&(0x7f0000003400)=""/231, 0xe7}], 0x2, &(0x7f0000003540)=""/138, 0x8a, 0x100}, 0x5}], 0x5, 0x2, &(0x7f0000003740)={0x0, 0x989680}) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000003780)=0x3ff, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000040)={0x2, 0xe70e, 0x10001, 'queue1\x00', 0x101}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 249.621536] binder: 18961:18962 unknown command 1715498752 [ 249.665836] binder: 18961:18962 ioctl c0306201 20000440 returned -22 [ 249.716247] binder: 18897:18902 got transaction to invalid handle [ 249.742753] binder: 18961:18986 unknown command 1715498752 [ 249.750662] binder: 18961:18986 ioctl c0306201 20000440 returned -22 [ 249.753725] binder: 18897:18902 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 249.761677] binder: undelivered TRANSACTION_ERROR: 29201 12:59:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000001600)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001680)=""/23, 0x17}, {&(0x7f0000001780)=""/252, 0xfc}], 0x2, &(0x7f00000018c0)=""/217, 0xd9, 0x7}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/54, 0x36}, {&(0x7f0000001a00)=""/25, 0x19}, {&(0x7f0000001a40)=""/234, 0xea}], 0x3, &(0x7f0000001c00)=""/74, 0x4a, 0x5}}, {{&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/246, 0xf6}, {&(0x7f0000001f00)=""/48, 0x30}, {&(0x7f0000001f40)=""/22, 0x16}], 0x3, &(0x7f0000002000)=""/41, 0x29, 0xfffffffffffffc00}}, {{&(0x7f0000002480)=@nfc, 0x80, &(0x7f0000002540), 0x0, &(0x7f0000002580)=""/197, 0xc5, 0x8}}, {{&(0x7f0000002680)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/32, 0x20}, {&(0x7f0000002740)=""/160, 0xa0}, {&(0x7f0000002800)=""/90, 0x5a}, {&(0x7f0000002880)=""/110, 0x6e}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/191, 0xbf}], 0x6, &(0x7f0000003e40)=""/112, 0x70}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f00000015c0)={0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="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", @ANYBLOB="6200000a08000b0000000080"], 0x2}, 0x1}, 0x0) fchown(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001380)='/dev/md0\x00', 0x408001, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0}, &(0x7f00000014c0)=0xc) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)=0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001400)={'ip6_vti0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001340)='./file0\x00', 0x4000, r2, r3, 0x1000, 0x80000001, 0x4080) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x20, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x20}, 0x1}, 0x0) accept(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x80) 12:59:59 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="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", 0x200}]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x1) fcntl$setflags(r0, 0x2, 0x1) 12:59:59 executing program 1: remap_file_pages(&(0x7f000064d000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x20) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x7, {{0xa, 0x4e20, 0x1, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}}}, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000240)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, r2, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000001c0)) fstat(r3, &(0x7f0000000040)) 12:59:59 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000017c0)={0x5, 0xfffffffffffffffd, 0x7, 'queue1\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)="eac92bcdb5ffd6a55e63761e41dd27738d6a5bae42aa6507e1686ae928344a843cdb613a04cb40") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 250.013719] binder: 18894:18900 got transaction to invalid handle [ 250.020609] binder: 18894:18900 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 250.031955] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.079061] mmap: syz-executor1 (19020) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 250.088098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 250.115066] Dev loop0 SGI disklabel: csum bad, label corrupted [ 250.121393] Dev loop0: unable to read RDB block 1 [ 250.126888] loop0: unable to read partition table [ 250.132341] loop0: partition table beyond EOD, truncated [ 250.139066] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 250.142567] binder: 19016:19018 ERROR: BC_REGISTER_LOOPER called without request [ 250.142578] binder: 19016:19018 BC_FREE_BUFFER u0000000000000000 no match [ 250.142586] binder: 19016:19018 got reply transaction with no transaction stack [ 250.142593] binder: 19016:19018 transaction failed 29201/-71, size 72-56 line 2926 [ 250.147153] loop3: p1 p2 p3 p4 < > [ 250.150619] binder: 19016:19018 got transaction to invalid handle [ 250.150650] binder: 19016:19018 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 250.152154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 12:59:59 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1deed500000000", @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 12:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x200) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0xc0045c77) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "f78ee69fd4f19ec150375b85c314552b81393dc3b28d8eafc2fbbe525255d894c80eb24b69267e5a0dec25897ff4bee453b733f611c1c52316f0ad6e35fa1515de63"}, 0x46) fstat(r2, &(0x7f0000000040)) 12:59:59 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000001600)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001680)=""/23, 0x17}, {&(0x7f0000001780)=""/252, 0xfc}], 0x2, &(0x7f00000018c0)=""/217, 0xd9, 0x7}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/54, 0x36}, {&(0x7f0000001a00)=""/25, 0x19}, {&(0x7f0000001a40)=""/234, 0xea}], 0x3, &(0x7f0000001c00)=""/74, 0x4a, 0x5}}, {{&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/246, 0xf6}, {&(0x7f0000001f00)=""/48, 0x30}, {&(0x7f0000001f40)=""/22, 0x16}], 0x3, &(0x7f0000002000)=""/41, 0x29, 0xfffffffffffffc00}}, {{&(0x7f0000002480)=@nfc, 0x80, &(0x7f0000002540), 0x0, &(0x7f0000002580)=""/197, 0xc5, 0x8}}, {{&(0x7f0000002680)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/32, 0x20}, {&(0x7f0000002740)=""/160, 0xa0}, {&(0x7f0000002800)=""/90, 0x5a}, {&(0x7f0000002880)=""/110, 0x6e}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/191, 0xbf}], 0x6, &(0x7f0000003e40)=""/112, 0x70}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f00000015c0)={0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="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", @ANYBLOB="6200000a08000b0000000080"], 0x2}, 0x1}, 0x0) fchown(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001380)='/dev/md0\x00', 0x408001, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0}, &(0x7f00000014c0)=0xc) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)=0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001400)={'ip6_vti0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001340)='./file0\x00', 0x4000, r2, r3, 0x1000, 0x80000001, 0x4080) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x20, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x20}, 0x1}, 0x0) accept(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x80) 12:59:59 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000200000030"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 250.232549] binder: 19016:19033 ERROR: BC_REGISTER_LOOPER called without request [ 250.240637] binder: 19016:19033 BC_FREE_BUFFER u0000000000000000 no match [ 250.248730] binder: 19016:19033 got reply transaction with no transaction stack [ 250.257355] binder: 19016:19033 transaction failed 29201/-71, size 72-56 line 2926 12:59:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 250.301041] binder: 19016:19034 got transaction to invalid handle [ 250.328205] binder: 19016:19034 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 12:59:59 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x400) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r2 = pkey_alloc(0x0, 0x3) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/13, 0xd}], 0x4, 0x0) pkey_mprotect(&(0x7f0000a3f000/0x1000)=nil, 0x1000, 0x0, r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/141) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000040)) ioctl$KDSKBLED(r1, 0x4b65, 0x5) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) faccessat(r1, &(0x7f0000000240)='./file0\x00', 0x108, 0x1000) 12:59:59 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x200000) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0xfffffffffffff048) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 250.347929] binder: 19012:19017 got transaction to invalid handle [ 250.347939] binder: 19012:19017 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 12:59:59 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000001600)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001680)=""/23, 0x17}, {&(0x7f0000001780)=""/252, 0xfc}], 0x2, &(0x7f00000018c0)=""/217, 0xd9, 0x7}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/54, 0x36}, {&(0x7f0000001a00)=""/25, 0x19}, {&(0x7f0000001a40)=""/234, 0xea}], 0x3, &(0x7f0000001c00)=""/74, 0x4a, 0x5}}, {{&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/246, 0xf6}, {&(0x7f0000001f00)=""/48, 0x30}, {&(0x7f0000001f40)=""/22, 0x16}], 0x3, &(0x7f0000002000)=""/41, 0x29, 0xfffffffffffffc00}}, {{&(0x7f0000002480)=@nfc, 0x80, &(0x7f0000002540), 0x0, &(0x7f0000002580)=""/197, 0xc5, 0x8}}, {{&(0x7f0000002680)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/32, 0x20}, {&(0x7f0000002740)=""/160, 0xa0}, {&(0x7f0000002800)=""/90, 0x5a}, {&(0x7f0000002880)=""/110, 0x6e}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/191, 0xbf}], 0x6, &(0x7f0000003e40)=""/112, 0x70}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f00000015c0)={0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="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", @ANYBLOB="6200000a08000b0000000080"], 0x2}, 0x1}, 0x0) fchown(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001380)='/dev/md0\x00', 0x408001, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0}, &(0x7f00000014c0)=0xc) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)=0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001400)={'ip6_vti0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001340)='./file0\x00', 0x4000, r2, r3, 0x1000, 0x80000001, 0x4080) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x20, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x20}, 0x1}, 0x0) accept(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x80) [ 250.348984] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.368140] Dev loop0 SGI disklabel: csum bad, label corrupted [ 250.368168] Dev loop0: unable to read RDB block 1 [ 250.368187] loop0: unable to read partition table [ 250.368233] loop0: partition table beyond EOD, truncated [ 250.368242] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 250.371496] 9pnet: Insufficient options for proto=fd [ 250.428668] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.434176] 9pnet: Insufficient options for proto=fd [ 250.463471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 250.551290] loop0: p1 p2 p3 p4 < > [ 250.579773] loop3: p1 p2 p3 p4 < > [ 250.624601] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.626414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 12:59:59 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000200000030"]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 12:59:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 12:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8901, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x200000, 0x0) r5 = getpid() r6 = geteuid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000d80)=0x0) fstat(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() r14 = getpgrp(0xffffffffffffffff) r15 = getuid() stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001280)=0x0) lstat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001400)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001540)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0, 0x0}, &(0x7f00000015c0)=0xc) r23 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a40)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002b40)=0xe8) getresgid(&(0x7f0000002b80)=0x0, &(0x7f0000002bc0), &(0x7f0000002c00)) r26 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002c40)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r27 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000002c80)=0x0, &(0x7f0000002cc0), &(0x7f0000002d00)) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000004280)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0}, &(0x7f0000004300)=0xc) r32 = getegid() r33 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004340)={{{@in6=@ipv4={[], [], @broadcast}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000004440)=0xe8) fstat(r1, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000004500)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004540)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}}}, &(0x7f0000004640)=0xe8) lstat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000005ac0)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="05c79fd6ecc30e3811814b157eb2e17da913d9349b72c7aca363677ba9c51811160fa23b98bfa54d98b569b864192d74292aa48c8d73bb88d666be1ea11efe72f7fcd60516266b4063e9a5475b58cdbf3f8668cc8213f42e09f5d61b7f3d6dc9ec022b674a38a9ef9d881b8ed6e6f44ee7054991bc93b7240e62c60e58997e62fd6750a9a4ba625a1079f2ac84e28d05e1fb5621929935f07e91886cad13ac83487c2d9806a8f03244e6f713fb1897dd573a27edb5bf59939b2df585b2c1655c79c650f2d19688d5d6cbf4cc6f46354ecf65d3292c2ac1", 0xd7}, {&(0x7f00000002c0)="c3606443430d9ee5d10c053a709d17b23b3be7c0a49132ec3bb2761b9630b046", 0x20}, {&(0x7f0000000300)="42edca21fdb42a7d1a6d44dee55af8a213117c5233cec1cb306927d1f6479981ecb3dff8f8ccf781fc8c8a87a5d53b5b90bda153feb1ea0140fce9f700d35cc9bfe3e6536a38dbb8333b4f6e79da29bc96b2692db1bd6123555f231390cae3dd632cae0f00b65148", 0x68}, {&(0x7f0000000380)="9903a19c3ff0eb315da1929048e06c6e97a1c49cb1169a41c73c5d2fb66302bf673aa618260a65ec8aa7590b60fff3b04f6134ed0b958e9a46af1a6f06b5c5f3b34d0a587cb6068427decb429abd7fdba06d310dafc98f01937c0a44173862073a839c195e3706793b615c8fb02c36ed6d256bca17cabce392c5ff4aa44e684ff0f1cde18e998e9c06520c40bb08d724a0c116ef9fe222ba0efaa6bd55485a117be5d3b6b6f3feeb2f2711949238b86a19d0a280a8b16d4968dd7a7e5047857759c5daf8344519ae7f4358a6a37f88ff320b1e8142990d3d7646cd43681b969acfbc3df1cfffe1c23792fd5231f7cca8", 0xf0}], 0x4, &(0x7f0000000800)=[@rights={0x20, 0x1, 0x1, [r3, r3, r4]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x78, 0x1}, {&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)="3644f2f0cbce6d0207b8848f0bba283d9f75f6e264108da9f4f6be5e91ffe06d909ff89d5fc4df5ad0f04fc835e5bdc44f9f7197a6faa1c5e10185e06f5f69fb46a1488a9a886e530e8015d206fce6b3de3a51ec51e1e542fe1a6a0f8101ac3ba6c0518ca1d8e4840a4ff2eea66d757520b37eb6ace0527973af39f5e69e5998885cbc1d2929b2a9b9f99d4abd5abc2a59b2cfa93308f6de", 0x98}, {&(0x7f00000009c0)="ca8003335a12edabe3344627d04b64118600098e6a806b6f20e00ff4448da137e964a4be9301ac3b0e06f8b0", 0x2c}, {&(0x7f0000000a00)="126e275c1be26094773b034820a2a37280622314b89742c54d6007d8744041077e41e4f3ca3bca6df715b19cba007937c5392dad5aa9faf67f9ff567bc40e805c3d1dc8a7e96f019ca94e6858114afda709e59482cbcd0c27f66b153121a7490685c306577b80945591b4752a9bfc4d30b205284b5407a4b5e954f8c07adb066b9944e9038ec15707f6d80", 0x8b}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0000000020000104000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0], 0x78, 0x40000}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c00)="bac963a006d67537e7358faec95de4318acd5abbb3395d3ddee468ac7666885050efb2129e37b92758fd1cd3f5c9d8", 0x2f}, {&(0x7f0000000c40)="b57ee12980b23fd7cad34c9b5e603bc904fbfdc45dd803adb02b7e66ac9c2f1e8b457946de5d7c6ed2ee81d08b89bd390d501f60058797238785f2042ba5380eaf99f07abc3894bd3ca457e3151737894f339552bf70a2560d8ecbae7b4bc7cca67a17838f83508aca13039d27b3972906838394c233264b76eda216dce65d6506e24c42734efcb6c9", 0x89}, {&(0x7f0000000d00)="e6a88b25daed28b017a148936a31c59b3e2cdf80e83fa176", 0x18}], 0x3, &(0x7f0000000e40)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x20, 0x20048000}, {&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000f00)="40aa43768387d1cb4a2079a21511bb4f44106640707d897d194951cc38400be32cc1b020101b193555fe574ccb4e6b5ac293a0e3f4ce194fa875cdad5d6ad8a86c8896f628608b498af87cb0daaf793ef0e362b6718c0a6d49a8905f45e917289036a19a87d520a197b4d98267f466d7d02294609984cf6bba392bfcf19c1f369af90926b9ff2c5d8566d859a4d9c039983a1052714e911b94c45e10d7da3aced73266f017c8c5ce5c2440cb26188b29983b2b04f874ab7dc617571deddca6ead6", 0xc1}, {&(0x7f0000001000)="3dbcf4cc7ae1d2e621c2ea131bd50bc09b3e130a272d577f15e543b91b2bf53b81814ee09bf8df609214a6ebfffb6bb6d2cb72cb9dfe6636e04f7b6a6f6e0ee70f4fa7e49900294137ceb8f55e46f5eabdc2e11d205752cd2909cea509df7dfd7bb0efeb0a92e67d96b966eff92a0c767696c58dd19186687194158709", 0x7d}, {&(0x7f0000001080)="73d895a9b03bfdc4c7d2c9cfe24d052646cf28821304c78b49ac6aa3131a45c658999da61bb936a78dc1ea1343d2dcca93de796c3ecd18fe3c2ad357a7787607dbbcb997a0a26083128b85a71b005f1aac49fe83d378f8e3c61423a9d4bdfdf5131400217a108241618e2f6320b315b590e25eeab7469fe7adfd043369ab8a9ec2c22880f99e81f1bd8f2b9c769665924f11faf899235ef6ea1eaa121ea96e947b63f24ca1d6d5a8a246e18cbdd09fba788c0c4b62e3391f93f8bb1b2a6e94bd9edd1d415f6eb4da4d9446555db6b1e15de4c519ecfd7fa8b46711bce0a676e73d7e27f3a7b85f83314d11", 0xeb}], 0x3, &(0x7f0000001600)=[@rights={0x28, 0x1, 0x1, [r0, r0, r3, r3, r0, r2]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r2, r2]}], 0xa0, 0x40}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000001740)="478bb0eab64f17b87e8c4ffb786a15f26b0b39cd1ffe5c46f7ebb4d8adedae2c4ad210906fb9091126551e8937508ef76a4bb7e37ee7edb28367359a34b97a211b5a950205ab9054d119be0779eab9104744c2a9bfc29751c9bf25850bf73a71ec4034cd2e1e19d99193cdd065ca775125d8b6b237837c", 0x77}, {&(0x7f00000017c0)="1ad40fde991691ca659b11eaf266d1a8015a29b608355acf5f1599aafee0dba71f6e4924de94f6e9428c2e20764468878158", 0x32}, {&(0x7f0000001800)="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", 0xff}, {&(0x7f0000001900)="24ea539ff36e8b053b5d548401000e66b84a0e44abbe56602e53532c7a28e1407c819e7fdf44baaaef1d1b4b872d3c34028c4520e24d9274df04d96951315fae61b23b2080794a3f9269d16acb53cc54a8d1d1fba39e4c981d34a41bb4d51819df24382ee2d792c210714ff1c64cdd0bd681b12baef465228d5c258a1714983f1b7b1e03ef982c786689da31b27a695a2ed1a5cfd3283c116342594210c396f10e111e91c9a8597b34f29ef04dfc18a2393069f1ba259aaa", 0xb8}, {&(0x7f00000019c0)="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", 0x1000}], 0x5, &(0x7f0000002e00)=ANY=[@ANYBLOB="1000000000000000010000000100000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r26, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="20000000004d20cdf8d73fe62015bc1a", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0xc000}, {&(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000002f80)="a804bd3d65d813f480a445e0d3536d0549872b5a2d174d9fe8371f731128f5e14b7412a7691c62d7a6c59ba245dceb2f5e15ed7ea06e2fc1103608d6ecc0e997530b7a4a7e81b7f25eb5940f88bc34adfca99d1baef929b50fb57ad6c1e617fdcfc1a3da77160c0b419564d76a1333490e7e886543d71b67fa5fe9349091f829b45195a9c6a563bc6666192c4b4250bd4f4fd30920b76e5c22169456a7dcd3c229cc6fe2cfa8bf0e2bd0b0be", 0xac}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="a18f1ad3d3e64fdedb2f8072816f24e9274a11804fbf7482b2208377b4b24b754f2fb0ed97ed3d4bf8431957dba338658138fec4aed924160a0e3d742bc90519652571e57e7d0227bc264a33b5a923518347dc163edfa7729f3d0fffcfbe531693f26f5ee24cda2597d58aa3b72fe928863444c61f617d697fabce38f889885679a2f9a1ee124135c8629ba75421aae687e824f0efd30be45d986ca3b1f76519ed", 0xa1}, {&(0x7f0000004100)="92863919496a342f0b69e72eefb7f41e916d69636c21b8ff1d7e3ea6c5537ebbff00242e2de3abb8b38104a7c57f5011758fdb8fc07cea46c9c9ff9723711c7ccf157c35f285ac", 0x47}, {&(0x7f0000004180)="5087dedf0b3a8996999f341104c2f335a2a09d75", 0x14}, {&(0x7f00000041c0)="86f8d18882145e2927543fa87427ffe81decd0f9413d55dbdf0b52ba5a4e1194a3bf632d43", 0x25}], 0x6, &(0x7f0000004740)=[@cred={0x20, 0x1, 0x2, r30, r31, r32}, @rights={0x28, 0x1, 0x1, [r3, r0, r2, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}], 0x88, 0x10}, {&(0x7f0000004800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000004880)="c03a8cb3fe14a6cf96d9efbf3209e15d646bc3d18bf7ab35c6079e46104e448a21de0bbc643cbae365185f364eaf1cbccd85835704d20830debfc39c49a56aba678294a662e306547bbc1e144693615394f8f1859d175629ca50b651bcbf7ec002e328c8df9aa64414f09badc4ba4e461d5c93735caa86a6515e05dc1fa03bc1e1faed3aecc63b8d19c307b1dad57f7b3652e360bb49f010d72437929bc56168e7500260c933f59f618fdb800a9a9e90b46aaec50ca025df9a882eb1d7d7e75eff244c0d179fa41e57d4f8c5666f44c29233cf44676ca477d0df2edc2d3180cc820e35d7bebc25684f13d4e3dd5fe19236beb0d21dc503d71b", 0xf9}, {&(0x7f0000004980)="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", 0x1000}, {&(0x7f0000005980)="f43c232e7439", 0x6}, {&(0x7f00000059c0)="730a657708fe3cfb1088e9877ed18cd7f6f1aaf2e554741b61282dc7cafb398ea394252c1c608bd6096c6e3a2043abb7f350e7f75cd1c07a59f24d8c326629ed0bf90587af1ff424fb38c464145a0572c4e649c57946394dc514058ad8", 0x5d}], 0x4, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r0, r3, r0, r0, r1]}], 0x28, 0x800}], 0x7, 0x40) fstat(r2, &(0x7f0000000040)) [ 250.853411] binder: 19106:19109 got transaction to invalid handle [ 250.888454] binder: 19106:19109 transaction failed 29201/-22, size 0-0 line 3018 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x7, 0x9) ioctl$KDSKBLED(r2, 0x4b65, 0x6) pipe2(&(0x7f0000000100), 0x84800) mmap(&(0x7f0000e09000/0x4000)=nil, 0x4000, 0x100000000100000a, 0x4000000031, r1, 0x0) fstat(r2, &(0x7f0000000040)) [ 250.906380] loop2: p1 p2 p3 p4 < > [ 250.983688] binder: 