se={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 217.968155] binder: 7323:7334 unknown command 536872576 [ 217.968165] binder: 7323:7334 ioctl c0306201 20008fd0 returned -22 [ 218.020342] binder: 7323:7334 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 218.020402] binder: 7323:7334 ioctl c0306201 20000100 returned -14 17:25:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 218.020566] binder: 7323:7359 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 218.064757] binder: BINDER_SET_CONTEXT_MGR already set [ 218.064767] binder: 7361:7363 ioctl 40046207 0 returned -16 [ 218.078952] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.079188] binder: 7361:7363 ioctl c0306201 20000100 returned -14 17:25:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8881, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 218.100390] binder: 7361:7363 tried to acquire reference to desc 0, got 1 instead [ 218.101098] binder: 7361:7363 unknown command 536872576 [ 218.101114] binder: 7361:7363 ioctl c0306201 20008fd0 returned -22 [ 218.101376] binder: 7361:7365 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 218.101391] binder: 7361:7365 ioctl c0306201 20000100 returned -14 [ 218.144910] binder: BINDER_SET_CONTEXT_MGR already set [ 218.144919] binder: 7368:7370 ioctl 40046207 0 returned -16 [ 218.145042] binder_alloc: 7361: binder_alloc_buf, no vma [ 218.145060] binder: 7368:7370 transaction failed 29189/-3, size 24-0 line 3255 [ 218.145169] binder: 7368:7370 BC_FREE_BUFFER u0000000000000000 no match [ 218.165009] binder: BINDER_SET_CONTEXT_MGR already set [ 218.165019] binder: 7371:7372 ioctl 40046207 0 returned -16 [ 218.220421] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.225969] binder: undelivered death notification, 0000000000000000 [ 218.234912] binder: 7371:7377 BC_REQUEST_DEATH_NOTIFICATION death notification already set 17:25:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)={0x0, @speck128, 0x1, "3413572d76209098"}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x80e9, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r3 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="452082c4db152b1a392b785bde91eaa3cb43050efa32adf045e501443a199634fe1d11d2c51c26d56deafa3652fe9aee4e207036378155d815df3576306ac88d899626b0633d0dfcc1ae8da716dfdcc6131f4347d5aa5fd2a1c63f5326c1554d36bdf6e1369ce6b43e840c5becf5c125a2a9c0785030f3ec40386c26cc2e5135ee6c7d4e1993e4275b58d0d75944", 0x8e, 0xfffffffffffffffb) r4 = request_key(&(0x7f00000006c0)='encrypted\x00', &(0x7f0000000840)={'syz', 0x0}, &(0x7f00000007c0)='selinux[vmnet0lo,ppp0}{security^procppp0ppp1selftrustedeth0^)keyring)\'//vboxnet0@eth0\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000580)=[{&(0x7f0000000300)="4b45a7b60a4e0a04817e427bee54bbc9d82079424622b8b199e8a2c859d63ecea3fb456d3534ab2b2764aef88abf880d0d5b423e0dc895a634d7d628e56264938f402730095cd40248dee91e10203e5741ddd5aa02f3e56269802bc136882f5d7a157cb3a614c0508f4c4dd33c2a42c529ea5b6cb0383cb7369f2e3ea1e728d06c578f8e2d73e555827545d399e1efe2d510d89d61487ec8ad5cc2444bda0bd328f4eea0173b599c052aaa6ba1cbbab7c492e155299bf3d5d1edd296b3650d0c89c4dd13235023a2c463f43105b6cb", 