19063:19067 got transaction to invalid handle [ 251.007544] binder: 19106:19134 got transaction to invalid handle [ 251.026167] binder: 19106:19134 transaction failed 29201/-22, size 0-0 line 3018 13:00:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 251.029906] binder: 19063:19067 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 251.031361] binder: undelivered TRANSACTION_ERROR: 29201 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, r0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x7f, &(0x7f0000000100)="fc51cc653614f6ebf7660a2b6c68b6963f8d6070e58d14459c1e2ab24979923234c11cfb2db44380324e79de4cd4b9e574931d6d0700bb05579ae951bc4662653cd5b2657a6ae534bacdf1aadd43b3b107c1a6ca4f8d10e584d30c24e5aba9102c977c7d9c33bf5dc58bf911c736e2eb87b45ba043d7e4d574b476def3c369980ab1309c32126ff22d4bef2d6738955a8c248151a1e541e7fd0b2a16c0e0a725b060b87cac7dc3be64150040f24cf4a095a67fe47c98e3192ef12dee68983f7ff38db23bc9a03830d45fb412d20ceba6eff2913ba2c83896c2a19b62f6c13275405cebbbe82091c220c38cad4e6a", 0xee) fstat(r2, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xdb43, 0x2000) 13:00:00 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x416, 0x0, 0x0, 0x4, 0x656, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0x4, r1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00$\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000131, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) fstat(r2, &(0x7f0000000040)) [ 251.108953] binder: 19062:19069 got transaction to invalid handle [ 251.108963] binder: 19062:19069 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 251.109577] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.137534] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.255260] loop3: p1 p2 p3 p4 < > [ 251.289098] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.297557] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 251.308229] loop0: p1 p2 p3 p4 < > [ 251.310707] blk_update_request: 3340 callbacks suppressed [ 251.310713] blk_update_request: I/O error, dev loop2, sector 1 [ 251.310730] blk_update_request: I/O error, dev loop2, sector 201 [ 251.310775] blk_update_request: I/O error, dev loop2, sector 1 [ 251.310779] blk_update_request: I/O error, dev loop2, sector 201 [ 251.310781] buffer_io_error: 3314 callbacks suppressed [ 251.310787] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 251.310803] blk_update_request: I/O error, dev loop2, sector 205 [ 251.310808] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 251.310812] blk_update_request: I/O error, dev loop2, sector 5 [ 251.310817] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 251.310849] blk_update_request: I/O error, dev loop2, sector 1 [ 251.310855] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 251.310860] blk_update_request: I/O error, dev loop2, sector 205 [ 251.310865] blk_update_request: I/O error, dev loop2, sector 201 [ 251.310868] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 251.310871] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 251.310893] blk_update_request: I/O error, dev loop2, sector 5 [ 251.310896] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 251.310900] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 251.310919] Buffer I/O error on dev loop2p3, logical block 1, async page read 13:00:00 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x110) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="cd001d0000000000", @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f0000000100)='./bus\x00', 0x42, 0x0) 13:00:00 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) prctl$void(0x3f) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/40) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getgroups(0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0xee01]) syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x6000, r2, r3, 0x1000, 0x100000001, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fchmod(r4, 0x42) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='/dev/ptmx\x00', 0xffffffffffffffff) r3 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)='/dev/ptmx\x00', 0xfffffffffffffff8) keyctl$link(0x8, r2, r3) fstat(r1, &(0x7f0000000040)) 13:00:00 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:00 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x400, 0x7ff, 0x2eceae6a, 0x4, 0x5dd, 0x1}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000400)={0x4}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) signalfd(r0, &(0x7f00000001c0)={0x9}, 0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 251.310929] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 251.480235] binder: 19105:19117 got transaction to invalid handle [ 251.480245] binder: 19105:19117 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 251.635637] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.687170] 9pnet: Insufficient options for proto=fd 13:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000700)="f8a73f27a4b7b00ff05470b85199c57b88058d32cc0ba2675d001d6e4dfb87b05d678c188fc697133420ae000051646bc6e9a092c9bf82f485105270e9e0c01a19197368d0a36301c0a5a7e1a335fb291e917efdb2966bf75443d8d5a5380cecb099e97916a6dda69b624f71090a799c453072d8eaab9a4b6f79c704377cb9227bc66779eda53f44732851fd7820881c1fc1a62ea38da8b919dc837537b4922e6ad7f634521c2f49829424fe5a289fd1df3159c4dd571406e1c720287aaebbaf206905438e92135af69c64f3e04a0d7a05c683fb719294ba56a013fc65a06ceb0ef586763436f94fef06d56ab8603df187d566aa7036cf61558a9c9b44dd7df98355ebf6b726880876f1fd459d0c46d921486437df0685c147164812a5b8040440192efa577864e5019fb5b8d7411fe23cba7c8c741a24980650304718a8887e01b35225116e5d603b846906814dbd7f145feb8d2fc224c3b88f8548484cde9015407442e966d34c78d866a4f907d7e663fbbf351f8590236ca9b4fe2955423c8e96b2f04f43b46c3d98037fc5e6b3888805dc94a1efe36f9c872b2cd625cc27a2403e062e79c4e8620f798e5d884d46b6816cdb4d6e4fcaea21cb4568667a7dd16ee7be0227") mprotect(&(0x7f000054e000/0x2000)=nil, 0x2000, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4200, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, r0, 0x0) fstat(r2, &(0x7f0000000040)) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000140)="7d3d0527556f3c66b9195ffd5d20d8dd750946e64f7c641e6389aab3f4d010b215d7aad417d043040779c58f0b7f595be21e81e77a0292b1e1c2a121cdd368c81db84efd9d48158cc5e5574d817d6091708a4f0d8e69e1e1c637761a5a8f16c062ed126a340a359325d7989c17ea6b1a295aa2754984e39bbca2b8a1d68cd702299b17f9076b64239cab583f15a6723508f483ad375d1b26a35de414da0a321bf5250f3daafb77082f390d4fd8965b2f784384f17b71e133596e9423940c63cbd292e5395761189a4e8c1c80c16a") [ 251.753008] 9pnet: Insufficient options for proto=fd 13:00:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 251.758824] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 251.760890] binder: 19216:19220 got transaction to invalid handle [ 251.760899] binder: 19216:19220 transaction failed 29201/-22, size 0-0 line 3018 [ 251.814849] binder: 19214:19222 got transaction to invalid handle 13:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000340)=0x110) creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r6, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, &(0x7f0000000000), 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000040)) [ 251.814858] binder: 19214:19222 transaction failed 29201/-22, size 0-0 line 3018 [ 251.815458] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.845389] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.845711] binder: 19216:19220 got transaction to invalid handle [ 251.845721] binder: 19216:19220 transaction failed 29201/-22, size 0-0 line 3018 [ 251.961979] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.964554] binder: 19218:19225 got transaction to invalid handle [ 251.964563] binder: 19218:19225 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x400, 0x200, 0x9, 0x9, 0x4}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x2, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000480)=""/102, 0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0xfd35}, 0xffffffffffffffea) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x146) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x5, 0x400}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") accept$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000180)=0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 251.965130] binder: undelivered TRANSACTION_ERROR: 29201 13:00:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfc") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0xadb}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 252.029190] loop5: p1 p2 p3 p4 < > [ 252.061422] binder: 19162:19165 got transaction to invalid handle [ 252.061435] binder: 19162:19165 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 252.061908] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.130315] binder: 19171:19178 got transaction to invalid handle [ 252.130324] binder: 19171:19178 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 252.130961] binder: undelivered TRANSACTION_ERROR: 29201 13:00:01 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="ce00"]) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:01 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x5, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in, @in=@multicast2=0xe0000002, 0x4e21, 0x30d1d10d, 0x4e22, 0x9, 0xa, 0x20, 0x20, 0x0, 0x0, r1}, {0x5, 0x8000, 0x80, 0x2, 0x3, 0x9, 0x3, 0x2}, {0x0, 0x7, 0x373e, 0x4}, 0x260, 0x6e6bb2, 0x2, 0xafee0ff4bd3136ad, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x7f}, 0xa, @in, 0x3500, 0x1, 0x3, 0x1b, 0x3, 0xff66, 0x4}}, 0xe8) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000540)=0x6, 0x4) syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000580)) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000240)=[@flat={0x77682a85, 0x100, r4}], &(0x7f0000000280)=[0x68, 0x38, 0x0, 0x38, 0x78, 0x48, 0x68, 0x30]}, 0x10001}}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @enter_looper={0x630c}], 0x84, 0x0, &(0x7f0000000480)="51e85a3e082714f44b7c21233a188c40b5c7f490f117057bbdc9e3c0c6913adf25118d76175591cfa0d24cf0cdb605bda1e7863508707767c929944cec1b25db09aec619e44a422c6bcfa832cbde896b6fbeab7530262f27fa0365f6ef1bfab3f4a9b21bc073693987be78b1879995e6fdacfd49f544411145aa23d82583fee4632f9798"}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0xc4d, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 252.195142] loop2: p1 p2 p3 p4 < > [ 252.222955] binder: 19278:19281 got transaction to invalid handle [ 252.222976] binder: 19278:19281 transaction failed 29201/-22, size 0-0 line 3018 [ 252.246191] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.323351] loop0: p1 p2 p3 p4 < > [ 252.323789] loop3: p1 p2 p3 p4 < > [ 252.447080] binder: 19246:19249 got transaction to invalid handle [ 252.453432] binder: 19246:19249 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:01 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0x3, 0x8}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 252.477311] 9pnet: Insufficient options for proto=fd 13:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="025caa3d6d345f8f762070000000008ea122ecdbb132649c5295f95b67882a2b23dee4814fec3de86676f7d12430364e464b1a65e33e8ba8f97177840f65dd333b463e6118a201ebdf855ed5b9e8c2e9c71596a1e17ac55aff1bf7cfbe53d66355c14c7ffe") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x4) fstat(r1, &(0x7f0000000040)) [ 252.515027] 9pnet: Insufficient options for proto=fd 13:00:01 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:01 executing program 5: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x110) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="cd001d0000000000", @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f0000000100)='./bus\x00', 0x42, 0x0) [ 252.686013] binder: undelivered TRANSACTION_ERROR: 29201 13:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000001c0)=0x66) ioctl(r0, 0x51, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r2, 0x0, 0x4, 0x2) write$P9_RSTATu(r3, &(0x7f00000000c0)={0x99, 0x7d, 0x1, {{0x0, 0x5b, 0x1ff, 0x7, {0x20, 0x4, 0x1}, 0x2000000, 0x4b, 0x5c24, 0x38f, 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00'}, 0x29, '/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', r4, r5, r4}}, 0x99) [ 252.747569] binder: 19277:19282 got transaction to invalid handle [ 252.761085] 9pnet: Insufficient options for proto=fd 13:00:01 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x400, 0x200, 0x9, 0x9, 0x4}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x2, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 252.761446] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 13:00:02 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000010000000000006364104dc81eb457fe3fd1dd4b9d623b4d3f824639fee006fb9ee26bd5dcc9c96dc5e3c63e9216fdb821d17cc68438e9c8e0e14962f8a50d462cd254a4bd8823103581169db529f5bdff339d813bc608b04e405812a38c3bc11d9f09094231bede7c12ef44d384e37868b9778e0789565ebd287a33cc4dab00b522f71ed30a9bca30878f742ea4ee5cf211fa8c397256e3f1c8e784f8a8c831694b99aba31c8dbc09c5bf0516f38b3225a21d269ca362b539728de8c9fda3055e832d5caa27d70813bedccccfa82e4717645fe19f98ed0a5e8a993fa27c", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfc") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 252.768500] binder: 19277:19282 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 252.770440] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.785689] binder: 19317:19323 got transaction to invalid handle 13:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r2, &(0x7f0000000040)) r3 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x84) inotify_rm_watch(r1, r3) [ 252.785697] binder: 19317:19323 transaction failed 29201/-22, size 0-0 line 3018 [ 252.828927] binder: 19294:19296 got transaction to invalid handle [ 252.828937] binder: 19294:19296 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 252.829218] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.845021] binder: 19317:19363 got transaction to invalid handle [ 252.845029] binder: 19317:19363 transaction failed 29201/-22, size 0-0 line 3018 [ 252.846586] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.846608] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.970256] binder: 19369:19374 got transaction to invalid handle [ 252.970276] binder: 19369:19374 transaction failed 29201/-22, size 0-0 line 3018 [ 252.970570] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.016967] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 253.044811] binder: 19381:19383 got transaction to invalid handle [ 253.044822] binder: 19381:19383 transaction failed 29201/-22, size -2534000594252003616--7908665214043829815 line 3018 [ 253.108453] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.138929] binder: 19382:19384 got transaction to invalid handle [ 253.138937] binder: 19382:19384 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfc") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000400)={0x40000000}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r0, &(0x7f0000000480)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfc") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x400, 0x200, 0x9, 0x9, 0x4}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x2, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000c4c000/0x4000)=nil, 0x4000, 0x4) r1 = getegid() getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r3 = getegid() mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x802040, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}, 0x2c}, {@access_uid={'access', 0x3d, r2}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r3}, 0x2c}]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x4000000031, 0xffffffffffffffff, 0x3) fstat(r4, &(0x7f0000000040)) 13:00:02 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) ioctl$KDDELIO(r0, 0x4b35, 0xc277) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063298719560001000000e40000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 253.139329] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.183213] binder: 19295:19301 got transaction to invalid handle [ 253.183225] binder: 19295:19301 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 253.186104] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.311189] binder: 19419:19422 unknown command -2027330816 [ 253.324148] binder: 19419:19422 ioctl c0306201 20000440 returned -22 [ 253.328475] binder: 19417:19421 got transaction to invalid handle [ 253.328484] binder: 19417:19421 transaction failed 29201/-22, size 0-0 line 3018 [ 253.328921] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.361494] loop0: p1 p2 p3 p4 < > [ 253.366882] loop3: p1 p2 p3 p4 < > [ 253.484782] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 13:00:02 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664387d02424c15917e7b7c0e7a5b296e6f7d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x6dd7, 0x3, 0x9, 0x4, 0x6, 0x9, 0x6, 0x1, 0x2, 0xffffffffffffffff, 0xdb2, 0xd8e2}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x20040, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x400, 0x200, 0x9, 0x9, 0x4}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x2, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0x4, 0x6, 0x6, 0x0, 0x800, 0x9, 0x7, 0x45f, 0x6, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) fcntl$setflags(r1, 0x2, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x8, 0x7ff, 0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000002c0), &(0x7f00000001c0)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:02 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000400)={0x40000000}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r0, &(0x7f0000000480)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 253.596600] binder: 19424:19434 got transaction to invalid handle [ 253.605809] binder: 19424:19434 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@empty, 0x15, r1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:02 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x4) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 253.617639] binder: 19432:19437 got transaction to invalid handle 13:00:02 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x400, 0x7ff, 0x2eceae6a, 0x4, 0x5dd, 0x1}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000400)={0x4}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) signalfd(r0, &(0x7f00000001c0)={0x9}, 0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 253.617650] binder: 19432:19437 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x13, 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000100)) fstat(r1, &(0x7f0000000040)) [ 253.621116] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.671516] 9pnet: Insufficient options for proto=fd [ 253.690896] 9pnet: Insufficient options for proto=fd [ 253.783870] binder: 19472:19478 ioctl 5408 200001c0 returned -22 [ 253.783955] binder: 19472:19478 got transaction to invalid handle [ 253.783962] binder: 19472:19478 transaction failed 29201/-22, size 0-0 line 3018 [ 253.790550] binder: 19470:19481 got transaction to invalid handle [ 253.790562] binder: 19470:19481 transaction failed 29201/-22, size 0-0 line 3018 [ 253.790842] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.873896] binder: 19472:19478 ioctl 5408 200001c0 returned -22 [ 253.873957] binder: 19472:19513 got transaction to invalid handle [ 253.873968] binder: 19472:19513 transaction failed 29201/-22, size 0-0 line 3018 13:00:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f00000e7000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:03 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ptrace$setopts(0x4200, r0, 0x0, 0x100010) 13:00:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x7, 0x9) ioctl$KDSKBLED(r2, 0x4b65, 0x6) pipe2(&(0x7f0000000100), 0x84800) mmap(&(0x7f0000e09000/0x4000)=nil, 0x4000, 0x100000000100000a, 0x4000000031, r1, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:03 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0001040000000000"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 253.875448] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.875474] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.914469] loop5: p1 p2 p3 p4 < > [ 254.181531] binder: undelivered TRANSACTION_ERROR: 29201 13:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) mprotect(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 254.301285] binder: 19548:19552 got transaction to invalid handle [ 254.314468] binder: 19548:19552 transaction failed 29201/-22, size 0-0 line 3018 13:00:03 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000017c0)={0x5, 0xfffffffffffffffd, 0x7, 'queue1\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfc") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 254.343915] loop2: p1 p2 p3 p4 < > [ 254.354254] binder: 19469:19477 got transaction to invalid handle [ 254.354265] binder: 19469:19477 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 254.354946] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.489270] loop3: p1 p2 p3 p4 < > [ 254.525183] loop0: p1 p2 p3 p4 < > [ 254.568735] binder: 19580:19583 ERROR: BC_REGISTER_LOOPER called without request [ 254.582690] binder: 19548:19552 got transaction to invalid handle [ 254.591594] binder: 19548:19552 transaction failed 29201/-22, size 0-0 line 3018 13:00:03 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000017c0)={0x5, 0xfffffffffffffffd, 0x7, 'queue1\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 254.601837] binder: 19580:19583 BC_FREE_BUFFER u0000000000000000 no match [ 254.601848] binder: 19580:19583 got reply transaction with no transaction stack [ 254.601857] binder: 19580:19583 transaction failed 29201/-71, size 72-56 line 2926 [ 254.607087] binder: 19580:19583 got transaction to invalid handle [ 254.607096] binder: 19580:19583 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 13:00:04 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000017c0)={0x5, 0xfffffffffffffffd, 0x7, 'queue1\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 254.607358] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.683544] binder: undelivered TRANSACTION_ERROR: 29201 13:00:04 executing program 7: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x101000, 0x0) sendto$unix(r0, &(0x7f0000000140)="b12d76bd9bf354804aa2d7d3adb9b0a415d51a02736a51bd788efc4d22a6d1cd569cee1108268fc429e73e085b8556acf8cb5c06d3174d1d2d20b4ccefbc7d31f951f2c9b46bf536f279b5101f8998e24f29942cff1188fce9df9e1eda5961ef46bd6d2ede073539d831e9252f4edd5dc43e0542d815dbe386992f751d3f76b1ea44f5022e472d6edb", 0x89, 0x10, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mknod(&(0x7f0000000ffa)='./bus\x00', 0x8001, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x3, 0x1}}) open(&(0x7f0000000100)='./bus\x00', 0x42, 0x1) [ 254.788008] binder: 19550:19556 got transaction to invalid handle [ 254.788018] binder: 19550:19556 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:04 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$setregs(0xf, r0, 0x1, &(0x7f00000001c0)="fcb76f343271ee") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000380)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="ba0300764ba2fba2"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 254.788522] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.853208] binder: 19602:19603 ERROR: BC_REGISTER_LOOPER called without request [ 254.853218] binder: 19602:19603 BC_FREE_BUFFER u0000000000000000 no match [ 254.853226] binder: 19602:19603 got reply transaction with no transaction stack [ 254.853234] binder: 19602:19603 transaction failed 29201/-71, size 72-56 line 2926 [ 254.855988] binder: 19602:19603 got transaction to invalid handle 13:00:04 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000009fc0)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f000000b040)=0x1024) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x280000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000300)={&(0x7f00004fb000/0x4000)=nil, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x8, 0x10000, 0x400}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x31) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000001400)={'security\x00', 0xd4, "4a1d29ac666d1a988d4e06761002032d158fc34dcb4d6c82705f41fb602ff79cad3a50f3b10b852c5fc329e5189ee9103cf65a2876c40885a86af330bf032fca5cbfffd922a9799e6f8188e73798e0f9e4a176bbf3e83228b1fa29df70bd710fb60437319652391e4f39d9b2e4af79f077f9202450d61103471d9a1206dba7731ac917d2926497188576df5fa62e391cf6686a3d8e93bab7544ce920a29a3d24015eb0491ac0a55cd3b5832243580f1653238a7bede16b0abc858989ed4ae3aafdef53f5a5c408f193a7ba2d1508325e3014311e"}, &(0x7f0000001500)=0xf8) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000d07000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000000c0)=""/171, &(0x7f0000000180)=0xab) fstat(r4, &(0x7f0000000040)) [ 254.856008] binder: 19602:19603 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 254.857452] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.930699] binder: 19560:19561 got transaction to invalid handle [ 254.930709] binder: 19560:19561 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 254.931142] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.935714] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 255.018307] binder: 19582:19584 got transaction to invalid handle [ 255.018316] binder: 19582:19584 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 255.018819] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.099277] binder: 19630:19631 ERROR: BC_REGISTER_LOOPER called without request [ 255.099286] binder: 19630:19631 BC_FREE_BUFFER u0000000000000000 no match [ 255.099293] binder: 19630:19631 got reply transaction with no transaction stack [ 255.099301] binder: 19630:19631 transaction failed 29201/-71, size 72-56 line 2926 [ 255.102430] binder: 19630:19631 got transaction to invalid handle [ 255.102448] binder: 19630:19631 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 255.102793] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.203055] loop3: p1 p2 p3 p4 < > [ 255.296838] loop2: p1 p2 p3 p4 < > [ 255.322800] loop0: p1 p2 p3 p4 < > [ 255.352855] binder: 19646:19649 ERROR: BC_REGISTER_LOOPER called without request [ 255.352866] binder: 19646:19649 BC_FREE_BUFFER u0000000000000000 no match [ 255.352873] binder: 19646:19649 got reply transaction with no transaction stack [ 255.352881] binder: 19646:19649 transaction failed 29201/-71, size 72-56 line 2926 [ 255.355439] binder: 19646:19649 got transaction to invalid handle [ 255.355449] binder: 19646:19649 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 255.355822] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.429850] binder: 19639:19640 got transaction to invalid handle [ 255.429859] binder: 19639:19640 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 255.453305] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.512397] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 255.611429] binder: 19645:19648 got transaction to invalid handle [ 255.611438] binder: 19645:19648 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:04 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x392, 0x72, 0x0, 0x0, 0x0, 0x0, 0x8b3e, 0x43d36, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0xffffffffeffffffd, 0x0, 0x64c45b44}, r0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) iopl(0x800) write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:zero_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xe8}, 0x48) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xb0, 0x0, &(0x7f00000004c0)=[@register_looper={0x630b}, @dead_binder_done={0x40086310, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x8, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x2, 0x9}, @fd={0x66642a85, 0x0, r4, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x1d}], &(0x7f0000000340)=[0x20]}, 0x6}}, @reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000380)=[@fd={0x66642a85, 0x0, r3, 0x0, 0x3}], &(0x7f0000000480)=[0xe54f7c34829cd5d0, 0x78, 0x38, 0x18, 0x38]}}, @request_death={0x400c630e, 0x0, 0x1}], 0x7e, 0x0, &(0x7f0000000580)="bca72de26441837086177147d42a34a25e66eabab9d5d5c48c6233f3cc7670c8c9be05ed7d4cc4830907e2b9d2d06fd377ad5409616f8d9851aad379cfef569ef4ca62346d31a23d824a02c57b308188109273ab1408362bfd8456d5287effa195dc3514722f71732a7e0c7e918355202ea8cca83f1d188d5371a52d951a"}) 13:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/244) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:04 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xfffffffffffffed5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 255.612331] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.663626] binder: undelivered TRANSACTION_ERROR: 29201 13:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) [ 255.693283] binder: 19644:19647 got transaction to invalid handle [ 255.712475] binder: 19644:19647 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:04 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)="2f70726f632f7379732f6e65742f697076340f76732f736c6f7070ad571dd0df1b795f7363747000", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x4, 0x0, 0x1, 'queue0\x00', 0x7}) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) [ 255.759786] binder: 19692:19698 ERROR: BC_REGISTER_LOOPER called without request [ 255.759797] binder: 19692:19698 BC_FREE_BUFFER u0000000000000000 no match [ 255.759806] binder: 19692:19698 got reply transaction with no transaction stack [ 255.759816] binder: 19692:19698 transaction failed 29201/-71, size 72-56 line 2926 [ 255.761898] binder: 19692:19698 got transaction to invalid handle [ 255.761905] binder: 19692:19698 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 255.762101] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.832343] loop3: p1 p2 p3 p4 < > [ 255.840530] binder: 19695:19699 got transaction to invalid handle 13:00:05 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x500042, 0x0) 13:00:05 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000001000002000032b8d28089bb8857273e6ae3b9a272338c74142ce26f429e8a3a63fc8831a434201aa4e805704a880600dfe3836d7a0513eee8f7a2c7e46f605f699ae16434987dbccec322ef6707902f51f8cf3fdfd3ea5d65b3c4634d4b3a787ab004dd", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x2000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000180)=0x80000000, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl(r0, 0x9, &(0x7f00000000c0)="43bbfd287a47a7ce183e228d05ec94d33f0c514e888e517ccf27e9c6fa5fde1bd1c3a6670cfa5efccbf62ca23d166ad7a9c50f49e1c88926f490baef44a0ad297e50bcdd8cea9c0e561b97de6ae7eb544c7e8769add690fcaa8992517583cbdab0") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x323000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x1f, 0x3, r2}) fstat(r1, &(0x7f0000000040)) 13:00:05 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x3f, 0x3f}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="789a9a1ee17ef900"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 255.840539] binder: 19695:19699 transaction failed 29201/-22, size 0-0 line 3018 [ 255.887359] binder: 19695:19699 got transaction to invalid handle [ 255.887369] binder: 19695:19699 transaction failed 29201/-22, size 0-0 line 3018 [ 255.887401] binder: 19695:19727 ERROR: BC_REGISTER_LOOPER called without request [ 255.887410] binder: 19695:19727 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 255.887417] binder: 19695:19727 got reply transaction with no transaction stack [ 255.887425] binder: 19695:19727 transaction failed 29201/-71, size 96-8 line 2926 [ 255.889118] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.006956] loop2: p1 p2 p3 p4 < > [ 256.067977] binder: 19718:19725 ERROR: BC_REGISTER_LOOPER called without request [ 256.067988] binder: 19718:19725 BC_FREE_BUFFER u0000000000000000 no match [ 256.067996] binder: 19718:19725 got reply transaction with no transaction stack [ 256.068004] binder: 19718:19725 transaction failed 29201/-71, size 72-56 line 2926 [ 256.074595] binder: 19718:19725 got transaction to invalid handle 13:00:05 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0001040000000000"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() setreuid(r9, r10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x80005, 0x730) fallocate(r0, 0x0, 0x9, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 256.074636] binder: 19718:19725 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 256.108309] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.274406] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.300817] binder: 19742:19744 got transaction to invalid handle 13:00:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000200)=0x78) fstat(r2, &(0x7f0000000040)) [ 256.322615] binder: 19742:19744 transaction failed 29201/-22, size -6615355760052630882-5363793652941987892 line 3018 [ 256.323055] binder: 19689:19702 got transaction to invalid handle [ 256.323064] binder: 19689:19702 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="49585f57611e6146481c6e9169c63e741b21c385b4a5b47d0d4838e9ca0597c438a46c3228e84970259744667a8868d73e49f242905b407d4a2abf91c4b0a697fdf8f2b331fb1accac288755ff56786935038cd0a2c5c90f4468cd895531fd17042549499375a094c6c5f4c44a6f6e36d61e89f8da7cf3e248c972da6bb191fa5b6c9b1f68d51e369185fd5a61b58a59fc091a628cb95e2a16c9fc31e5934f8c513e4db7138e1aa733e8ed41e1165b34b413e88984037b56017e8a0e8db959ba0bf23996e58efdc0", 0xc8) fstat(r2, &(0x7f0000000040)) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0xff) syslog(0x0, &(0x7f00000000c0)=""/60, 0x3c) [ 256.323460] binder: undelivered TRANSACTION_ERROR: 29201 13:00:05 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) geteuid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 256.502569] binder: 19693:19697 got transaction to invalid handle [ 256.505718] binder: 19759:19767 ERROR: BC_REGISTER_LOOPER called without request [ 256.505728] binder: 19759:19767 BC_FREE_BUFFER u0000000000000000 no match [ 256.505736] binder: 19759:19767 got reply transaction with no transaction stack [ 256.505744] binder: 19759:19767 transaction failed 29201/-71, size 72-56 line 2926 [ 256.506923] binder: 19759:19767 got transaction to invalid handle [ 256.506931] binder: 19759:19767 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 256.507137] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.595226] binder: 19803:19804 ERROR: BC_REGISTER_LOOPER called without request [ 256.599851] loop3: p1 p2 p3 p4 < > [ 256.603448] binder: 19742:19812 got transaction to invalid handle [ 256.603457] binder: 19742:19812 transaction failed 29201/-22, size -6615355760052630882-5363793652941987892 line 3018 [ 256.618062] binder: 19693:19697 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:05 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x3f, 0x3f}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="789a9a1ee17ef900"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:05 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcX-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="3b2c87b088a24220a5f335f7af37b789e323a2f98e4e9021d04c44b98caef2261943c2645199e3f59b65a10c6b67b218e3b7ba3eb315dc0bc688f2c28d3115bb18b319871a90232b0895f6407534b21e9b50b47cd714cca2d50ab7a755900000"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 256.656330] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.667082] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.684597] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.692243] binder: 19803:19804 BC_FREE_BUFFER u0000000000000000 no match 13:00:05 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000001000002000032b8d28089bb8857273e6ae3b9a272338c74142ce26f429e8a3a63fc8831a434201aa4e805704a880600dfe3836d7a0513eee8f7a2c7e46f605f699ae16434987dbccec322ef6707902f51f8cf3fdfd3ea5d65b3c4634d4b3a787ab004dd", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 256.760812] binder: 19803:19804 got reply transaction with no transaction stack [ 256.788532] binder: 19803:19804 transaction failed 29201/-71, size 72-56 line 2926 [ 256.815618] binder: 19803:19804 got transaction to invalid handle [ 256.822075] binder: 19803:19804 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 256.843234] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.884911] binder: 19824:19831 got transaction to invalid handle [ 256.891435] binder: 19824:19831 transaction failed 29201/-22, size -6615355760052630882-5363793652941987892 line 3018 [ 256.910858] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.945180] binder: 19817:19825 got transaction to invalid handle [ 256.960200] binder: 19817:19825 transaction failed 29201/-22, size 0-0 line 3018 [ 256.964733] binder: 19779:19783 got transaction to invalid handle [ 256.964742] binder: 19779:19783 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 256.965109] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.042638] binder: 19817:19860 got transaction to invalid handle [ 257.049050] binder: 19817:19860 transaction failed 29201/-22, size 0-0 line 3018 [ 257.058538] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.064225] binder: undelivered TRANSACTION_ERROR: 29201 13:00:06 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74777d671f662eea72616e733d6664ebfa5e604df47980336e6fbd", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x3ff) 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) close(r0) 13:00:06 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) geteuid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd9") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) getsockname$packet(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x2, 0x124) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000ac0)="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", 0x1f8}, {&(0x7f0000000440)="839ed33f7b5c06ced88a49d68ff9a7dc3f01d8d66a6e143c6e0dddde6b6d74fa9cf7313d9186545e4d8e18d72d3c82f77346c957cc12e66368f80f6df1317e0625c292b1a8ca1d4f72bcfac0ab50fa31d8f1f52ae67a8804f50f33e690cac96ffc6d932422950ecea5d30f39be", 0x6d}], 0x2, 0x4) setgroups(0x14ce, &(0x7f0000000140)) 13:00:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000000000000, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0xc0b9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xe4, r3, 0x1, 0x70bd2a, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x73}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x669}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c0}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000000009e79fa346f100000004", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33e) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000100)=0x3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) [ 257.148070] 9pnet_virtio: no channels available for device (null) [ 257.170075] 9pnet_virtio: no channels available for device (null) 13:00:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/n\x00\x00\a/expire_notest_conn\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000c77000/0x3000)=nil, 0x3000, 0x2000000040004) ftruncate(r1, 0x6168c91d) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 13:00:06 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 257.211237] binder: 19866:19879 transaction failed 29189/-22, size 0-0 line 3018 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) dup2(r1, r1) fstat(r1, &(0x7f0000000040)) [ 257.227034] binder: 19868:19875 ERROR: BC_REGISTER_LOOPER called without request [ 257.227045] binder: 19868:19875 BC_FREE_BUFFER u0000000000000000 no match [ 257.227053] binder: 19868:19875 got reply transaction with no transaction stack [ 257.227069] binder: 19868:19875 transaction failed 29201/-71, size 72-56 line 2926 [ 257.228793] binder: 19868:19875 got transaction to invalid handle [ 257.228813] binder: 19868:19875 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000200)=0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000095000/0x3000)=nil, 0x3000, 0x0) accept(r0, &(0x7f0000000100), &(0x7f0000000180)=0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x7e0000000000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) [ 257.229031] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.325036] loop3: p1 p2 p3 p4 < > [ 257.329701] loop0: p1 p2 p3 p4 < > 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$packet(0x11, 0x0, 0x300, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000004, 0x4000000031, r1, 0x0) fstat(r1, &(0x7f0000000040)) [ 257.374550] loop2: p1 p2 p3 p4 < > 13:00:06 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) fcntl$setsig(r2, 0xa, 0x19) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffb6, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="734000000000000000000016646601465d6251e10b904b356500ab7a7829864bc2559c032269a143de4f5d5f9727c3310951b3fe1e4149b96bec29a4c5215f3d388b57bb6ebd4079ebe457cc159c4747e81b08f17d741006c98c38abe631d3708672943f1468214eedd270da845efc944e41da14d24fde24bba129aba2a309e92e634b59ffbfb142b64afb9408ec736695e0b3ef60773889d3607793b0b17503b71c93925f3050d7f4cdb432f0dff983f57977e002bfa0bd1ae338ab06b26878966d4a60527a6f9be7d8073556", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f00000001c0)=""/151) 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x204, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 257.464445] binder: 19904:19910 ERROR: BC_REGISTER_LOOPER called without request [ 257.473084] binder: 19904:19910 BC_FREE_BUFFER u0000000000000000 no match [ 257.477657] binder: 19866:19921 transaction failed 29189/-22, size 0-0 line 3018 13:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101400, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 257.479120] binder: undelivered TRANSACTION_ERROR: 29189 [ 257.479142] binder: undelivered TRANSACTION_ERROR: 29189 [ 257.628256] binder: 19904:19910 got reply transaction with no transaction stack [ 257.632559] binder: 19870:19878 got transaction to invalid handle 13:00:06 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0x2) [ 257.632568] binder: 19870:19878 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 257.632855] binder: undelivered TRANSACTION_ERROR: 29201 13:00:06 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcX-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="3b2c87b088a24220a5f335f7af37b789e323a2f98e4e9021d04c44b98caef2261943c2645199e3f59b65a10c6b67b218e3b7ba3eb315dc0bc688f2c28d3115bb18b319871a90232b0895f6407534b21e9b50b47cd714cca2d50ab7a755900000"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:06 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) poll(&(0x7f0000000240)=[{r2, 0x4480}, {r4, 0x1004}, {r3, 0x8020}, {r2, 0xa2}, {r3, 0x1}], 0x5, 0x3) 13:00:06 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) [ 257.692497] binder: 19864:19877 got transaction to invalid handle [ 257.692508] binder: 19864:19877 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:06 executing program 0: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x400000088, 0x0, &(0x7f0000001ff0), &(0x7f0000000080), 0x0) ftruncate(r0, 0x8) [ 257.693115] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.805768] binder: 19904:19910 transaction failed 29201/-71, size 72-56 line 2926 [ 257.822187] binder: 19904:19910 got transaction to invalid handle [ 257.829226] binder: 19904:19910 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 257.891577] binder: 19893:19899 got transaction to invalid handle [ 257.899304] binder: 19893:19899 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 