0xcf}, {&(0x7f0000000400)="1138b5d83463032235fb47b27cc1af7b4c8e4c5ebbd6963a73c421b777baef18f59a58f1e671676fc89332d7eb7e616db640a5209e636760876df37f0e2b50a9ef6fb81dd4", 0x45}, {&(0x7f0000000480)="7407ee733ef9c636d457b978a0bcf7b6c4c3dbbc87a89f7498356b1155db6e0d5d55068812af22ad1bee67ae2119ea81f4efb57993241687f839f3ada28de870367cb5d051bcb799ff1ea48acd20fd6c231b3dcece567d64710f204d97cf8a916cc04c9b8218d7c581debef4941e84043ff5cd903f1198a3b445b4aa79c72a4d1208dada4e1fe75137badb0b542e6972fa1f785f313949498486dd2cdca06d3ac30a9f6a9c2e144228e2da28696963160e555a8f7a3926c2f0556f01e20d4690a6fa4000e979bd422b137cf0f1cb97013f46ce0ccfa3961c6646c49f5d55c4e55ae4fb5939cd9304f72b10885baffff006ee439615f97a221c", 0xf9}, {&(0x7f0000000600)="007a297b7fcab5c8296dfef2702ec2dfde2ab181b76be8250f24ad05bbe0b2a66e62e2995f853c2bec7b94dfad045c3840a6115d79daa3201bf6d67e05ecc6c1f2e72fdfde8dc6cb48df69bd3d0288feb2240b2aeb24d0709929dd30db46415c3c6708a0347cf17b9d7152c3d1a743cb79be333889f680d5a98f7319048ea6539ac9f65a2c24583224ce52c0d4bda189adc1a5136b222819318ffcbdfb39adc16ebdaf953430a8a7bcac4ec5fc2a9b9d7c6becba0eff35e12fc519", 0xbb}], 0x4, r4) 17:25:34 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(r1, r0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) r2 = geteuid() setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0xb22a, 0x3, 0x1f, 0x98}, 0x10) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) 17:25:34 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) socketpair(0x3, 0xe, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@local, @local, @rand_addr="07d0ed78826ab63ee2f561570d3a7b68", 0x7, 0x6, 0x3, 0x100, 0x6, 0x7000000, r1}) 17:25:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 4: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/118) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="0f428f600414dd4720a69aa94496f50cf5ce34c15251de35c100cca8e384e4a5d21e36144c326a640a71b82b3ae88b44b99dafeee59900b5e58410ff42e5852d6f930d633540cec41b6763db71246e528368624581fdbe075893382e272658675537e92fbac5f2bc9aca79f91c9debf4350d0733f3037b05bfc0d737c9c029f38b6d7437c77e999035af3f351617c4c24b232c5ed23ad9b5ffdf53fc0030912d7c92a6b8947dd9936a65215bd5c4f56b395d04991bb58750aa41ead1a648b7582360d4dfc60eff61d57961ee208d9dafc938da69301204a13ec15165ccab3009b028c71b5e70827886204eb77551aed0025490f396") 17:25:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 220.037450] binder: 7397:7407 ioctl 800c6613 20000140 returned -22 [ 220.055147] binder: BINDER_SET_CONTEXT_MGR already set [ 220.055157] binder: 7395:7406 ioctl 40046207 0 returned -16 17:25:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 220.055297] binder_alloc: 7397: binder_alloc_buf, no vma [ 220.055314] binder: 7395:7406 transaction failed 29189/-3, size 24-0 line 3255 [ 220.055427] binder: 7395:7406 BC_FREE_BUFFER u0000000000000000 no match 17:25:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 220.055896] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.110116] binder_alloc: 7397: binder_alloc_buf, no vma [ 220.110138] binder: 7419:7422 transaction failed 29189/-3, size 24-0 line 3255 [ 220.110573] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.137462] binder_alloc: 7397: binder_alloc_buf, no vma [ 