257.905309] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.926329] loop3: p1 p2 p3 p4 < > [ 257.985599] binder: 19985:19990 got transaction to invalid handle [ 257.985622] binder: 19985:19990 transaction failed 29201/-22, size 0-0 line 3018 [ 258.040377] binder: 19985:20000 got transaction to invalid handle [ 258.051237] binder: 19985:20000 transaction failed 29201/-22, size 0-0 line 3018 [ 258.062255] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.070102] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.075925] binder: undelivered TRANSACTION_ERROR: 29201 13:00:07 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0xffffffffffffffc1) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2, 0x0, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00'}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/wireless\x00') exit(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x8, 0x7, 0x3ff, 0x2, 0x0, 0x5, 0x28a50, 0x0, 0x7ff, 0x100, 0x5, 0x100000001, 0xc4e, 0x7, 0x9, 0x7f, 0x0, 0x7ff, 0x8, 0x0, 0x1000, 0xfffffffffffffffc, 0x7fffffff, 0x4, 0xb54, 0x68ba, 0x6, 0x3, 0x101, 0x80, 0xfffffffffffffeff, 0x4, 0x1, 0x5, 0x800, 0x80000001, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0xc82, 0x0, 0x8, 0x7, 0xfc7, 0xfffffffffffffffc, 0xe85}, r1, 0xd, r0, 0x9) getdents64(r0, &(0x7f0000000080)=""/140, 0x8c) r3 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x5428, 0x7fff, 0x4, 0xfffffffffffffff7, 0x0, 0xffffffff, 0x40040, 0x1, 0x100000000, 0x4, 0xe6b, 0x3, 0xdab, 0x7, 0x2, 0x2, 0x4, 0x6, 0xf06f, 0x4, 0x2, 0x906, 0x10001, 0x5, 0x100000000, 0x5d90, 0xff7, 0x6577, 0x1f, 0xffff, 0x1, 0x1, 0x9, 0xfffffffffffffff9, 0x1ff, 0x81, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x4, 0x3, 0x7, 0x7, 0x7, 0x5, 0x4}, r3, 0xc, r2, 0x0) 13:00:07 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000668e8d6d124cff5363ac02d55bdf9cd821cb7f9874d3a423c151d075814851082b4195234928c0b19c6d66f22575923b4010193ef4143dffca5542807a322d487f997b4bdb201c4af2"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:07 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:07 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 258.168191] binder: 19965:19966 got transaction to invalid handle [ 258.178381] binder: 19965:19966 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 258.191343] binder: undelivered TRANSACTION_ERROR: 29201 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)=[{0xc}], 0xc}}], 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) close(r0) fstat(r2, &(0x7f0000000040)) ftruncate(r1, 0xc0d) [ 258.260498] binder: 20017:20022 got transaction to invalid handle [ 258.280328] binder: 20017:20022 transaction failed 29201/-22, size 0-0 line 3018 [ 258.316366] loop2: p1 p2 p3 p4 < > [ 258.349279] loop3: p1 p2 p3 p4 < > 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x1fffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000300), 0x0) ioctl(r0, 0x3b314b22, &(0x7f0000000500)="025ce13d6d345f8f762060f5867b639d8ea692302d6afea73e5e1596ac6c831843062435ca5b6496318735bf6ebae24a29f3bad07cc783057ea2972b92055ef54dbbb4d69994eadbfb8d9518b79f24e2243ff6da002ef6d6bc16073cc45a52aa91b0080eb81a0af546f4f2ea3f0b8f04e76fd8503dd7c29c97dd76d2827d69b238696d0437e62c5d861bfc2dd699c884989686fb35dea5e5ae53608e865dcb6de300000000000000000000") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r2, 0x0, 0xffffffffffffff0d, 0x5) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000003c0)={&(0x7f0000000340)=""/119, 0x77}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xb9) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000240)={&(0x7f00001f3000/0x4000)=nil, 0x4000}) 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000000c0)) 13:00:07 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 258.436329] binder: 20017:20055 got transaction to invalid handle [ 258.442756] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.449794] binder: 20017:20055 transaction failed 29201/-22, size 0-0 line 3018 [ 258.475637] binder: undelivered TRANSACTION_ERROR: 29201 13:00:07 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) write$P9_RLOPEN(r1, &(0x7f0000001080)={0x18, 0xd, 0x2, {{0x338a2ed2ad284006, 0x0, 0x6}, 0x8}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000001c0)={&(0x7f0000000100)="48c6ceafbc0f403050102d92b109af89d825a1786743703d1bb74fdc5157c3df696a2956bb9c19772ec3617717f22ed345f326c9e3bbe169135aa84f7c", 0x3d}) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x0, 0x9, 0x7, 0x3, 0x3e, 0x6, 0x366, 0x40, 0x206, 0x3, 0x8001, 0x38, 0x2, 0x9, 0x2, 0x3}, [{0x6, 0xfffffffffffffffd, 0x80000001, 0x1, 0x1, 0x5a, 0xb1, 0x7fff}, {0x60000006, 0x5, 0xffffffffffffffff, 0xd9c1, 0x6, 0x9, 0x1000, 0x2}], "e9e66cc738ed52bf1528615a5246e1aacbd5fe73720e5ebe88e8b5b5526dbecf17f2cb6e66f023a00a08bb5066387ae2009be5", [[], [], [], [], [], [], [], [], []]}, 0x9e3) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000003c0)=')+lo\x00', &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='9p\x00', 0x1800000, &(0x7f0000001000)={'trans=xen,', {[{@noextend='noextend', 0x2c}, {@mmap='mmap', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r3}, 0x2c}]}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000864b"]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001040)=0x6, 0x4) [ 258.517736] binder: 20015:20029 ERROR: BC_REGISTER_LOOPER called without request [ 258.525491] binder: 20015:20029 BC_FREE_BUFFER u0000000000000000 no match [ 258.553011] binder: 20015:20029 got reply transaction with no transaction stack 13:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xc100, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)={0x5, 0x8, 0x1, 0xcb4, 0x1, [{0x3, 0x9, 0x1, 0x0, 0x0, 0x800}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 258.560603] binder: 20015:20029 transaction failed 29201/-71, size 72-56 line 2926 [ 258.571791] binder: 20015:20029 got transaction to invalid handle [ 258.573267] binder: 20019:20024 got transaction to invalid handle [ 258.573276] binder: 20019:20024 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 258.606715] binder: 20015:20029 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 13:00:07 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 258.643971] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.693732] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.761292] binder: 20076:20088 got transaction to invalid handle [ 258.776465] binder: 20038:20044 got transaction to invalid handle [ 258.789796] binder: 20076:20088 transaction failed 29201/-22, size 0-0 line 3018 [ 258.804340] binder: 20038:20044 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 258.805057] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.827928] binder: 20095:20097 got transaction to invalid handle [ 258.835645] binder: 20095:20097 transaction failed 29201/-22, size 0-0 line 3018 [ 258.862560] 9pnet: Could not find request transport: xen [ 258.865506] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.894853] binder: 20076:20109 got transaction to invalid handle [ 258.902464] binder: 20076:20109 transaction failed 29201/-22, size 0-0 line 3018 [ 258.942080] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.952499] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.954502] 9pnet: Could not find request transport: xen 13:00:08 executing program 7: mknod(&(0x7f0000000100)='./bus\x00', 0x1000, 0x0) mount$9p_xen(&(0x7f0000000180)='wfdno', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x2, &(0x7f0000000240)={'trans=xen,', {[{@uname={'uname', 0x3d, 'wfdno'}, 0x2c}, {@debug={'debug', 0x3d, 0xffffffff}, 0x2c}, {@afid={'afid', 0x3d, 0x101}, 0x2c}, {@aname={'aname', 0x3d, 'wlan1#cgroup]'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@loose='loose', 0x2c}, {@fscache='fscache', 0x2c}, {@version_9p2000='version=9p2000', 0x2c}, {@cache_none='cache=none', 0x2c}, {@cachetag={'cachetag', 0x3d}, 0x2c}]}}) creat(&(0x7f0000000140)='./bus\x00', 0x10a) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:08 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0xffffffffffffffc1) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000090040000780200000000000078020000a8030000a8030000a803000004000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000053000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000e0000001ac1414aa0f000000ffffffffac141418ac1414aaffffff00ffffffff000000000000000000000000000000000000000000000000ff00000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030001000246540002000673797a6b616c6c65723000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000f0003801000000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000ff000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000022fb347f46fb28e706ff1b38e61e5731a3abd95c8e2407f2d4e9564967c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000"], 0x4e0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) write$P9_RGETLOCK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="47b4d22ed33e2960026ed9696cf6af050000003702000208", @ANYRES32=r3, @ANYBLOB="29002f70726f632f7379732f6e657400000000000000032f6578706972655f6e6f646573745f63b16e6e00"], 0x47) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=""/34, &(0x7f0000000140)=0x22) fstat(r2, &(0x7f0000000040)) 13:00:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x47, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYBLOB="a190dfeeceb119c0129998f958117c0f763609ea7f348f80d0e7763c89871b03473f10eda9f31ca862ee634ba1b1936da5c960fb342485cae0"], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000480)=""/108) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x101, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f000051e000/0x3000)=nil, 0x3000, 0x2000001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x501240, 0x0) [ 259.201087] 9pnet: Could not find request transport: xen 13:00:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0xc13) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x467) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:08 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x5, 0x88000) r0 = socket$inet6(0xa, 0x1000000000002, 0x3fe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000180)) [ 259.289022] binder: 20139:20142 got transaction to invalid handle [ 259.306645] loop3: p1 p2 p3 p4 < > [ 259.310658] binder: 20130:20133 ERROR: BC_REGISTER_LOOPER called without request [ 259.310671] binder: 20130:20133 BC_FREE_BUFFER u0000000000000000 no match [ 259.310680] binder: 20130:20133 got reply transaction with no transaction stack 13:00:08 executing program 1: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000040)) 13:00:08 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0x13e) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)="2f70726f632f7379732f6e65742f697076342f76732f73796e635f736f636b5f73697a6500b38b3b9bf2c5795762", 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) flock(r1, 0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1b4a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x9) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) fcntl$setflags(r1, 0x2, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 259.310691] binder: 20130:20133 transaction failed 29201/-71, size 72-56 line 2926 [ 259.311876] binder: 20130:20133 got transaction to invalid handle [ 259.311887] binder: 20130:20133 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 259.312073] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.342326] loop2: p1 p2 p3 p4 < > [ 259.344565] binder: 20139:20142 transaction failed 29201/-22, size -8680340325386911601--888918797392084197 line 3018 [ 259.446291] binder: undelivered TRANSACTION_ERROR: 29201 13:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x4000000031, 0xffffffffffffffff, 0x0) ftruncate(r2, 0xa32) fstat(r1, &(0x7f0000000040)) fchdir(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x3, 0x70, 0x3ff, 0x7fffffff, 0x2f, 0xb43b, 0x0, 0xfffffffffffffffd, 0x4200, 0xb, 0xfffffffffffff801, 0x0, 0x0, 0x8000, 0xfffffffffffffff9, 0x4, 0xf8, 0x1, 0x7f, 0xc9, 0xfffffffffffff001, 0xc1, 0x5, 0x2, 0xe4d5, 0x317d6653, 0xffff, 0x7, 0x5, 0x80, 0x7, 0x1, 0x2, 0x933, 0x7ff, 0x6, 0x4, 0x7fffffff, 0x0, 0x7fffffff, 0x6, @perf_bp={&(0x7f00000000c0), 0x7}, 0x14, 0x9, 0x7fffffff, 0x0, 0x8dd, 0x8ea, 0x80}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x1, 0xf258}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x20, 0x3, 0x5, 0x200000000000, 0x0, 0x49, 0x41, 0xc, 0x80000001, 0xffffffffffffffff, 0x6, 0x7fe, 0x2, 0x5, 0x5c5, 0x9, 0xffffffffffffffff, 0x82f5, 0x5, 0x80000001, 0x4, 0x2, 0x0, 0x2, 0x40, 0x80, 0x2, 0x4, 0x9, 0x8000, 0x7, 0x7f, 0x7, 0x0, 0x401, 0x8, 0x0, 0x6, 0x1, @perf_config_ext, 0x804, 0x10000000, 0xffffffffffff0001, 0x6, 0x2, 0x8000, 0x10000}, r3, 0x2, r1, 0xa) dup(r2) [ 259.609696] binder: 20168:20169 ERROR: BC_REGISTER_LOOPER called without request [ 259.617671] binder: 20168:20169 BC_FREE_BUFFER u0000000000000000 no match [ 259.621349] binder: 20137:20141 got transaction to invalid handle [ 259.621571] binder: 20137:20141 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 259.622086] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.703907] binder: 20168:20169 got reply transaction with no transaction stack [ 259.711504] binder: 20135:20138 got transaction to invalid handle [ 259.711513] binder: 20135:20138 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 259.712314] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.770204] binder: 20168:20169 transaction failed 29201/-71, size 72-56 line 2926 [ 259.785068] binder: 20168:20169 got transaction to invalid handle [ 259.791464] binder: 20168:20169 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 259.803968] binder: undelivered TRANSACTION_ERROR: 29201 13:00:09 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8040, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="742854642c7266646e6f3df65cfbf08b9c4d005a3f4b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=' \x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:09 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0x6}, 0x10) r2 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x101, 0x0, 0x3, 0x478dca57}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x6f) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffc, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634003000000000000002b7948", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x4, 0x2, {0xa, 0x4e21, 0xd286, @mcast2={0xff, 0x2, [], 0x1}, 0x8001}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="70c5ae2e232a13af3f324348d24d959d1b0c2ff5327e90fa67f100e503bcb71d4de6a4a2340dd93d517e7ea153842e61ecf681fcf3eb0a00c9f1c1b75d063d0b67797d33723be0a71444bd4c6391b436afc62aa4bc6a0cf4185af703b93403c83bbabd56bc347cf8d45f4afcb26e745d0cc9cbdeabef26f654f2ed2e51263f179c10893813eb5f1bd460f5bba2b4c3f5b6901be48ccb39960c3a792922c6af0d26ec267931893d1c648f002e0704d027224f012393b5b5", 0xb7}, {&(0x7f00000002c0)="e8a555dc686a9fe404c884924c4e7cdb62e0930a11a36060145ba859b6f7f5c90d2a6b77d8dd16f1941e5ba5b6593bc7d4544c2e2e871acfe7ed4120116d2e08744f1ded2eac84a87dc890946bab36eb5ba3091aa4a90ee3a3f049cd466ebf5d3f199fdf236bfccf0a4fe5fe15f313d576669a5320c42be91e5c520a612bbfa01a76354c639e92a5c238c226", 0x8c}], 0x2, &(0x7f0000000380)=[{0xd0, 0x1ff, 0xfa, "685ab83f81fc8eb36556ebfaa89d97c61b561201b1118407d0bf88c26cf78a8c523feb72fa9a5ce29cd273d49a967ad85303497946da1b5aca2de84d25c4e43ece4e52ed80895bc96bee8d8b9153e06e7c1da143026a766d503bc5e31b769d10b1dfed51e5ee1fabd34ee87e752fbb11a44914b3d572c276c62b2f9c5c8e15e396608c5c58827335273b29064dcfaafb3ff7076bc7ba7a50dcdf1e42600485240a3b28ee06b40f88dce8328768ccfea08e173dd9312e23b85e1468"}, {0xe0, 0x117, 0x0, "e2238eac65df6e5b092e9438d1bdb04ea2bee32c2ca9aa547c01c375a7b1f25f8b6223c196979ae03da008150d1fe13e72df99cafe80067b62cd50b8287233a5f61717d8a6907eca237109fdf7d34bb1f2c032f65152eca8829b83d2745fe855b3b914a9fcda40eb98de1081a0d7687c9650cda7d23dc55c4dd7df910eb1f3c30d8d95aad5fc91e31048cf828402b4ab2d183378e2a5e5885699a280e5ddfdc0c132a1cd33994265724f7f253dfa1ab0cdcb9bf9443c71635e0c38e460b0c35eabd661264604fc5249b8975a5642ec74"}, {0x108, 0x88, 0x1, "ccc2ef042e58ee34acda1afb83d260338d28db624a3e08d7a33e91b2bf700d21db08f9b622ddfab2b604ac904418e2e7219e905499743b793bd985a12eec99c78107724fc252cfaa47743d68f37dffa0aa304a907698dfa0ab7391f09e0beafd2bceb499b59caacf074a4400eadca9857c72f9c60b1524eec35d859803d0986a039574fac7dd9a97f0d5250926c85343d6bb48fd5d7e45a8be1a3f699df5b720e541ae13459aa13fbd3543282fd1073da448e1ff0578e7b0d384e6f75bd8319e79a287c206fe425f926f1e728b427d4f71f0b48297ee81c791f22a8fa090ccf1c58f6a9837957792699d0fcedfd3eb3cb20f815ea78adfb9"}, {0x28, 0x10b, 0x0, "06e948d7cb483dd2ee8dec6389203475e964330799cf5c"}, {0x1010, 0x10e, 0x0, "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"}, {0x88, 0x509769ef2eeb4e82, 0x7ff, "86d67be01d725f466321b6a09ef676df535a2d4e3dd4a27db5fd5fe4fdbc3dc58fc9d3a428d4cba907e983946715285aa4c95a275bffe622974a7e828669c2db40bc2bfe881c5bc58ee47cd5fc665dc0dc0ef4a4569ba7b1a1f2af9bce7b6ff247fdc1cdf20e8cb272cd8099ae6f6304ea7b08"}, {0x70, 0xff, 0x5, "974dd532e3d022c618f3bdd3402b4b2322bd142c0a6eccae959d77b6d2dd7f79065be3bd4d7bbaccaa0f3c8fb38b5d1d7ff3807903f261f29e320920229373db7081f8b67efd890320fe9a9797100c4e339dd96536faa572ae3d07"}, {0x68, 0x11f, 0xa3ed, "dacb1970cdec861f9deea66aeb0b6e66d1853697015cc6b82ad0273ff1c6ff1af4715904e4e5b63602a491bd7be9181fa169ce76ffa3dce2493041bee152099e76792e217449686aeff2fa9da95f969eec"}], 0x1450, 0x4000804}, 0x20000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000480)=""/108) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/ip_vs_stats_percpu\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x68c94411) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x400, 0x401, 0x9c614d4, 'queue1\x00', 0x4}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r3, r4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0044bcb58dc2a7000000000000d7a909000009100000"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000000340)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 260.121705] 9pnet: Could not find request transport: xen 13:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 260.189930] 9pnet_virtio: no channels available for device (null) 13:00:09 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:09 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="40810000", @ANYRES16=r3, @ANYBLOB="2c0b28bd7000fcdbdf25090000003800030008000400ad0000000800010000000000080003000000000014000200697036746e6c30000000000000000000080005007f000001280001000800050003000000080004004e21000008000100000000000c00070024000000040000000800060003000000540001000c0006006e6f6e650000000008000500010000000800010000000000080002000600000008000b007369700008000b007369700014000300e00000020000000000000000000000000800090077000000080005000000000038000100080002007f00000008000200210000000800050001000000080001000a000000080002005e0000000c000700030000000a00000024000100080002000000000008000b0073697000080001000a00000008000800040000000c0003000800080000000000"], 0x140}, 0x1, 0x0, 0x0, 0x810}, 0x20000050) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404008000001800000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 260.210776] binder: 20231:20233 unknown command 54551296 13:00:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x101, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f000051e000/0x3000)=nil, 0x3000, 0x2000001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x501240, 0x0) 13:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x800000000001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) [ 260.210798] binder: 20231:20233 ioctl c0306201 20000440 returned -22 [ 260.235145] binder: 20230:20246 ERROR: BC_REGISTER_LOOPER called without request [ 260.235154] binder: 20230:20246 BC_FREE_BUFFER u0000000000000000 no match [ 260.235161] binder: 20230:20246 got reply transaction with no transaction stack [ 260.235169] binder: 20230:20246 transaction failed 29201/-71, size 72-56 line 2926 [ 260.236095] binder: 20230:20246 got transaction to invalid handle [ 260.236103] binder: 20230:20246 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 260.236264] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.267147] binder: 20237:20241 ERROR: BC_REGISTER_LOOPER called without request [ 260.267157] binder: 20237:20241 BC_FREE_BUFFER u0000000000000000 no match [ 260.267165] binder: 20237:20241 got reply transaction with no transaction stack [ 260.267174] binder: 20237:20241 transaction failed 29201/-71, size 72-56 line 2926 [ 260.268493] loop3: p1 p2 p3 p4 < > [ 260.277337] binder: 20237:20241 got transaction to invalid handle 13:00:09 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) write$P9_RLOPEN(r1, &(0x7f0000001080)={0x18, 0xd, 0x2, {{0x338a2ed2ad284006, 0x0, 0x6}, 0x8}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000001c0)={&(0x7f0000000100)="48c6ceafbc0f403050102d92b109af89d825a1786743703d1bb74fdc5157c3df696a2956bb9c19772ec3617717f22ed345f326c9e3bbe169135aa84f7c", 0x3d}) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x0, 0x9, 0x7, 0x3, 0x3e, 0x6, 0x366, 0x40, 0x206, 0x3, 0x8001, 0x38, 0x2, 0x9, 0x2, 0x3}, [{0x6, 0xfffffffffffffffd, 0x80000001, 0x1, 0x1, 0x5a, 0xb1, 0x7fff}, {0x60000006, 0x5, 0xffffffffffffffff, 0xd9c1, 0x6, 0x9, 0x1000, 0x2}], "e9e66cc738ed52bf1528615a5246e1aacbd5fe73720e5ebe88e8b5b5526dbecf17f2cb6e66f023a00a08bb5066387ae2009be5", [[], [], [], [], [], [], [], [], []]}, 0x9e3) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000003c0)=')+lo\x00', &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='9p\x00', 0x1800000, &(0x7f0000001000)={'trans=xen,', {[{@noextend='noextend', 0x2c}, {@mmap='mmap', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r3}, 0x2c}]}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000864b"]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001040)=0x6, 0x4) 13:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000351000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:09 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) write$P9_RLOPEN(r1, &(0x7f0000001080)={0x18, 0xd, 0x2, {{0x338a2ed2ad284006, 0x0, 0x6}, 0x8}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000001c0)={&(0x7f0000000100)="48c6ceafbc0f403050102d92b109af89d825a1786743703d1bb74fdc5157c3df696a2956bb9c19772ec3617717f22ed345f326c9e3bbe169135aa84f7c", 0x3d}) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x0, 0x9, 0x7, 0x3, 0x3e, 0x6, 0x366, 0x40, 0x206, 0x3, 0x8001, 0x38, 0x2, 0x9, 0x2, 0x3}, [{0x6, 0xfffffffffffffffd, 0x80000001, 0x1, 0x1, 0x5a, 0xb1, 0x7fff}, {0x60000006, 0x5, 0xffffffffffffffff, 0xd9c1, 0x6, 0x9, 0x1000, 0x2}], "e9e66cc738ed52bf1528615a5246e1aacbd5fe73720e5ebe88e8b5b5526dbecf17f2cb6e66f023a00a08bb5066387ae2009be5", [[], [], [], [], [], [], [], [], []]}, 0x9e3) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000003c0)=')+lo\x00', &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='9p\x00', 0x1800000, &(0x7f0000001000)={'trans=xen,', {[{@noextend='noextend', 0x2c}, {@mmap='mmap', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r3}, 0x2c}]}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000864b"]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001040)=0x6, 0x4) [ 260.277360] binder: 20237:20241 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 260.278421] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.281049] binder: 20231:20254 unknown command 54551296 [ 260.281071] binder: 20231:20254 ioctl c0306201 20000440 returned -22 [ 260.519640] binder: 20262:20263 ERROR: BC_REGISTER_LOOPER called without request [ 260.519650] binder: 20262:20263 BC_FREE_BUFFER u0000000000000000 no match [ 260.519658] binder: 20262:20263 got reply transaction with no transaction stack [ 260.519666] binder: 20262:20263 transaction failed 29201/-71, size 72-56 line 2926 [ 260.520824] binder: 20262:20263 got transaction to invalid handle [ 260.520846] binder: 20262:20263 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 260.521210] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.588787] binder: 20269:20275 got transaction to invalid handle [ 260.588818] binder: 20269:20275 transaction failed 29201/-22, size 0-0 line 3018 [ 260.661086] binder: 20234:20238 got transaction to invalid handle [ 260.661098] binder: 20234:20238 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 260.661505] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.689021] binder: 20269:20305 got transaction to invalid handle [ 260.689043] binder: 20269:20305 transaction failed 29201/-22, size 0-0 line 3018 [ 260.715609] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.721015] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.764461] 9pnet: Could not find request transport: xen [ 260.781205] 9pnet: Could not find request transport: xen 13:00:09 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='trans=fd,', 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x3ff, 0x6, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$void(r0, 0xc0045c78) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:10 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) read(r0, &(0x7f0000000480)=""/91, 0x5b) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) ptrace$setopts(0x4206, r0, 0x800, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340334eb538340073b9400000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) tee(r0, r0, 0x6, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000000c0)) 13:00:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/ip_vs_stats_percpu\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x68c94411) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x400, 0x401, 0x9c614d4, 'queue1\x00', 0x4}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r3, r4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0044bcb58dc2a7000000000000d7a909000009100000"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10}, 0x60, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0x262, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0xb8, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000040)) [ 260.819181] 9pnet_virtio: no channels available for device (null) [ 260.881645] binder: 20324:20328 unknown command 859857664 [ 260.889033] binder: 20324:20328 ioctl c0306201 20000440 returned -22 [ 260.909257] loop3: p1 p2 p3 p4 < > [ 260.961349] loop0: p1 p2 p3 p4 < > 13:00:10 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x8) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/ip_vs_stats_percpu\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x68c94411) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x400, 0x401, 0x9c614d4, 'queue1\x00', 0x4}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r3, r4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0044bcb58dc2a7000000000000d7a909000009100000"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, &(0x7f00000002c0), &(0x7f0000000380), 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="a40a0000a9e235de28a691fd06760f788ccda125754e735dfaee98739fe72c3eb5593eb412d9684a8b71f66c389f4e02537706000000000000007759dd111d862261b4ca248f90ed4131bb4ade097476ae00"]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x16, 0x4) [ 261.057572] binder: 20323:20327 ERROR: BC_REGISTER_LOOPER called without request [ 261.083092] binder: 20323:20327 BC_FREE_BUFFER u0000000000000000 no match [ 261.090788] binder: 20323:20327 got reply transaction with no transaction stack [ 261.111305] binder: 20323:20327 transaction failed 29201/-71, size 72-56 line 2926 [ 261.140087] binder: 20329:20333 got transaction to invalid handle 13:00:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 261.140097] binder: 20329:20333 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 261.140547] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.186680] binder: 20323:20327 got transaction to invalid handle [ 261.197130] binder: 20323:20327 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 13:00:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 261.203904] binder: 20367:20368 got transaction to invalid handle [ 261.203944] binder: 20367:20368 transaction failed 29201/-22, size 0-0 line 3018 13:00:10 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000240)={0x1, 0x7, 0x7, 0x1, r0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000380)=0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000001c6f86612408372896c0d0db1000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 261.208256] binder: 20334:20339 got transaction to invalid handle [ 261.208270] binder: 20334:20339 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 261.229933] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.267533] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.283287] binder: 20385:20387 got transaction to invalid handle [ 261.283296] binder: 20385:20387 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 261.283716] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.398114] binder: 20403:20405 got transaction to invalid handle [ 261.404652] binder: 20403:20405 transaction failed 29201/-22, size 0-0 line 3018 [ 261.439134] loop0: p1 p2 p3 p4 < > [ 261.457621] binder: 20402:20406 got transaction to invalid handle [ 261.464434] binder: 20402:20406 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 261.479160] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.501400] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.519674] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.621929] binder: 20397:20398 got transaction to invalid handle [ 261.628321] binder: 20397:20398 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 261.642667] binder: undelivered TRANSACTION_ERROR: 29201 13:00:10 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:10 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063424000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f00000000c0)=ANY=[]) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0xfffffe74) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000001fcff"]) ioctl$KDADDIO(r0, 0x4b34, 0x100000001) 13:00:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) syncfs(r0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)={0x303, 0x33}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) wait4(r2, &(0x7f00000002c0), 0x80000000, &(0x7f0000000580)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e2f70726f632f7379732f02000000000000002f76732f7363686564756c655f69636d7000"], &(0x7f0000000480)=""/226, 0xe2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:10 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, &(0x7f00000002c0), &(0x7f0000000380), 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="a40a0000a9e235de28a691fd06760f788ccda125754e735dfaee98739fe72c3eb5593eb412d9684a8b71f66c389f4e02537706000000000000007759dd111d862261b4ca248f90ed4131bb4ade097476ae00"]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x16, 0x4) 13:00:11 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) [ 261.838422] binder: 20441:20447 ERROR: BC_REGISTER_LOOPER called without request [ 261.861200] binder: 20441:20447 BC_FREE_BUFFER u0000000000000000 no match [ 261.878930] binder: 20441:20447 got reply transaction with no transaction stack [ 261.887439] binder: 20441:20447 transaction failed 29201/-71, size 72-56 line 2926 [ 261.905789] binder: 20442:20448 unknown command 1078092544 [ 261.911734] binder: 20442:20448 ioctl c0306201 20000440 returned -22 [ 261.923824] binder: 20441:20447 got transaction to invalid handle 13:00:11 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025c77c83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="3b00000000000000732f0cad6e16742f697076342f76732f73796e635f7265747269659517561e9ab4a935d62d228924aadb8a1353c320ab3bb6fe5bd32b65243159d168f88e99775d2c489373faa1dd9e5b79b583decf31d7061fbb6ec1524734cc530959", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) fstat(r2, &(0x7f0000000040)) [ 261.930448] binder: 20441:20447 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 261.952946] binder: 20440:20445 ERROR: BC_REGISTER_LOOPER called without request [ 261.952956] binder: 20440:20445 BC_FREE_BUFFER u0000000000000000 no match [ 261.952963] binder: 20440:20445 got reply transaction with no transaction stack [ 261.952970] binder: 20440:20445 transaction failed 29201/-71, size 72-56 line 2926 [ 261.953557] binder: 20440:20445 got transaction to invalid handle [ 261.953566] binder: 20440:20445 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0x8, &(0x7f0000000080)="f428a145919990dd502cc9b3dd129e056b63fcc2ab99bf8192d56bb9d446b90afc0eb28791a23c020ae32f00b86a9ecb33f96f0a5eb1bb426aabc6e5f599e81576947057ec4e7905183b0087d19243038a9f38a1c50826e2e004e4cb6cae0a13f2dadff559f9ea36b52e19a738a9f03bd67e183678612f0f2372ad149d1207ca292ae9896513667a1ae091bd6b54b5e8ef536b79fa2cefba09c53156572a57983c1f8f419ebbe73e337844c121f785") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, r2, 0x0) fstat(r1, &(0x7f00000001c0)) fcntl$setsig(r2, 0xa, 0x3f) 13:00:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 261.953850] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.991021] loop3: p1 p2 p3 p4 < > [ 262.007304] binder: 20442:20479 unknown command 1078092544 [ 262.007313] binder: 20442:20479 ioctl c0306201 20000440 returned -22 13:00:11 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x125180, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x7f) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000100)='./file0\x00', 0x400000, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) syncfs(r0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)={0x303, 0x33}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) wait4(r2, &(0x7f00000002c0), 0x80000000, &(0x7f0000000580)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e2f70726f632f7379732f02000000000000002f76732f7363686564756c655f69636d7000"], &(0x7f0000000480)=""/226, 0xe2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000c48000/0x1000)=nil, 0x1000, 0x1000007, 0x4000000031, r1, 0x0) fstat(r2, &(0x7f0000000040)) [ 262.139229] binder: undelivered TRANSACTION_ERROR: 29201 13:00:11 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3f, 0x10001, 0xffffffff, 0x3, 0x0, 0x3, 0x7, 0x361, 0x40, 0x204, 0x1, 0x4, 0x38, 0x2, 0x1, 0x200, 0xa3}, [{0x70000000, 0x0, 0x6, 0x7, 0x7, 0x81, 0x10000, 0x924}, {0x2, 0x2, 0x1f, 0x0, 0x20, 0x5, 0x6, 0x7}], "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", [[]]}, 0x11b0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000140)={0x100000001, 0x3f, 0xfffffffc, {0x0, 0x989680}, 0x0, 0x6}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:11 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x6e463438) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0xa}, 0x5b, r2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000140)={0x0, 0xfff, 0xa7, 0x8, 0x2, 0x81}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000090efe00000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 262.247957] loop0: p1 p2 p3 p4 < > 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/220, &(0x7f00000001c0)=0xdc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 262.249102] binder: 20477:20480 ERROR: BC_REGISTER_LOOPER called without request [ 262.249111] binder: 20477:20480 BC_FREE_BUFFER u0000000000000000 no match [ 262.249118] binder: 20477:20480 got reply transaction with no transaction stack [ 262.249126] binder: 20477:20480 transaction failed 29201/-71, size 72-56 line 2926 [ 262.250100] binder: 20477:20480 got transaction to invalid handle [ 262.250108] binder: 20477:20480 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 262.250467] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.371482] binder: 20524:20527 unknown command 0 [ 262.371490] binder: 20524:20527 ioctl c0306201 20000440 returned -22 [ 262.449552] binder: 20524:20547 unknown command 0 [ 262.458797] binder: 20524:20547 ioctl c0306201 20000440 returned -22 [ 262.520118] binder: 20530:20533 ERROR: BC_REGISTER_LOOPER called without request [ 262.540979] binder: 20530:20533 BC_FREE_BUFFER u0000000000000000 no match [ 262.565335] binder: 20530:20533 got reply transaction with no transaction stack [ 262.573643] binder: 20530:20533 transaction failed 29201/-71, size 72-56 line 2926 [ 262.584763] binder: 20530:20533 got transaction to invalid handle [ 262.591175] binder: 20530:20533 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 262.604220] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.612214] binder: 20498:20503 got transaction to invalid handle [ 262.619127] binder: 20498:20503 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 262.644976] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.652093] binder: 20443:20456 got transaction to invalid handle 13:00:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x125180, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x7f) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000100)='./file0\x00', 0x400000, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0x5, 0x7, 0x6, 0x100000001, 0x2f, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 262.652203] binder: 20443:20456 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 262.690761] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.756153] loop3: p1 p2 p3 p4 < > 13:00:12 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)=""/96, 0x60) r2 = getegid() fchownat(r0, &(0x7f0000000100)='./bus\x00', r1, r2, 0x100) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:12 executing program 6: open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x80) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) fstatfs(r0, &(0x7f0000000640)=""/86) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x632e, 0x3f}, 'port0\x00', 0x75, 0x80018, 0x8, 0x3, 0x7f, 0x6, 0x8001, 0x0, 0x2, 0x8}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000480)=""/65, &(0x7f0000000380)=0x41) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000f9ff0038a19bd96d08b7b136c9521d7ae712aa7f1b7c6e4dc8841f242b75257d3b715afc49196389efa489800f8f0639a77f29425ca72e08ea58cdb0e71e77893f18af24b850c83903fdb00094b6a029655db7afb404798069f7a41209f07eef08d30eff1d468d338784703710358f59bcb053ca64d0459765132259354084e5a1e50051f146346f8514014b4cd6db21c6c273074cc59ac453be124d21259f621d44c6347484a4238d9e0bad34cebc30915d03b58d11a3e926f2ec00e898431f3a4f64ab78f7033d8d140717a84442e7e4a3ae1ae39fee674944741cc8dfec68973611c6fe267014226af4164e8f562b9f64717a33b8189623af868d"]], 0x0, 0x0, &(0x7f00000003c0)}) getrlimit(0xa, &(0x7f0000000140)) 13:00:12 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd30, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) 13:00:12 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'ip6gretap0\x00', r8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000b5a000/0x3000)=nil, 0x3000, 0x2000004, 0x2110, r1, 0x0) r3 = mmap$binder(&(0x7f00004c1000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000480)={0x0}) r6 = mmap$binder(&(0x7f00007e9000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0xfc, 0x0, &(0x7f0000000580)=[@acquire_done={0x40106309, r2}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x48, 0x20, &(0x7f00000002c0)=[@flat={0x73682a85, 0x10a, r3, 0x4}, @fd={0x66642a85, 0x0, r0}, @flat={0x77682a85, 0x0, r4, 0x4}], &(0x7f0000000340)=[0x18, 0x28, 0x28, 0x48]}}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x48, &(0x7f0000000380)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000003c0)=[0x20, 0x48, 0x30, 0x78, 0x40, 0x78, 0x58, 0x30, 0x48]}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x60, 0x8, &(0x7f00000004c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000440), 0x1, 0x1, 0xa}, @flat={0x73622a85, 0x10a, r5, 0x1}, @fda={0x66646185, 0x7, 0x0, 0x2f}], &(0x7f0000000540)=[0x38]}, 0x6}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r6}], 0x63, 0x0, &(0x7f0000000680)="efed377e1c813bb4ee7352fc392b636409ad030b0b7a4bc65317055b1b5fb72de9f5dfb7fd593f4c71c9da51e1787b1638bfefb0f9a09d246e94e4a00d6bc3c096acf8c8a64fbc310a0da5832059f9b291d14ee89849ae9a1fe59fd186830486c0dfc5"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x4}], 0xcc, 0x0, &(0x7f0000000100)="5a633eeb26f12238ce5b803475bb097fcb5606aa9abc188050c809912f40fba1ffe289a4414c47bfd9b443cf23fe79b5a0d27e5c471f7774c5e2722db456b53aa2cfa6643e1197126d069a22f81af8507dd40e7ff80fa2a6b182adad27622f6f9953b22d9ed2cff853f66c4a9f15cb7f8f1932cf347150b32d2cc906ec2324f0d9663561b2db72a5f1c92e245a429cc49df22f2a6d755cb6630f0106c83e026dc661133cb52cfa6924e16a6e28e5502635f3f9147065d0a0e9123fb4ea23cce1edb9e1d4d3773717eb755411"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000040)) 13:00:12 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) syncfs(r0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)={0x303, 0x33}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) wait4(r2, &(0x7f00000002c0), 0x80000000, &(0x7f0000000580)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e2f70726f632f7379732f02000000000000002f76732f7363686564756c655f69636d7000"], &(0x7f0000000480)=""/226, 0xe2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x13, 0x200, 0x70bd2a, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x4c, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f000013f000/0x3000)=nil, 0x3000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f000041e000/0x2000)=nil, 0x2000, 0xc, 0xe030, r1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) [ 262.881223] binder: 20572:20576 got transaction to invalid handle [ 262.913043] binder: 20572:20576 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:12 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x10000, 0xe, 0xffffffff}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x18}, 0xff000000, 0xff, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, {[0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x9, 0x5, 0xf67, 0x3b, 0x3, 0x0, 'team0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x22c}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xfffffffffffffffe, 0x54e}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x10000, 0xffffff00, 0xffffff00, @empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x7, 0xffff, 0xfffffffffffffffd, 0x9, 0x1000, 0x3, 'bcsf0\x00', 'veth0_to_bridge\x00', {0xff}, {0x412fac1fc4b7d816}}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffffffffffd}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:12 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x56, 0x7, 0x9, {0x100000000, 0xfffffffffffffcff}, {0xe3, 0x5}, @cond=[{0x6, 0x93a9, 0x4, 0x0, 0x0, 0x1}, {0x80, 0x9, 0x1, 0x21a, 0x1, 0xb66}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 262.948879] binder: 20592:20601 ERROR: BC_REGISTER_LOOPER called without request [ 262.948893] binder: 20592:20601 BC_FREE_BUFFER u0000000000000000 no match [ 262.948901] binder: 20592:20601 got reply transaction with no transaction stack [ 262.948911] binder: 20592:20601 transaction failed 29201/-71, size 72-56 line 2926 [ 262.949551] binder: 20592:20601 got transaction to invalid handle [ 262.949560] binder: 20592:20601 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 262.949967] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.957537] binder: 20595:20602 got transaction to invalid handle [ 262.957690] binder: 20595:20602 transaction failed 29201/-22, size 0-0 line 3018 [ 263.006544] binder: 20595:20602 got transaction to invalid handle [ 263.006554] binder: 20595:20602 transaction failed 29201/-22, size 0-0 line 3018 13:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c2571732f6cbbf216d8bde5471c9c7d4a97fe3eb67572d4e2b9b945a52570b0d5a8ea1880b319c7b90e87d865e792f1d76f292cf5d8a23dbdc23fba87a0234") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x5, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 