220.137481] binder: 7426:7428 transaction failed 29189/-3, size 24-0 line 3255 [ 220.137938] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.198355] binder_alloc: 7397: binder_alloc_buf, no vma [ 220.198396] binder: 7430:7432 transaction failed 29189/-3, size 24-0 line 3255 [ 220.199001] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.231525] binder: 7397:7421 ioctl 800c6613 20000140 returned -22 [ 220.238912] binder: 7397:7407 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:25:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200), 0xfffffffffffffef7, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x45, 0x0, &(0x7f0000000140)="94bfe219331dcd63103879243ce5eaf83db899a7e7cc918d8f7e9284cc3d8f086b3cc86c854aea4ae19eec563a564afac76b44169531dc8f21f379d6e828fcdba0c37be26b"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 220.246334] binder: 7397:7407 ioctl c0306201 20000100 returned -14 [ 220.246451] binder: 7397:7421 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 220.278697] binder: 7436:7437 unknown command 0 [ 220.284181] binder: 7436:7437 ioctl c0306201 20008fd0 returned -22 [ 220.337714] binder: 7436:7438 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 220.346885] binder: 7436:7438 ioctl c0306201 20000100 returned -14 [ 220.354219] binder: 7436:7438 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 221.078227] binder: 7436:7438 tried to acquire reference to desc 0, got 1 instead [ 221.086360] binder: 7436:7438 unknown command 0 [ 221.091230] binder: 7436:7438 ioctl c0306201 20008fd0 returned -22 17:25:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:37 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) r2 = getpgrp(0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x30, 0x2, @tid=r2}, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 222.601197] binder: 7457:7461 ioctl c0306201 20000100 returned -14 [ 222.615395] binder: 7457:7461 tried to acquire reference to desc 0, got 1 instead [ 222.623857] binder: 7457:7463 unknown command 536872576 [ 222.623867] binder: 7457:7463 ioctl c0306201 20008fd0 returned -22 17:25:37 executing program 4: 17:25:37 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\'posix_acl_accessbdev\x00', 0xfffffffffffffff8) r1 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffff9) keyctl$unlink(0x9, r0, r1) 17:25:37 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x27) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000f1d23babf34f9f0093866390532b696c2156d61ca7fbcb6e4facd4edb6f48d9995b05d90ee121008bf7e0bfbe2a498e1f612e4d105db62b9ba4b176c13695fb3aaa4746e3ee584d9fb1f15fa391134eeabe910cf206540e9ea309615bcf5d76a39cea66e1ae5bc326040073e964b352725622d1f727b1690f59833f9fcb09faeb94d"], 0x0, 0xfffffdfd, 0x0}) 17:25:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)="4b0bed087ddb064058a79cc340ebf73a5adb758179e08bb58b8e52f2a8981dc73443c689199f80d1a6660ddf4e", 0x2d, r0}, 0x68) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:37 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) socketpair(0xb, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, &(0x7f0000000080)=0xc) [ 222.628748] binder: 7457:7466 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 