263.025158] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.025177] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.128337] loop2: p1 p2 p3 p4 < > [ 263.221407] binder: undelivered TRANSACTION_ERROR: 29201 13:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f0000000280)="065cc83d6d345f8f76c170") accept$inet6(r0, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket$inet(0x2, 0x805, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:12 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xd6, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6a226a9ec9c2b28c11f37bf03b9dcdc95d01583317afabbf5a1f0f23cc4b64cab134a1458f58e4a77c061be7cba022b22e0e9566f0c33a948c8fe160bab005ef7e48bc199cd06134f02545fddf504577ee7cfb1ad552df06be904355bf449b3a54c8aba78af797f352b0be2fee3432bf6ac7acfb40f6b037a9e28e31a94328b5f38a8d1bb7216215b1cec630b8a94590d6aa6d8618deea9a2099abf7563f37c094da2a05852c07d73346c1d01f249abb46020fff6f0bfc2b1823c7e441389f1bb57b6fd1cd4c4bddf14e59c56dec93a6c402f9649c75"], 0x37, 0x0, &(0x7f0000000100)="112e5608079b93b48bee8766dd49b91e6c71af51aa19eb9fdb04a51b3c571405b3b72d4ba1309a748a7f42d77449873dfd7d8cb8951728"}) [ 263.306796] binder: 20622:20624 ERROR: BC_REGISTER_LOOPER called without request [ 263.315178] binder: 20628:20631 got transaction to invalid handle [ 263.360276] binder: 20628:20631 transaction failed 29201/-22, size 0-0 line 3018 [ 263.376136] binder: 20622:20624 BC_FREE_BUFFER u0000000000000000 no match [ 263.376147] binder: 20622:20624 got reply transaction with no transaction stack [ 263.376156] binder: 20622:20624 transaction failed 29201/-71, size 72-56 line 2926 [ 263.377339] loop3: p1 p2 p3 p4 < > [ 263.377849] binder: 20622:20624 got transaction to invalid handle [ 263.377859] binder: 20622:20624 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 263.378135] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.459627] loop0: p1 p2 p3 p4 < > [ 263.486260] binder: 20597:20603 got transaction to invalid handle [ 263.486271] binder: 20597:20603 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 263.486753] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.633674] binder: 20628:20687 got transaction to invalid handle [ 263.643928] binder: 20628:20687 transaction failed 29201/-22, size 0-0 line 3018 [ 263.653623] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.741627] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.780336] binder: 20656:20665 got transaction to invalid handle 13:00:13 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7496856e733d5366532c7266646e7f3d", @ANYRESHEX=r0, @ANYBLOB="c39a990b12e874709b5b2989c4b7a9bd4d01bcd975e7817cdecee1242d7dacbaf081ed2539812918fdf31233c764f2e47772f1377290471b67a38ae907d21cb3d133e074eaf8ee234da0fdf53e0fbda15c6eb79f1d3370e05d1d3237c1118af71dc53662b44783c27e093b2d0fb492a8b97f3a7a9291b85d0800e6f4df2ead73c61bc4838c895d75b2e9950cafc891019d1da48a16ae4c7031f28d997b5c6f573092eada1f45ef07fa033cfcbd231b0287eab5babd868623fa32ebb354e4ba34f3e789d58b0d442f654c66b7390b27bd15406984095fcd45e483e75ce909e987367fdf38c91ed88d8755717998", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='9p\x00', 0x80000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap='nodevmap', 0x2c}, {@afid={'afid', 0x3d, 0xc9}, 0x2c}, {@cache_loose='cache=loose', 0x2c}, {@debug={'debug', 0x3d, 0xfffffffffffffe5c}, 0x2c}, {@access_client='access=client', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r2}, 0x2c}]}}) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r3 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x2, {0x50, {0x2, 0x0, 0x7}, 0x40, r2, r3, 0x7, 0xd9, 0xffffffffffffffc5, 0x0, 0x1000, 0xd4, 0x1, 0x80000000, 0x7fffffff, 0x2, 0x4, 0x2, 0x3, 0x1000, 0x6}}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000380)) 13:00:13 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x3a800, 0x8, 0xfff, 0x5, 0xee4}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000100)={0x7, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x105100, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'nr0\x00', 0x5003}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) pipe2$9p(&(0x7f0000000200), 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 263.822171] binder: 20656:20665 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 263.845441] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.854907] binder: 20647:20649 got transaction to invalid handle [ 263.861209] binder: 20647:20649 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e21, @multicast2=0xe0000002}, 'team_slave_1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) [ 263.891645] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.909778] 9pnet_virtio: no channels available for device (null) [ 263.932062] loop2: p1 p2 p3 p4 < > [ 263.936355] binder: 20712:20713 got transaction to invalid handle [ 263.936377] binder: 20712:20713 transaction failed 29201/-22, size 0-0 line 3018 13:00:13 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x200, 0x10000, 0x6, 0x5, 0x280000}, 0x14) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/100) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000040)) 13:00:13 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) accept(r0, &(0x7f0000000100)=@in={0x0, 0x0, @remote}, &(0x7f0000000180)=0x80) [ 263.994631] loop0: p1 p2 p3 p4 < > [ 264.007230] 9pnet_virtio: no channels available for device (null) 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e21, 0x7, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x4e24, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, 0x7, [0x7, 0x3f, 0x2, 0x401, 0x9, 0x1, 0xdb]}, 0x5c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x400, 0x0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x80, 0x10001) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x9475, 0x120e8000000, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@rand_addr=0x1ff, @in6=@loopback={0x0, 0x1}, 0x4e21, 0x3, 0x4e23, 0x5, 0x2, 0x80, 0x0, 0xff, r3, r4}, {0x5, 0xfff, 0x9, 0x1, 0x40, 0x2, 0x0, 0x4}, {0x8, 0x3f, 0x0, 0xb1}, 0x9, 0x6e6bb3, 0x2, 0x1, 0x1, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x3504, 0x3, 0x3, 0x9, 0x0, 0x8}}, 0xe8) fstat(r1, &(0x7f0000000040)) [ 264.037314] binder: undelivered TRANSACTION_ERROR: 29201 13:00:13 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) exit_group(0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 264.105929] loop3: p1 p2 p3 p4 < > 13:00:13 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x22) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$eventfd(r0, &(0x7f00000001c0)=0x5, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 264.129172] binder: 20709:20727 ERROR: BC_REGISTER_LOOPER called without request [ 264.157485] binder: 20709:20727 BC_FREE_BUFFER u0000000000000000 no match [ 264.205599] binder: 20709:20727 got reply transaction with no transaction stack 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f000029a000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4010, r0, 0x0) fstat(r2, &(0x7f0000000040)) write$eventfd(r1, &(0x7f00000000c0)=0x7, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000140)={0x40000000}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 13:00:13 executing program 2: open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x80) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) fstatfs(r0, &(0x7f0000000640)=""/86) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x632e, 0x3f}, 'port0\x00', 0x75, 0x80018, 0x8, 0x3, 0x7f, 0x6, 0x8001, 0x0, 0x2, 0x8}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000480)=""/65, &(0x7f0000000380)=0x41) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]], 0x0, 0x0, &(0x7f00000003c0)}) getrlimit(0xa, &(0x7f0000000140)) [ 264.262468] binder: 20708:20715 got transaction to invalid handle [ 264.262645] binder: 20708:20715 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 264.263178] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.290456] binder: 20766:20768 got transaction to invalid handle [ 264.290479] binder: 20766:20768 transaction failed 29201/-22, size 0-0 line 3018 [ 264.377518] binder: 20766:20795 got transaction to invalid handle [ 264.377529] binder: 20766:20795 transaction failed 29201/-22, size 0-0 line 3018 [ 264.422614] binder: 20709:20727 transaction failed 29201/-71, size 72-56 line 2926 [ 264.439689] binder: 20709:20727 got transaction to invalid handle [ 264.470563] binder: 20709:20727 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 264.472406] binder: 20721:20724 got transaction to invalid handle [ 264.472415] binder: 20721:20724 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 264.472897] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.482638] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.482662] binder: undelivered TRANSACTION_ERROR: 29201 13:00:13 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) ioctl(r0, 0x7, &(0x7f00000000c0)="279734453b4d3b27406a8bf6ae6a3d879cb1523584119bbd1c6cdf1a7c416561a057e804e664fa9dadd78a5519c5c7e786527ff897b1741a852f082f9294c7c0ffc5f9f641da3878d252480f53d1791dd6a4c47a143ae3d496b8bd0fc9923a89530f46c92fd763e1edde94428f7afe89c7eb047d4a7149e271f44e9e295e0a1e66eb14837da22e55dc4f817f97abe842091d83026a859f95cb580111bcdb05b45a942b6cf176") 13:00:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 2: open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x80) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) fstatfs(r0, &(0x7f0000000640)=""/86) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x632e, 0x3f}, 'port0\x00', 0x75, 0x80018, 0x8, 0x3, 0x7f, 0x6, 0x8001, 0x0, 0x2, 0x8}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000480)=""/65, &(0x7f0000000380)=0x41) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000f9ff0038a19bd96d08b7b136c9521d7ae712aa7f1b7c6e4dc8841f242b75257d3b715afc49196389efa489800f8f0639a77f29425ca72e08ea58cdb0e71e77893f18af24b850c83903fdb00094b6a029655db7afb404798069f7a41209f07eef08d30eff1d468d338784703710358f59bcb053ca64d0459765132259354084e5a1e50051f146346f8514014b4cd6db21c6c273074cc59ac453be124d21259f621d44c6347484a4238d9e0bad34cebc30915d03b58d11a3e926f2ec00e898431f3a4f64ab78f7033d8d140717a84442e7e4a3ae1ae39fee674944741cc8dfec68973611c6fe267014226af4164e8f562b9f64717a33b8189623af868d"]], 0x0, 0x0, &(0x7f00000003c0)}) getrlimit(0xa, &(0x7f0000000140)) 13:00:13 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000001c0)="13f3545b12693c79b49b65a8c28b1a8aab") getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000a00000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0xfffffffffffffee2, &(0x7f00000000c0)=0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x53) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xc0, r2, 0x702, 0x70bd27, 0x25dfdbfe, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4528}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4884}, 0x4000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000580)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 264.646786] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.652752] binder: 20735:20740 got transaction to invalid handle [ 264.652761] binder: 20735:20740 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x20004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/4096) mprotect(&(0x7f0000d33000/0x3000)=nil, 0x3000, 0x1000000) fstat(r2, &(0x7f0000000100)) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) [ 264.695468] binder: undelivered TRANSACTION_ERROR: 29201 13:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)) [ 264.775315] loop0: p1 p2 p3 p4 < > [ 264.836036] loop3: p1 p2 p3 p4 < > [ 264.899927] binder: 20826:20839 ERROR: BC_REGISTER_LOOPER called without request [ 264.908976] binder: 20822:20828 got transaction to invalid handle [ 264.924087] binder: 20822:20828 transaction failed 29201/-22, size 0-0 line 3018 [ 264.926199] binder: 20826:20839 BC_FREE_BUFFER u0000000000000000 no match [ 264.926209] binder: 20826:20839 got reply transaction with no transaction stack [ 264.926217] binder: 20826:20839 transaction failed 29201/-71, size 72-56 line 2926 [ 264.940079] binder: 20826:20839 got transaction to invalid handle [ 264.940091] binder: 20826:20839 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 264.940371] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.013404] binder: 20820:20829 got transaction to invalid handle [ 265.013412] binder: 20820:20829 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 265.013912] binder: undelivered TRANSACTION_ERROR: 29201 13:00:14 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="0800001b13cbbce54a067aa236a36a837ddf8cfd5773acfc0cf3f6c70d29c7e5aa27527d33b9f6c4973136f1e903e182f3531a17ca51107102169b1790b0096058258376b014a01d73ff622160324563b04dc794e2cf60901411cb0d24574b003ba371894bc09f45f4481c72f165"]], 0x0, 0x0, &(0x7f00000003c0)}) socket$packet(0x11, 0x3, 0x300) 13:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fallocate(r1, 0x11, 0x80000001, 0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 13:00:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:14 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:14 executing program 7: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x1e2) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d7b5bd347aded909c7e98fa8a547fb87b02821c8b58caf6e6b30521bf3ee58ad0d19c258113fdfc9f12b1a3715bc9", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 13:00:14 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x22) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$eventfd(r0, &(0x7f00000001c0)=0x5, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 265.095218] binder: 20835:20841 got transaction to invalid handle [ 265.105596] binder: 20835:20841 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 265.121207] binder: 20822:20880 got transaction to invalid handle [ 265.121216] binder: 20822:20880 transaction failed 29201/-22, size 0-0 line 3018 13:00:14 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x64, r3}) [ 265.121281] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.170262] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.185577] binder: undelivered TRANSACTION_ERROR: 29201 13:00:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 265.198057] 9pnet: Insufficient options for proto=fd [ 265.211376] 9pnet: Insufficient options for proto=fd 13:00:14 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) utimes(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}) [ 265.273532] loop2: p1 p2 p3 p4 < > [ 265.312318] 9pnet: Insufficient options for proto=fd 13:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 265.322830] binder: 20911:20919 unknown command 1 [ 265.322838] binder: 20911:20919 ioctl c0306201 20000440 returned -22 [ 265.398560] loop3: p1 p2 p3 p4 < > 13:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) fallocate(r1, 0x0, 0x100, 0x5) [ 265.453802] 9pnet: Insufficient options for proto=fd 13:00:14 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:14 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000001a01000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) 13:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0xb, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_getoverrun(r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)=0x8) fstat(r4, &(0x7f0000000040)) [ 265.562690] binder: 20889:20890 ERROR: BC_REGISTER_LOOPER called without request [ 265.591423] binder: 20889:20890 BC_FREE_BUFFER u0000000000000000 no match 13:00:14 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='dctcp-reno\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x3f) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='user\x00', 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000500)="d1016eb8b3c319fd163a3b7281dd6683d34e55b316ce8992d56efb8f13747f204596ee46005ad1f9e8078d96fa1810bd766f7aa17e75f061d5f1f38d1462dbbdac6bc0c413889bb78eb4a7e208eadf5c3917680d6f0fde09d1fa4db58ab05e63a873e2d0bbd428804206dea9083acbee736ebbb9bdd4a008963813bdeeaaac79c1bde3d63f4cb8a4e3d46ce281f04cc39f44c83c5c967d7818a4da369db153697f148691ce3c2fa62b160f89972a3a28fd877ef1e09ca65468", 0xb9, 0x1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="a40000001400020926bd7000fcdbdf25020400fdaec1663d9b7e0b011a3c6a499d9f5b4a43332e7019f96f5617ac4007825770a345b0be4e43d15ef4fc8d0cc15c88c62e55c833cc21e0b904e6b75bdc5add085cef9801434f4e3713f8e1b9446609a72cc5fe18c5a32db466927300c04688078dc5988a736ccb985a61394735ff01d88dd81dd14ac89094d41c52c697870954357e88b877813d1b521ca2b2f671a37d123a935bcc3ae94e6590854b5a071e2f36da6d727d71d91d85cecc50d0a4d2becde1e864cb03ab5484a95ba54f9536daefcb099dbbb044a1e3940fd943cc6e388a1a561e47ce232c33664cee6600c204d83c", @ANYRES32=r3, @ANYBLOB="080001000000000414000600f9ffffff0000000000000000d3e4000008000400000000001400060007000000ff030000010000000800000008000400ac14140b140003006970366772657461703000000000000008000100ac14141808000200ac1414aa1400060008000000040000007f00000007000000140006009e4e0000020000000700000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000001c0)={0x8001}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="63b085a600000000db4efe2327d1b1b646e23c80e66b7815bd44f7c642a63c9a964b5b7a04f8c291"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 265.645713] binder: 20889:20890 got reply transaction with no transaction stack [ 265.684294] binder: 20889:20890 transaction failed 29201/-71, size 72-56 line 2926 [ 265.726366] binder: 20889:20890 got transaction to invalid handle [ 265.736325] binder: 20888:20893 got transaction to invalid handle [ 265.771995] binder: 20889:20890 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 265.791289] loop0: p1 p2 p3 p4 < > [ 265.804875] binder: 20888:20893 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="0800001b13cbbce54a067aa236a36a837ddf8cfd5773acfc0cf3f6c70d29c7e5aa27527d33b9f6c4973136f1e903e182f3531a17ca51107102169b1790b0096058258376b014a01d73ff622160324563b04dc794e2cf60901411cb0d24574b003ba371894bc09f45f4481c72f165"]], 0x0, 0x0, &(0x7f00000003c0)}) socket$packet(0x11, 0x3, 0x300) [ 265.807521] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.829515] binder: 20966:20970 got transaction to invalid handle 13:00:15 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 265.829535] binder: 20966:20970 transaction failed 29201/-22, size 0-0 line 3018 [ 265.901159] binder: 20966:20983 got transaction to invalid handle [ 265.901168] binder: 20966:20983 transaction failed 29201/-22, size 0-0 line 3018 [ 265.917263] binder: undelivered TRANSACTION_ERROR: 29201 13:00:15 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="0800001b13cbbce54a067aa236a36a837ddf8cfd5773acfc0cf3f6c70d29c7e5aa27527d33b9f6c4973136f1e903e182f3531a17ca51107102169b1790b0096058258376b014a01d73ff622160324563b04dc794e2cf60901411cb0d24574b003ba371894bc09f45f4481c72f165"]], 0x0, 0x0, &(0x7f00000003c0)}) socket$packet(0x11, 0x3, 0x300) [ 265.917288] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.047778] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.113401] binder: 20990:20995 got transaction to invalid handle [ 266.140528] binder: 20912:21001 got transaction to invalid handle 13:00:15 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x1ccd) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x24) ioctl$TCXONC(r1, 0x540a, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r5 = inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x0) inotify_rm_watch(r2, r5) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4) fstat(r3, &(0x7f0000000040)) splice(r0, &(0x7f00000000c0), r3, &(0x7f0000000100), 0x4, 0x8) [ 266.166786] binder: 20912:21001 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:15 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000a00)=0xfffffffffffffdd4) stat(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000b00)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) r8 = getpid() r9 = geteuid() getgroups(0x4, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff, 0x0]) r11 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@remote}}, &(0x7f00000013c0)=0xe8) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000014c0)=0x0) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001680)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xe8) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001940)=[{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000100)="9c268e782ac0908338ab7a7944d3f2", 0xf}, {&(0x7f0000000500)="93116ad91f6b39e0299b7e702846a8951626e49d2cd3b743f71f43781a3f461a4fbf727b311911abada170e02d3f09b77a186777955e3d4f825fcf00b7917abaaf581715c9e01c73429e0dcf54f0a1d267ed", 0x52}, {&(0x7f0000000580)="43950e500ce6dc8e130eb4520eb2514836b06f5797382986169d7b6c9f18d290740d2edd60cbdaf61eea9b65131c6cd54ab4e0a61f48e06de21c4dbd5d699913f22081a7b2d4d1353ff5730732764fa67e64c889bb1fcaae1b565cdd7b04df43a991e56ac95a77368e0d706be100e49d6a6b16e81b8588ba2fe5391fc6b36161bd09155f4d2edde6f89af96b87877e0edf0f4b799cb96cf20141ff2d11c299", 0x9f}, {&(0x7f00000001c0)="70c6449ba4c3a028808a956692e90ab5d59a003c7f4b5868e88dbc2b44f14706f8008ce5880daa7ae871a322fc2c215df8fe782e333e6a62365d8d", 0x3b}, {&(0x7f0000000640)="aee44eb60dc3f7c867b4e7de863bf58e71ea8abe2baef7cbe50cfc59c6297b1695b294d5e137b0ade8aa6faf3ad942955e1599b3eb25fd4dee5fe584b1fa03cc00941a95a56be5a3f9860fdccbd035d2e5f4712d111494bca835d327478afd145fbb2481c8d888d88c47768a4912bc762f3c41a687141bb39418be478339", 0x7e}, {&(0x7f00000006c0)="eabc7116be29c30255c9b0f3e435fa4c4fa8d43e6502bc8ff2fe40e243eff49a7866da86bd338ace7cf95eacf774b2227f9c4a0b6fa6e59889e50527d0d3d9f905f0e8fd951a45ec8911c4c00ee016758d9c1a90f4709f41f458d60270569e034d994e57b92e0f15c318c7a072a712498cc06a322b67d9d4ef0e6c7fc1ae5c2652ad009c391a9aef61521f60b6569265195d1b34c29d2dd299d6d9f67aacca6eb8317a0ef7d729700fb8fe82ab5a3ae6efb51eceb50bd22e1d11f01744", 