222.628763] binder: 7457:7466 ioctl c0306201 20000100 returned -14 [ 222.666471] binder: undelivered death notification, 0000000000000000 17:25:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x27) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000f1d23babf34f9f0093866390532b696c2156d61ca7fbcb6e4facd4edb6f48d9995b05d90ee121008bf7e0bfbe2a498e1f612e4d105db62b9ba4b176c13695fb3aaa4746e3ee584d9fb1f15fa391134eeabe910cf206540e9ea309615bcf5d76a39cea66e1ae5bc326040073e964b352725622d1f727b1690f59833f9fcb09faeb94d"], 0x0, 0xfffffdfd, 0x0}) 17:25:37 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 222.741546] binder: 7472:7477 ioctl c0306201 20000100 returned -14 [ 222.780390] binder: 7472:7477 tried to acquire reference to desc 0, got 1 instead [ 222.790755] binder: 7472:7491 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 222.790774] binder: 7472:7491 ioctl c0306201 20000100 returned -14 [ 222.790996] binder: 7472:7492 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 222.821859] binder: undelivered death notification, 0000000000000000 17:25:39 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x80, 0x800) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x8000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6(0xa, 0x3, 0xffc) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x27) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000f1d23babf34f9f0093866390532b696c2156d61ca7fbcb6e4facd4edb6f48d9995b05d90ee121008bf7e0bfbe2a498e1f612e4d105db62b9ba4b176c13695fb3aaa4746e3ee584d9fb1f15fa391134eeabe910cf206540e9ea309615bcf5d76a39cea66e1ae5bc326040073e964b352725622d1f727b1690f59833f9fcb09faeb94d"], 0x0, 0xfffffdfd, 0x0}) 17:25:39 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0xffffffffffffff51, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@fda={0x66646185, 0xa, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f00000004c0)=[0x58, 0x78, 0x38, 0x0, 0x40, 0x68, 0x58, 0x68]}}, @increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x48, 0x38, 0x20, 0x0, 0x78, 0x28, 0x38, 0x38, 0x40, 0x78]}, 0x1}}, @increfs_done={0x40106308, r2, 0x3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x8, 0x0, 0x3f}, @fda={0x66646185, 0x8, 0x1, 0x15}], &(0x7f0000000680)=[0x18, 0x38, 0x48, 0x48, 0x38, 0x78, 0x78, 0x38]}, 0x6}}], 0xffffff1d, 0x0, &(0x7f0000000200)="17661b923a3b2d45fccd7d52a09224f4b91c92ef5575f940b844456b31af9a02ab4a437cce2c2faf9c64287710ade7cbc0f7944d83c51d6922c01d0060918da3b31804421dfdffe2ea0b5e4fa2ed9ce851fce26618e8f1f1a03e864ffc3044792cbed16de055644be6b95f029d8f7504c2951db8bc584bba4b870bfafd7d066ed8b746522265a70060ef3d46a73826caab63ab60724b29d07854985b6564aab51a81b2cc77fb98db9c2fb9c4f41c672a84e8496c7fa2cf97e93329174f25ebe5a0029884c276e2ff43af3cf4ea0fec73e0ed3aac7c90ec7f8f7a1fd71b85e7654772d5bf66b2c5d2bd6d814b03832e5bf506b61f8ee718e0d3fafcd40a7fe566d511f923d1a8b733e2522bfe8f54210088439798e5981ea1579135f21dc14e17ede808ee89335189f754b1f983e5a5805518248b6ee0271a88a3f2f79970fbed0364a09901ff173300b76f6e871c11d8ce3bf51f1fb18fd8bd31cc15cd8fb51084fd"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 225.031391] binder: 7505:7509 ioctl c0306201 20000100 returned -14 [ 225.043815] binder: 7505:7509 