0xbd}, {&(0x7f0000000780)="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", 0xff}, {&(0x7f00000002c0)="2df5ad1f5b9b93dfd898fa62bb674d2b489084e7c9251684aa273ffcb9897f675a96e8bcef381b750a6c064c", 0x2c}], 0x8, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x60, 0x40}, {&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000dc0)="5390da4b984c5598d6349f8d759302b74dbc15b765aa3762eccfea7a3fc198c9a430912d9ef574725cda10f555392678111f9cc00e7939c3423bcb1d2f51675bc25d18a623a2ffa43da6", 0x4a}, {&(0x7f0000000e40)="e5c252179f354949c4c6bb2ae38d4cc7c5c1431e481a8d8f18133351202ced9828d886356f82ee4517bb11188ea0d9492cbe02631577d6ca87f5524cef99c576caab591d0bb44be46380f91ff88c8c01e3305585e46f116e3b64e8b244fc2ee68db38849d4d671312fd4c3f1c579eab6011da0bb35a6f1f553cbd82513a61e334cf6655aa87d833ab1dc78e5329fad14fc6f5b8b143ed694a81a27495b9594b9d539ef0b4b5ee8eaca4610bedee2805ac810d8dbc517b8f6feaaef9cc0c85552f208673c37dcfc4177f9d0a365b4f85490915ad04fd3cdff93ae0044c35c9205356c9e1434df8fa7d9084b52be92", 0xee}, {&(0x7f0000000f40)="c1085ca12fdfe877393d7d84ece2bf20ceb6a1a26b5e0281c7c12ce49af6def6eee0801c2e17b9af91321812ae8446512d0597f7b5180c8b90d84c8ec5cb76b718bb511ceb2b6a96aa020447f3c3d395954293d66af7da69e815bd6b77c3ee935843099a0d7e76a148ef6138d370fb9416f164acfaade7b1fa7a3b87df71f2db05e84e1c29ad6f6b94ea3b111d0e0a6e9dcb42b63fe0ce31f10d55588d6e3c07ef3c2f81cfb3ea898606664c40ba74e69359e4bbe484f68f23207835c3235392364cdea76b8c75785dbce6571d", 0xcd}, {&(0x7f0000001040)="a6183f05b9c51c3fe5ce6b484d8946e90b643f5b6198ab744573738f26d62702ea1ca741dc471c2d0630f9f46bafe0f0d6e9c922541ce6927906972e175f460b6411a2d632b1fe6bf9d5ea0d3fb9d1f35932a801f43246aa9acd1d5903193984538af097ced944cf1e59c99504e298ff8513c5ce3b284646ab80044aa969d6c0cbf03f33623c88eb7810e4c64782bfe102e6", 0x92}, {&(0x7f0000001100)="5633839dfe0be7b9fa1240b1d455ab5aa9d057c83a68041945c52038c1565a0fadc6883c00c52ecb5bb4cc0a1bb48c1dbe9f17f28627a503c9b1f657362c9f2e572e15aa5626435944f252e407b348593a361a974d0a7f265fd9cdbc5817e9dfc92bf5f232f30cd3bc31f109e145bf96b27edcbda54d20adacd1086193c4b8fa3a60b71293b1a7915bf3a87a3602c99904df1be52622ec59c1c6833cff", 0x9d}, {&(0x7f00000011c0)="32551b1db1d62058434f014499c50fd9d46eb205d05dc016550cf9e0a1d475e97e9c4969f469a3c587ce080e23e6619ae539d02e8722949dc0beb7118e15e5e4c1e6a1a74362cd5a0d5961749e34f2b2da021bb8ed1fb3cb57093cb5a382d44de0624124ff24b68e68b22941dfafb9889f09b5350465bf38", 0x78}], 0x6, &(0x7f0000001880)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x90, 0x1}], 0x2, 0x1) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="0800001b13cbbce54a067aa236a36a837ddf8cfd5773acfc0cf3f6c70d29c7e5aa27527d33b9f6c4973136f1e903e182f3531a17ca51107102169b1790b0096058258376b014a01d73ff622160324563b04dc794e2cf60901411cb0d24574b003ba371894bc09f45f4481c72f165"]], 0x0, 0x0, &(0x7f00000003c0)}) socket$packet(0x11, 0x3, 0x300) [ 266.177653] binder: 20990:20995 transaction failed 29201/-22, size 0-0 line 3018 [ 266.236459] binder: 20990:21023 got transaction to invalid handle [ 266.236468] binder: 20990:21023 transaction failed 29201/-22, size 0-0 line 3018 [ 266.252632] binder: 21004:21010 ERROR: BC_REGISTER_LOOPER called without request [ 266.252642] binder: 21004:21010 BC_FREE_BUFFER u0000000000000000 no match [ 266.252650] binder: 21004:21010 got reply transaction with no transaction stack [ 266.252657] binder: 21004:21010 transaction failed 29201/-71, size 72-56 line 2926 [ 266.252900] binder: 21004:21010 got transaction to invalid handle [ 266.252908] binder: 21004:21010 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 266.253304] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.310245] binder: 20952:20957 got transaction to invalid handle 13:00:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = gettid() syz_open_procfs(r1, &(0x7f00000000c0)='statm\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) 13:00:15 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='dctcp-reno\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x3f) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000480)='user\x00', 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000500)="d1016eb8b3c319fd163a3b7281dd6683d34e55b316ce8992d56efb8f13747f204596ee46005ad1f9e8078d96fa1810bd766f7aa17e75f061d5f1f38d1462dbbdac6bc0c413889bb78eb4a7e208eadf5c3917680d6f0fde09d1fa4db58ab05e63a873e2d0bbd428804206dea9083acbee736ebbb9bdd4a008963813bdeeaaac79c1bde3d63f4cb8a4e3d46ce281f04cc39f44c83c5c967d7818a4da369db153697f148691ce3c2fa62b160f89972a3a28fd877ef1e09ca65468", 0xb9, 0x1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="a40000001400020926bd7000fcdbdf25020400fdaec1663d9b7e0b011a3c6a499d9f5b4a43332e7019f96f5617ac4007825770a345b0be4e43d15ef4fc8d0cc15c88c62e55c833cc21e0b904e6b75bdc5add085cef9801434f4e3713f8e1b9446609a72cc5fe18c5a32db466927300c04688078dc5988a736ccb985a61394735ff01d88dd81dd14ac89094d41c52c697870954357e88b877813d1b521ca2b2f671a37d123a935bcc3ae94e6590854b5a071e2f36da6d727d71d91d85cecc50d0a4d2becde1e864cb03ab5484a95ba54f9536daefcb099dbbb044a1e3940fd943cc6e388a1a561e47ce232c33664cee6600c204d83c", @ANYRES32=r3, @ANYBLOB="080001000000000414000600f9ffffff0000000000000000d3e4000008000400000000001400060007000000ff030000010000000800000008000400ac14140b140003006970366772657461703000000000000008000100ac14141808000200ac1414aa1400060008000000040000007f00000007000000140006009e4e0000020000000700000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000001c0)={0x8001}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="63b085a600000000db4efe2327d1b1b646e23c80e66b7815bd44f7c642a63c9a964b5b7a04f8c291"]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xc) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000001000000000000f6be82cf31026fe1cf3c657c69c8a2e212d741a0d07c634000edbf8e6d8e78750bbf372652f3a2e79113cf9b2d3cfa6b39042bfc8dcda5f6053cc52583ba6e9174b092b10720c877bb8dc86c1c5578618fe33dc63d72a591edf2bfdc83a8f197e93e57d4fe91826435ce2cce9f0c929c41f33db505a0940bd092f77afd561fc77836af580e5037f86ffed8c449bc45b34c79ba164576708cdb3c3268367c5e99c8df69527447ffcf31e5892f9b4135", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) write$selinux_create(r0, &(0x7f0000000100)=@access={'system_u:object_r:cgroup_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x2}, 0x51) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.310254] binder: 20952:20957 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 266.310931] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.341194] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.370707] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.476647] binder: undelivered TRANSACTION_ERROR: 29201 13:00:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.565448] binder: 21043:21046 ERROR: BC_REGISTER_LOOPER called without request [ 266.576295] binder: 21045:21047 got transaction to invalid handle [ 266.594432] binder: 21045:21047 transaction failed 29201/-22, size -8183727992896208797--913625753532533384 line 3018 13:00:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.620464] binder: 21043:21046 BC_FREE_BUFFER u0000000000000000 no match [ 266.620475] binder: 21043:21046 got reply transaction with no transaction stack [ 266.620485] binder: 21043:21046 transaction failed 29201/-71, size 72-56 line 2926 [ 266.622170] binder: 21043:21046 got transaction to invalid handle 13:00:15 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:15 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) bind(r0, &(0x7f0000000480)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-avx\x00'}, 0x80) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.622180] binder: 21043:21046 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 266.622500] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.648149] loop3: p1 p2 p3 p4 < > [ 266.730483] loop1: p1 p2 p3 p4 < > [ 266.816323] binder: 21089:21090 ERROR: BC_REGISTER_LOOPER called without request [ 266.824384] binder: 21089:21090 BC_FREE_BUFFER u0000000000000000 no match [ 266.824979] loop2: p1 p2 p3 p4 < > [ 266.835336] binder: 21089:21090 got reply transaction with no transaction stack [ 266.843091] binder: 21089:21090 transaction failed 29201/-71, size 72-56 line 2926 [ 266.854699] binder: 21045:21095 got transaction to invalid handle 13:00:16 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000a00)=0xfffffffffffffdd4) stat(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000b00)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) r8 = getpid() r9 = geteuid() getgroups(0x4, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff, 0x0]) r11 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@remote}}, &(0x7f00000013c0)=0xe8) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000014c0)=0x0) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001680)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xe8) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001940)=[{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000100)="9c268e782ac0908338ab7a7944d3f2", 0xf}, {&(0x7f0000000500)="93116ad91f6b39e0299b7e702846a8951626e49d2cd3b743f71f43781a3f461a4fbf727b311911abada170e02d3f09b77a186777955e3d4f825fcf00b7917abaaf581715c9e01c73429e0dcf54f0a1d267ed", 0x52}, {&(0x7f0000000580)="43950e500ce6dc8e130eb4520eb2514836b06f5797382986169d7b6c9f18d290740d2edd60cbdaf61eea9b65131c6cd54ab4e0a61f48e06de21c4dbd5d699913f22081a7b2d4d1353ff5730732764fa67e64c889bb1fcaae1b565cdd7b04df43a991e56ac95a77368e0d706be100e49d6a6b16e81b8588ba2fe5391fc6b36161bd09155f4d2edde6f89af96b87877e0edf0f4b799cb96cf20141ff2d11c299", 0x9f}, {&(0x7f00000001c0)="70c6449ba4c3a028808a956692e90ab5d59a003c7f4b5868e88dbc2b44f14706f8008ce5880daa7ae871a322fc2c215df8fe782e333e6a62365d8d", 0x3b}, {&(0x7f0000000640)="aee44eb60dc3f7c867b4e7de863bf58e71ea8abe2baef7cbe50cfc59c6297b1695b294d5e137b0ade8aa6faf3ad942955e1599b3eb25fd4dee5fe584b1fa03cc00941a95a56be5a3f9860fdccbd035d2e5f4712d111494bca835d327478afd145fbb2481c8d888d88c47768a4912bc762f3c41a687141bb39418be478339", 0x7e}, {&(0x7f00000006c0)="eabc7116be29c30255c9b0f3e435fa4c4fa8d43e6502bc8ff2fe40e243eff49a7866da86bd338ace7cf95eacf774b2227f9c4a0b6fa6e59889e50527d0d3d9f905f0e8fd951a45ec8911c4c00ee016758d9c1a90f4709f41f458d60270569e034d994e57b92e0f15c318c7a072a712498cc06a322b67d9d4ef0e6c7fc1ae5c2652ad009c391a9aef61521f60b6569265195d1b34c29d2dd299d6d9f67aacca6eb8317a0ef7d729700fb8fe82ab5a3ae6efb51eceb50bd22e1d11f01744", 0xbd}, {&(0x7f0000000780)="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", 0xff}, {&(0x7f00000002c0)="2df5ad1f5b9b93dfd898fa62bb674d2b489084e7c9251684aa273ffcb9897f675a96e8bcef381b750a6c064c", 0x2c}], 0x8, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x60, 0x40}, {&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000dc0)="5390da4b984c5598d6349f8d759302b74dbc15b765aa3762eccfea7a3fc198c9a430912d9ef574725cda10f555392678111f9cc00e7939c3423bcb1d2f51675bc25d18a623a2ffa43da6", 0x4a}, {&(0x7f0000000e40)="e5c252179f354949c4c6bb2ae38d4cc7c5c1431e481a8d8f18133351202ced9828d886356f82ee4517bb11188ea0d9492cbe02631577d6ca87f5524cef99c576caab591d0bb44be46380f91ff88c8c01e3305585e46f116e3b64e8b244fc2ee68db38849d4d671312fd4c3f1c579eab6011da0bb35a6f1f553cbd82513a61e334cf6655aa87d833ab1dc78e5329fad14fc6f5b8b143ed694a81a27495b9594b9d539ef0b4b5ee8eaca4610bedee2805ac810d8dbc517b8f6feaaef9cc0c85552f208673c37dcfc4177f9d0a365b4f85490915ad04fd3cdff93ae0044c35c9205356c9e1434df8fa7d9084b52be92", 0xee}, {&(0x7f0000000f40)="c1085ca12fdfe877393d7d84ece2bf20ceb6a1a26b5e0281c7c12ce49af6def6eee0801c2e17b9af91321812ae8446512d0597f7b5180c8b90d84c8ec5cb76b718bb511ceb2b6a96aa020447f3c3d395954293d66af7da69e815bd6b77c3ee935843099a0d7e76a148ef6138d370fb9416f164acfaade7b1fa7a3b87df71f2db05e84e1c29ad6f6b94ea3b111d0e0a6e9dcb42b63fe0ce31f10d55588d6e3c07ef3c2f81cfb3ea898606664c40ba74e69359e4bbe484f68f23207835c3235392364cdea76b8c75785dbce6571d", 0xcd}, {&(0x7f0000001040)="a6183f05b9c51c3fe5ce6b484d8946e90b643f5b6198ab744573738f26d62702ea1ca741dc471c2d0630f9f46bafe0f0d6e9c922541ce6927906972e175f460b6411a2d632b1fe6bf9d5ea0d3fb9d1f35932a801f43246aa9acd1d5903193984538af097ced944cf1e59c99504e298ff8513c5ce3b284646ab80044aa969d6c0cbf03f33623c88eb7810e4c64782bfe102e6", 0x92}, {&(0x7f0000001100)="5633839dfe0be7b9fa1240b1d455ab5aa9d057c83a68041945c52038c1565a0fadc6883c00c52ecb5bb4cc0a1bb48c1dbe9f17f28627a503c9b1f657362c9f2e572e15aa5626435944f252e407b348593a361a974d0a7f265fd9cdbc5817e9dfc92bf5f232f30cd3bc31f109e145bf96b27edcbda54d20adacd1086193c4b8fa3a60b71293b1a7915bf3a87a3602c99904df1be52622ec59c1c6833cff", 0x9d}, {&(0x7f00000011c0)="32551b1db1d62058434f014499c50fd9d46eb205d05dc016550cf9e0a1d475e97e9c4969f469a3c587ce080e23e6619ae539d02e8722949dc0beb7118e15e5e4c1e6a1a74362cd5a0d5961749e34f2b2da021bb8ed1fb3cb57093cb5a382d44de0624124ff24b68e68b22941dfafb9889f09b5350465bf38", 0x78}], 0x6, &(0x7f0000001880)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x90, 0x1}], 0x2, 0x1) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.862166] binder: 21045:21095 transaction failed 29201/-22, size -8183727992896208797--913625753532533384 line 3018 [ 266.885205] binder: 21089:21090 got transaction to invalid handle [ 266.885216] binder: 21089:21090 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 266.885855] binder: undelivered TRANSACTION_ERROR: 29201 13:00:16 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404008000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 266.959482] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.976665] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.041735] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 13:00:16 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.102522] binder: 21069:21070 got transaction to invalid handle [ 267.107723] binder: 21074:21081 ERROR: BC_REGISTER_LOOPER called without request [ 267.107735] binder: 21074:21081 BC_FREE_BUFFER u0000000000000000 no match [ 267.107744] binder: 21074:21081 got reply transaction with no transaction stack [ 267.107753] binder: 21074:21081 transaction failed 29201/-71, size 72-56 line 2926 [ 267.107916] binder: 21074:21081 got transaction to invalid handle [ 267.107924] binder: 21074:21081 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 267.108215] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.193031] binder: 21111:21116 got transaction to invalid handle [ 267.202881] binder: 21111:21116 transaction failed 29201/-22, size 0-0 line 3018 [ 267.222539] binder: 21069:21070 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:16 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.265975] binder: 21111:21132 got transaction to invalid handle [ 267.272366] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.272404] binder: 21111:21132 transaction failed 29201/-22, size 0-0 line 3018 13:00:16 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)={0x0}) r4 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)={0x0}) r6 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) r7 = mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0xb0, 0x0, &(0x7f0000001640)=[@register_looper={0x630b}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001500)=[@flat={0x0, 0x101, r3, 0x3}, @flat={0x73622a85, 0xa, r4, 0x3}, @flat={0x776a2a85, 0xb, r5, 0x4}], &(0x7f0000001580)=[0x0, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0]}}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f00000015c0)=[@fda={0x66646185, 0x3, 0x4, 0xf}, @flat={0x73622a85, 0x1, r6}], &(0x7f0000001600)=[0x78, 0x40, 0x0]}}, @free_buffer={0x40086303, r7}], 0x54, 0x0, &(0x7f0000001700)="7e11db52f45410875d9d7c39a95f91dd4cdb344d6ccb59a952f0bcc2dfaa23e9ac1f83c5e1fe19c3b615e8fbb47ddc8e12abeb41eebe7e14ee26a3b98450af4bef55a3b727f462368096cd2395162d67937c1bf3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd30, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) 13:00:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.318736] binder: 21125:21126 got transaction to invalid handle [ 267.318746] binder: 21125:21126 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 267.368780] binder: 21049:21061 got transaction to invalid handle [ 267.368834] binder: 21049:21061 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 267.391525] blk_update_request: 2616 callbacks suppressed [ 267.391530] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391577] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391582] buffer_io_error: 2595 callbacks suppressed [ 267.391588] Buffer I/O error on dev loop3p4, logical block 0, async page read 13:00:16 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0x8, 0x1000]) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB]) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000001000)={@val={0x0, 0x6004}, @val={0x2, 0x4, 0xc6d9, 0x3f, 0x8, 0x9}, @eth={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@generic={0x4305, "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"}}}}, 0x101c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0xc000000000000000, 0x2, 'client0\x00', 0x4, "f76d9d4c519b69ca", "466510f40ca1ef264185dd3f764f8f01553495819ef75494ed60f03556475110", 0x3, 0x6}) 13:00:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000014c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) syncfs(r0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)={0x303, 0x33}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) wait4(r2, &(0x7f00000002c0), 0x80000000, &(0x7f0000000580)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e2f70726f632f7379732f02000000000000002f76732f7363686564756c655f69636d7000"], &(0x7f0000000480)=""/226, 0xe2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.391624] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391628] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.391654] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391658] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.391685] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391689] Buffer I/O error on dev loop3p4, logical block 0, async page read 13:00:16 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:16 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000000, 0xfffffffffffffffd) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000001c0)=0x14) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r2, 0x302, 0x70bd25, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4000000000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xf0e3}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}]}]}, 0xdc}, 0x1}, 0x40) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.391715] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391720] Buffer I/O error on dev loop3p4, logical block 0, async page read 13:00:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.391755] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391760] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.391787] blk_update_request: I/O error, dev loop3, sector 301 13:00:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.391792] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.391820] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391825] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.391852] blk_update_request: I/O error, dev loop3, sector 301 [ 267.391857] Buffer I/O error on dev loop3p4, logical block 0, async page read 13:00:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.391887] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 267.481549] binder: 21154:21159 ERROR: BC_REGISTER_LOOPER called without request [ 267.481559] binder: 21154:21159 BC_FREE_BUFFER u0000000000000000 no match 13:00:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:17 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x200, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000380)=@generic={0x1, 0x6, 0x3a}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80000001) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f00000001c0)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.481567] binder: 21154:21159 got reply transaction with no transaction stack [ 267.481575] binder: 21154:21159 transaction failed 29201/-71, size 72-56 line 2926 [ 267.485220] binder: 21154:21159 got transaction to invalid handle [ 267.485229] binder: 21154:21159 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 267.486098] binder: 21147:21151 got transaction to invalid handle [ 267.486108] binder: 21147:21151 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 267.567490] binder: 21073:21078 got transaction to invalid handle [ 267.567496] binder: 21073:21078 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 267.630064] loop3: p1 p2 p3 p4 < > [ 267.774173] loop1: p1 p2 p3 p4 < > [ 267.780096] binder: 21183:21189 got transaction to invalid handle [ 267.780109] binder: 21183:21189 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 267.785087] binder: 21153:21166 got transaction to invalid handle [ 267.785108] binder: 21153:21166 transaction failed 29201/-22, size 0-0 line 3018 [ 267.850843] binder: 21153:21209 got transaction to invalid handle [ 267.850852] binder: 21153:21209 transaction failed 29201/-22, size 0-0 line 3018 [ 267.877404] binder: 21161:21165 got transaction to invalid handle [ 267.877452] binder: 21161:21165 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 267.969853] binder: 21221:21222 got transaction to invalid handle [ 267.969867] binder: 21221:21222 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.117088] binder: 21181:21185 got transaction to invalid handle [ 268.117146] binder: 21181:21185 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.148347] loop3: p1 p2 p3 p4 < > [ 268.230750] loop2: p1 p2 p3 p4 < > [ 268.278119] loop1: p1 p2 p3 p4 < > [ 268.338110] binder: 21160:21259 got transaction to invalid handle [ 268.338159] binder: 21160:21259 transaction failed 29201/-22, size 0-0 line 3018 [ 268.361715] binder: 21229:21234 got transaction to invalid handle [ 268.361764] binder: 21229:21234 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.544224] binder: 21230:21235 got transaction to invalid handle [ 268.544272] binder: 21230:21235 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.546274] binder: 21248:21249 got transaction to invalid handle [ 268.546287] binder: 21248:21249 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.621232] loop3: p1 p2 p3 p4 < > [ 268.688526] binder: 21213:21293 got transaction to invalid handle [ 268.688537] binder: 21213:21293 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 268.734123] binder: 21264:21275 got transaction to invalid handle [ 268.734180] binder: 21264:21275 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 268.784298] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.791545] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.797071] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.802549] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.808065] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.813537] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.819043] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.824565] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.830031] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.835518] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.840969] binder: undelivered TRANSACTION_ERROR: 29201 13:00:18 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) fcntl$getflags(r1, 0x408) 13:00:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001480)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 268.846487] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.851963] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.857466] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.862941] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.868465] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.873939] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.879644] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.885198] binder: undelivered TRANSACTION_ERROR: 29201 13:00:18 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 268.975169] binder: 21313:21318 got transaction to invalid handle [ 268.985217] binder: 21313:21318 transaction failed 29201/-22, size 0-0 line 3018 [ 268.997326] binder: 21314:21317 got transaction to invalid handle [ 268.997335] binder: 21314:21317 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 268.997887] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.002281] binder: 21315:21320 got transaction to invalid handle [ 269.002291] binder: 21315:21320 transaction failed 29201/-22, size 0-0 line 3018 [ 269.002540] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.023355] loop3: p1 p2 p3 p4 < > [ 269.042829] loop2: p1 p2 p3 p4 < > 13:00:18 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0x5, 0x4}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) init_module(&(0x7f0000000340)='md5sumem1cgroup\x00', 0x10, &(0x7f0000000380)='/dev/binder#\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x3ff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x3f, {0x2, 0x4e23}, {0x2, 0x4e24}, {0x2, 0x4e23, @rand_addr=0xfffffffffffffffd}, 0x40, 0x5, 0x5, 0x2, 0x46, 0x0, 0xffffffffffffffe2, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fsync(r1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x8) [ 269.173996] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.179057] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 13:00:18 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 269.192081] binder: 21337:21342 got transaction to invalid handle [ 269.192101] binder: 21337:21342 transaction failed 29201/-22, size 0-0 line 3018 [ 269.237457] binder: undelivered TRANSACTION_ERROR: 29201 13:00:18 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffc, 0xaaaaaaaaaaaab39, &(0x7f0000000200)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000700)={0x6, 0x7, 0xfffffffffffffc39, 0x0, 0xf}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x7c, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x40, &(0x7f0000000380)=[@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1, 0x2, 0x27}, @flat={0x73682a85, 0xa, r3, 0x1}], &(0x7f0000000480)=[0x0, 0x20, 0x30, 0x68, 0x78, 0x30, 0x40, 0x28]}}, @exit_looper={0x630d}, @dead_binder_done={0x40086310}, @release={0x40046306, 0x4}, @exit_looper={0x630d}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x1, 0x4}], 0xc4, 0x0, &(0x7f0000000540)="84f21295560755edd2899c6758a5821cd8a42a48e2127fe179e72598797fa7681eab2e0942e6ff514b19ebaeaea7a6c74a3028baa8bbd99273d1188834dabdacf3c6484f655b3614f6844d3782ee9538b986fc993dfc80f264eee31443df7d3ff5c08e7440d6ce56276709fb1b0b86b84ca876fd775b6e2daff2d5dffe2c0646f509ebb6b552fcb6e625fe572af57e441a1199f1cefa2bfbaf0a52113afe6e976875be1ff129841107456f4d0d53404ef1bee9a17bbe439bad58d416d1b8dd0c8891d327"}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000680)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000f9ffcbfc00"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 269.398063] binder: 21310:21319 got transaction to invalid handle [ 269.428802] binder: 21339:21341 got transaction to invalid handle 13:00:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 269.444491] binder: 21339:21341 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 269.453405] binder: 21310:21319 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 269.455068] binder: undelivered TRANSACTION_ERROR: 29201 13:00:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000200)={0x80000000}) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x200042, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000ead4332d6e82e99120ded04c9aa63e1e8342d4469a3683d275137cbb4f99dc67fba813655d089a67171f0762d7a82a6ab2ec76f8feb922b9cf13fd2ec369ff327db2432f2ff68de073d75411d439f8535ad1b831ee9a36a686e5d043b8432c9d07ecb44faf5bddc8545f71b49d215cde", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 269.479079] binder: 21358:21360 got transaction to invalid handle [ 269.479088] binder: 21358:21360 transaction failed 29201/-22, size 0-0 line 3018 [ 269.572209] binder: 21311:21325 got transaction to invalid handle [ 269.572222] binder: 21311:21325 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 269.572872] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.573620] binder: 21358:21360 got transaction to invalid handle 13:00:18 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:18 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(r0, &(0x7f00000001c0)={0x7, 0x79, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 269.573629] binder: 21358:21360 transaction failed 29201/-22, size 0-0 line 3018 [ 269.575452] loop1: p1 p2 p3 p4 < > [ 269.584518] binder: 21364:21373 got transaction to invalid handle [ 269.584538] binder: 21364:21373 transaction failed 29201/-22, size 0-0 line 3018 [ 269.585432] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.626036] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 269.635023] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.635048] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.717274] binder: 21396:21401 got transaction to invalid handle [ 269.717316] binder: 21396:21401 transaction failed 29201/-22, size 0-0 line 3018 [ 269.718916] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.721077] binder: 21400:21402 unknown command -722862080 [ 269.721086] binder: 21400:21402 ioctl c0306201 20000440 returned -22 [ 269.738692] binder: 21385:21389 got transaction to invalid handle [ 269.738705] binder: 21385:21389 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 269.739135] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.781929] loop2: p1 p2 p3 p4 < > [ 269.862738] binder: 21419:21422 got transaction to invalid handle [ 269.862747] binder: 21419:21422 transaction failed 29201/-22, size 0-0 line 3018 [ 269.873144] binder: 21418:21421 got transaction to invalid handle 13:00:19 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='mountinfo\x00') sendto$inet(r0, &(0x7f0000000880)="a61357357a369889480332b1544bcb111f9db37bfd3bc5889696277a0eec94f038a7cb8d391c60", 0x27, 0x10, &(0x7f00000008c0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d42112c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) recvmsg(r2, &(0x7f0000000800)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/39, 0x27}, {&(0x7f0000000640)=""/227, 0xe3}], 0x9, 0x0, 0x0, 0x6}, 0x10000) [ 269.873153] binder: 21418:21421 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 269.873600] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.963092] binder: 21419:21428 got transaction to invalid handle [ 269.963103] binder: 21419:21428 transaction failed 29201/-22, size 0-0 line 3018 [ 269.966504] binder: 21413:21414 got transaction to invalid handle [ 269.966515] binder: 21413:21414 transaction failed 29201/-22, size 0-0 line 3018 13:00:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:19 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:19 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.031595] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.052752] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.066859] binder: undelivered TRANSACTION_ERROR: 29201 13:00:19 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.117690] binder: undelivered TRANSACTION_ERROR: 29201 13:00:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.159952] 9pnet: Could not find request transport: B [ 270.172286] binder: 21366:21374 got transaction to invalid handle 13:00:19 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x2, 0x12) [ 270.172298] binder: 21366:21374 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 270.176700] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.231288] 9pnet: Could not find request transport: B 13:00:19 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.261209] loop3: p1 p2 p3 p4 < > [ 270.270074] binder: 21441:21444 got transaction to invalid handle [ 270.270084] binder: 21441:21444 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 270.270248] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.333246] binder: 21440:21448 got transaction to invalid handle [ 270.333255] binder: 21440:21448 transaction failed 29201/-22, size 0-0 line 3018 [ 270.333507] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.369534] binder: 21450:21456 got transaction to invalid handle 13:00:19 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000580)=@pppol2tpv3in6, &(0x7f0000000600)=0x80) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r1, 0x29, 0xd8ed20ed8569e166, &(0x7f0000000100)=""/6, &(0x7f00000001c0)=0x6) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) getsockname$inet6(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x17, 0xf4, &(0x7f0000000480)="35d3e8e22e37af4436ecebb8fac187691d3cbe46e0ca6d4b8352f6b66035f06682e77b8354a3fe09b8076dbef4e0664ae938cb4181ebbac54fed474af0695013e7cf1df6f73afd55faef0320776e5a855f31bb09d2246de903a08df13b2ebb4955b4f2c45b45b0146319b7f02322d11eae3eeafb9b0da85ce12fb310647c429e489e88132c2627e26a7a3f32d979013237028c9b33160b3f92594fa904d76d33b973c0499d64ed731b1c90a1692666f2a38456ad88b77f6a0810c646aaf42dd927b85614ddeab174a0ad6f092ffb1737d16bda416ec7405e6de57b88ce9f1eb7f9cd325e2364f1a8e50d83a4304babf1ec439bdd"}) 13:00:19 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:19 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.369543] binder: 21450:21456 transaction failed 29201/-22, size 0-0 line 3018 [ 270.401266] loop1: p1 p2 p3 p4 < > 13:00:19 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.408606] binder: 21395:21399 got transaction to invalid handle [ 270.408658] binder: 21395:21399 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 13:00:19 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.409046] binder: undelivered TRANSACTION_ERROR: 29201 13:00:19 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.425045] binder: 21450:21483 got transaction to invalid handle [ 270.425053] binder: 21450:21483 transaction failed 29201/-22, size 0-0 line 3018 [ 270.426440] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.426462] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.525794] binder: 21470:21472 got transaction to invalid handle 13:00:19 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.525804] binder: 21470:21472 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 270.526224] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.607119] loop2: p1 p2 p3 p4 < > [ 270.613227] binder: 21497:21499 got transaction to invalid handle [ 270.613238] binder: 21497:21499 transaction failed 29201/-22, size 0-0 line 3018 [ 270.613553] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.765381] binder: 21496:21502 got transaction to invalid handle [ 270.765389] binder: 21496:21502 transaction failed 29201/-22, size 0-0 line 3018 [ 270.810891] binder: 21523:21526 got transaction to invalid handle [ 270.810911] binder: 21523:21526 transaction failed 29201/-22, size 0-0 line 3018 [ 270.811230] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.846690] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.847748] binder: 21495:21498 got transaction to invalid handle [ 270.847758] binder: 21495:21498 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 270.848200] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.930414] binder: 21433:21543 got transaction to invalid handle [ 270.930425] binder: 21433:21543 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 270.970200] binder: 21546:21550 got transaction to invalid handle [ 270.970208] binder: 21546:21550 transaction failed 29201/-22, size 0-0 line 3018 [ 270.970397] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.997404] binder: 21460:21468 got transaction to invalid handle 13:00:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001100000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x0, 0x8000, 0x1, 0x10001, 0xcf6}) 13:00:20 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x14}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 270.997417] binder: 21460:21468 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 271.005254] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.031292] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.154785] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 271.165985] binder: 21563:21565 got transaction to invalid handle [ 271.172765] binder: 21563:21565 transaction failed 29201/-22, size 0-0 line 3018 [ 271.208528] binder: 21566:21567 got transaction to invalid handle [ 271.216429] binder: 21566:21567 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 271.229275] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.243907] binder: 21563:21588 got transaction to invalid handle [ 271.243916] binder: 21563:21588 transaction failed 29201/-22, size 0-0 line 3018 [ 271.251231] binder: 21568:21569 got transaction to invalid handle [ 271.251251] binder: 21568:21569 transaction failed 29201/-22, size 0-0 line 3018 [ 271.288860] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.299488] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.329053] binder: undelivered TRANSACTION_ERROR: 29201 13:00:20 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c726664956f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) open(&(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 13:00:20 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 2: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000200000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 5: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340402000000100000000000023070edf085e72798c369418ba2a91a18322347dfe5d39576d3bb4f39b4828f891a1556e26ebd459660b0b6533053984d11a2b6b158a5d9b42fa471ccc8ece099a3a11991fb5ce8e26bca76fbfc92ac85b4102f1a85a3f47ebb6114b8d8c3acac30700422b8321f9dec422feb584daf4a9fc509f1e39eab0f34000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000, &(0x7f0000000280), &(0x7f00000001c0)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x98, r2, 0x324, 0x70bd29, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdc}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="6367726f757000a88e3c65e6677d1e9dc84ef3938ec2d60b46bb02") read$eventfd(r1, &(0x7f0000000140), 0x8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x241, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/124, 0x7c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) recvfrom$packet(r0, &(0x7f00000000c0)=""/87, 0x57, 0x0, &(0x7f0000000180)={0x11, 0x15, r4, 0x1, 0x8001, 0x6, @random="2d2482e8f0d1"}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@remote={0xfe, 0x80, [], 0xbb}, r4}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000240)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, r4}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYBLOB="00002000530200000db0ab7b39bcd6c05e0859758b7605d0bdc5b6b7c561b1b8dd7f19738f8e8261d4e7a17e933adf7629a7d14daee9b189989cdbfb1cadb03caa8c7e000000"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 271.458930] 9pnet: Insufficient options for proto=fd 13:00:20 executing program 7: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) open(&(0x7f0000000180)='./bus\x00', 0x38202, 0x26) [ 271.487433] binder: 21616:21620 got transaction to invalid handle [ 271.491058] binder: 21611:21628 got transaction to invalid handle [ 271.491078] binder: 21611:21628 transaction failed 29201/-22, size 0-0 line 3018 [ 271.499138] 9pnet: Insufficient options for proto=fd [ 271.523915] binder: 21613:21626 got transaction to invalid handle [ 271.530682] loop3: p1 p2 p3 p4 < > 13:00:20 executing program 4: syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/69, 0x45) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000e50000000000000005000000e76c6dc8305bd53a26889eb479979869acd4deb0d37101038faf44b0dc8d61a8c3fefbebe0199c1d4fe0b3a3e7f06ac5fec0c4c9494841d3f403b9cb0a40ccc1e7f92ee4c580c7f30c0f45c02e7f06627ec6157ccc", @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x14}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 13:00:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x80000000, &(0x7f0000000300)="901e0135804e86592f88abe5115fd13ca7590d37f1f39228763de4079923c43d6dfcd951") ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x1, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000400)={0x1}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000100000000000000000003000000000000000000000000f449524a17e7b1082ac236203c000000000000180000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) [ 271.539165] binder: 21614:21618 got transaction to invalid handle [ 271.539173] binder: 21614:21618 transaction failed 29201/-22, size 0-0 line 3018 [ 271.539482] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.554742] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.554946] binder: 21612:21619 got transaction to invalid handle [ 271.555009] binder: 21612:21619 transaction failed 29201/-22, size 0-0 line 3018 [ 271.559040] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.579084] binder: 21613:21626 transaction failed 29201/-22, size 0-0 line 3018 [ 271.579754] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.587978] binder: 21616:21620 transaction failed 29201/-22, size 5232043347537647417--1502392111619508184 line 3018 [ 271.592318] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.683366] binder: 21648:21649 got transaction to invalid handle [ 271.683379] binder: 21648:21649 transaction failed 29201/-22, size -5796410890662989602--89042430671933372 line 3018 [ 271.705013] binder: 21648:21663 got transaction to invalid handle [ 271.705023] binder: 21648:21663 transaction failed 29201/-22, size -5796410890662989602--89042430671933372 line 3018 [ 271.708494] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.708518] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.720669] loop1: p1 p2 p3 p4 < > [ 271.905982] ------------[ cut here ]------------ [ 271.910935] binder: 21585:21589 got transaction to invalid handle [ 271.910994] binder: 21585:21589 transaction failed 29201/-22, size 16923918160496817-26388279066624 line 3018 [ 271.911360] ------------[ cut here ]------------ [ 271.911376] WARNING: CPU: 1 PID: 21585 at fs/block_dev.c:1634 blkdev_put+0x4c8/0x560 [ 271.911380] Kernel panic - not syncing: panic_on_warn set ... [ 271.911380] [ 271.911394] CPU: 1 PID: 21585 Comm: syz-executor3 Not tainted 4.9.111-g03c70fe #6 [ 271.911398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.911411] ffff8801a00afc60 ffffffff81eb2729 ffffffff83c48980 00000000ffffffff [ 271.911420] 0000000000000000 0000000000000001 0000000000000662 ffff8801a00afd20 [ 271.911430] ffffffff814219f5 0000000041b58ab3 ffffffff843ba8c0 ffffffff81421836 [ 271.911432] Call Trace: [ 271.911443] [] dump_stack+0xc1/0x128 [ 271.911453] [] panic+0x1bf/0x3bc [ 271.911460] [] ? add_taint.cold.6+0x16/0x16 [ 271.911467] [] ? __warn.cold.9+0xa6/0x17f [ 271.911475] [] ? blkdev_put+0x4c8/0x560 [ 271.911481] [] __warn.cold.9+0xc1/0x17f [ 271.911491] [] warn_slowpath_null+0x2c/0x40 [ 271.911498] [] blkdev_put+0x4c8/0x560 [ 271.911504] [] ? blkdev_put+0x560/0x560 [ 271.911510] [] blkdev_close+0x8b/0xb0 [ 271.911517] [] __fput+0x263/0x700 [ 271.911523] [] ____fput+0x15/0x20 [ 271.911533] [] task_work_run+0x10c/0x180 [ 271.911544] [] exit_to_usermode_loop+0xfc/0x120 [ 271.911551] [] do_syscall_64+0x364/0x490 [ 271.911560] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 271.912144] Dumping ftrace buffer: [ 271.912263] (ftrace buffer empty) [ 271.912266] Kernel Offset: disabled [ 272.091710] Rebooting in 86400 seconds..