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 225.054012] binder: 7505:7509 tried to acquire reference to desc 0, got 1 instead [ 225.068061] binder: 7505:7515 unknown command 536871424 [ 225.068070] binder: 7505:7515 ioctl c0306201 20008fd0 returned -22 [ 225.082478] binder: undelivered death notification, 0000000000000000 17:25:39 executing program 5: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/38) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'vxcan1\x00', 0x200}) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000340)=0x553) sched_getaffinity(r4, 0x8, &(0x7f0000000180)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000001c0)={0x2, 0x8}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='rose0\x00') getsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 17:25:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="9963ccad990e8cf911e3b3b949da52f5", 0x10) 17:25:39 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 225.211369] binder: 7525:7528 ioctl c0306201 20000100 returned -14 [ 225.220533] binder: 7525:7528 tried to acquire reference to desc 0, got 1 instead [ 225.228782] binder: 7525:7530 unknown command 536872576 [ 225.228791] binder: 7525:7530 ioctl c0306201 20008fd0 returned -22 [ 225.234531] binder: 7525:7534 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:25:39 executing program 4: clone(0x107fc, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) 17:25:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:39 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 225.234548] binder: 7525:7534 ioctl c0306201 20000100 returned -14 [ 225.234646] binder: 7525:7530 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 225.274130] binder: undelivered death notification, 0000000000000000 17:25:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0010000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x110, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="a80b268ad40a9dcb1a8dbc33811d7b59"}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x110}}, 0x8840) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) sendfile(r2, r2, &(0x7f0000000040), 0x442a) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0x1, 0x2}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ee7465733d99cb6f7be1ee0db9fc8a911da2e96492f17e455aac0a9b50981e9a57e773d8511b35cfa02871aa303f2ae697b00d9be552d7005ce981f300a77eaac93da64eb49fd3728686579cd78f8d74ad331dd13e887ef3eef738f9ec4710d00d5af7aefdaa7a028d50d40f317e1a3e4c1f0b3a8b6be817ce00de", 0x7b}, {&(0x7f00000000c0)="fd378464f514bfa8b70bb5698f5dd6d8d18d872c9428a6", 0x17}, {&(0x7f0000000100)="e94b7c1ef74bccbfa05c0cfab5c360d82e2ff1217665d96cbd3e618c976133b8aa68b605be3db17e73bb852b59377437994647ee4c12f24b4cb851b0200e2bd2a41e9f4093e9863d7c78bee971e1a9bc9d7a9e3b82943167757becc7a39526ec59e771e2216f74b9a6d6c6288eb56cf974dbe7c75a6ac0ea20f91d843bcdfc4d0f340fd57cebcf6c135187f52fd5a579dbb83f43841f1afa4378b6f924a48403a56f52831bf4e14c4fc5dc526a338ef9cde6d68dbe2b7ff624a37d1fa7cc55f1ecacd3ec8b5f6749bb74b81f116a3a61661dc1e2df515af5bececa175f7c3af8de190ce06726adb4dd41b32c5fa7b523ce561a4a37397d2a8b0ee68a4b61eb92292373f2d8adcf8c3c4c9becb7759d7eccfac4bc045555382945dae85f4df6987ccf822312ceb24caf45a380ea7450c23bc8f33dc2223e95f713dfbaeb5563f9ab76f71b3e0f38a5c9de8a008f7e5ef9c864c930bad5c0b196ff9a325dc0645d909b0d6a4947b4e0b938802cb6fbf4941f3e1b4459f30d81732a3919e42f0b5bdf57e631c25544540e53d2dbfead0232fdb25ffc24c92fa216bfebe73a8708d57e6047b4b382610906218c47c57c61cbe8ac07cca5817fc3b06c9ab2653c24232f58c14177b6a66d6b8a17bab9723bd0d2dbb98ce915f184eba4d84b118fb0950d71b9117afdebb2dd32a71b32954cdb204fc33d20920d4465ebdd997e37a8110d50491af2b5e34668315d9a2a1fd4721880bf4b8265227dc05a1dda7536698c7604f3b1041526639321f3d893da4f84e951deb4a12d0cff6bbb802eebd38c1ec21aedb855bf5ac2f9ed279f62a36019623ad3cef40f9cbfd15e0631d9e44747454582c17b8795610ea2fa50f6be98928d82bd83cf23b3721f1ac4188eeab49ffcd544da810b72803df85692515966a5a126453244b5a1900d6003f2ea297fa6519cf3f2e6ab07ab1ad5a85dc8e444a5501d9bca49e5e9d785f2e930ddec69bab2598e293c193a269977952968d13698ff16201cab38a0c767880e5388b5c04a04e2b03677b88104d573990820b6098c4e4db43e3194f82f2a932cccc0b699f14a72d2de3101df5c0a413d47cc0d3175f8e3dd084571ac08eae55104677f10c11eeb6d4aaae9aeddf2787a2e45af97d0a937e6d2025f0ae5325d385354cdd22d9ef63246da4fe1e9401fe7e0d6a0f75a74dc6524f1d3e9e5d1df7873014e35893cd62cac7cc39bd90b6c4bbea7776314420a028617d1c0bea6e98b5a9ded5614620fa5cf51827063b8c29aae8ddeacf067ef1306fcc0a06a931cb342e7b552121c994283417c5a6a6e986093704823480a1bcdadc7a65d9daab508061d2d41d5415d88e511fdc5a20f051e9f2cd18088f9cd9de71d499bae50d3907958742d15efe548e271ef8dae1a39640d008ae8bdfd63dfd500a65b98c3c05ad48f298b87ed950168c0939efe51b7dbf1482181819d523f7860b1c58fc9a5f4a384f03060ceb92455beecdf179201a00a77a24fe39cd877575f9b6d9a81cac38bbef644a541634960d0ed11e717da796ae8a1a9f37d613352d8e89446d41eb866177fb204aabef757dad51951172f7aa392d6c14d0afb22ae119e415c342946c0f41003d91835bb069c3e3553e09ac11e34ec72406641c347fc5e82db1e38f1868219fd6e0b55a869c557839a57bbbc16e548ceb54def673692de3b2bc974c93a77b890688e8cdd49355c076c40a505ffc4b5bfcf57fee15809c46fe4bdd31ead8ae0707c5d3da71ff28fcad9a7a665e2d2bf1acf3c35178c97127f9a0e1e2b4e3680303a5af055c5810751756d6c1e23b9d3cfdba589604b4da96a23f13ae7b9deb2dc33da2b7c7b929bd75f065ece5d74ba892f76eed5cf8e5eb4469fa15528c037ed54c64d0eee0fe1a0420d1bd3e441c78293f2f6a17af5c91d3b7b43a639218193f3664f406554b7449e881265857348f5aae788c73cc986dd04376933e222a398df397845cc97c07c33d4ae588c708be0ad10ff08bd65a62367b119ed16ec0719103698879e96dd47c3fb0618c7267974724b707a9a3caf3d557acf2ebd651ad20a8c799be3fa2eb74797143370b2dacdd2739013f51af51bae55cbffa2ed1bca22defdcd33db792827a65882ac8b36d1d86c7043a4df93fa5ef65be94c9724d236687eb85908f17dee326fb19c975ac93b55279e1d6bdea5fc2b76723b50faa810392d6e7148124c79290fda138a5e3ad501781399c52d4a283297d827d2a2d07815bfd147bf1b0dcf7f03ae55b2a8f5eab8a5230e956b79640368f0620ecd4f7029f35e620d94c76ef25735ef5ba3033145a5c7a1161a470e447cb5ea76a4a8c3630cde8529a89d7006d774ab85728635b7b0cfa568055bfefe98391682b53122115960d8ab778e3a412a83d6b895fb97726aeb60862b231ce1b46c2f47d97d1e3142c8546f56015484f572c1932668dc06ae28ad823b8aec70ded52780b5b4e5072e97af334f48fc4817ea338f5f5b3063a144c9915d55476098de04c688a5dc2d14d909fb622e5119b271ce9466da1f26d0b54b37441c4763fcaa295527c257c83370d37a734ae5a1307536f010c9000e1a857736b8f7094d48bc64f4fbdb9813a89706298f07f1cf9779aae7ed710cae2d4b685a3fb51ceeaa52e5d6e3e24fda0e6ba516e7e0e7d0228ba936dda9f4f9893fac0c77b8b9a8d91013a138d7de5dc121593cee794e6c12da2aa5ffd41fb239dc6ce4deee3d115b0034e272c74d82c69fdf8608486819d17d7ade05482318b3d455a2c9b20a7ee864a5584b8961e6b3d04018cbcaab2f4639e0783c8364a6f87f91db4c5a39beb7d795642b05a1544b7ac06dfe6f5f9ac86b45b36163c5e510ecfd5656b7fa15362ed73ba97092c9eb40dba6d920504d785f057d3afaf14ca8af16b938b7a821486fd6e966706699c1b3b07aef8bb45c966d5c0422fa35e8db288bc89521a0b1a0d36252bb32a8fddb4d60f15ee09e61d0f5489bc5d34709574d779923edfd4cb8e411cfb924d98b6686545ad82de88c9f47e9409f1e3877792bd783bbe30b5d435ddca4deede22168fa87bf58f1e2c882ed9b71dc0ed856705be6878616ace5443aaccc7578e9de83809b87f1ad6e41c0b1b2ddd85d7ff2a6d5344aff6c4bd10a338b482e7571177715e1ea6937a462b4d7bf485b7dce07ae54e65a5fd90e28e431af842000e771857da93979bc601032625c08eb60bd5223f1e2c6c8fc6df8d3dfedfae483741f45e99874e591f824990ce66c3640e3fcb54bc606caf50104baa8a6defa582b3414fd1e6cba8d3c9d940a03fd51437614c26e36eb05dbfc9331bdee12b80701647f8b5bda11926ab89bd462c1aeeb954a42a5dfbd46a5403640d4bbd040a2015ce36048d9c87507afbe867977aad94aa940b2be98761f91e436c99c1102f6e66be84ca54acea0853cd2794eec6edffcfda7e03040b6623f2a85e6e2964d742181ed7785768f78e5435fef219a3e82261629ecdbdb3c0e9c1993a68795c028388e5d4beb1b2ae63d6e5cb46a69f1226efa56242159a222df7e72c779f81f39da90280891d5d4ae4520030fd6ae5840b2204df1618728b6cebb106745cfd038e383f10377eb0e31163e764ebef343089c27f39b8b6127ef10e0883e6532f5972796ccf56392d07624483e9a20e3625fff23b4a6d86ac6f34bf375296e2f03f398c28f82dc345b6476c5fe77714f757eec12517de2b2920ba7a0e6720f0b3240b5808a1d4cb8de97f2b9964552f5cb32efa90bf91a81917096501f946fe0e810720c5df02cae242b7c275192cebe0b38dfc29473143b6c6e51250f34cc091e17dcd84a07d18e2154c40f1fce82a86a947d78ce6411a9648cc59d2870bfdbbe180d8d9d7e46b309259a3b607de626b3f89fb1b934cfa7ff364480cb38584956d344d7f4dee37a4b85eb626c0e395506f88f4aec0f9018eb80938a5aafdc4c27411e36a1e978533597f88e6cc3441e2c502b8a58264d77585a0220720296ec68b420133dd585f599cb51c4b84887c0afc49fd6ebb350c26bde9f0979ed1e40e349d185a15ddf522727047e56d2325a90c045bcb37249a530c85d49a5eb7256d2ea9d32fbe9f2c7448a2f40adcddf464c153c6acc512416aedf9cad613d244d4ef76603a62965d40fcd0e2a5a2392c1235e25347b94dc318920beaee540a487c60d9d5f4df04e26cdd627edfa72f67af5b4611e7d2ac51734628b05e3db9fc24a6bf160d8173ed91e6c3c8323a1e769b408c14e3f5b16bdd39a09d005fc8ee91d9a6488fd5f7f9d47847316fa1924c72853d0ebb7251f9add8aaf71494ea486c927797dc272861f91d1c4f37a7c491ace4d5848237dc4b561d1b08b35f359054664de88d64442785e95c85fd5dc6b870fd7ae76385e2f2817794ac48c3140a7fa8955c7df7d882470b1ffa219509c7681966a1e7603e50809f5e215e59ca10293744436bf2b5d57d74607d39863deb55e6e1291cd864b19b7556bb87f12ffd5dd73ab09602fe3f58dd327da47822086ad4e1b1aaa7f942cc85bc18354c95295b4bb21b4b757c8379600e5bc25568f1a05b31feedc30a3e03174770d5f0a7e28baaa35ec3cc9e2a3ae271b214a36d16af53915fc59f299d049b5bc5c179382cf7a27141f3f6c093ae94fc25b62d3bb9a22fc5cf9fb129aeb0c99aa824bc62343de042b1bf388b440efa199cf3fcbf60f1b469f48e2d31beaac566eec633a570832dcdbf6c66a30cddafc0d11091b1a0dfee61598bda5eb42aea21693982d25c15b54aea3551bd97aad03dbb6d3c587469f8ad442d76f9574a4043c5a52f59cc4b89fcc0c07ef561a9f01834fd92abace52befe9d5d0ca2b6b1da677ad52e50476a7e824f66537be4e50919230106d3af9a7c4997bdb0f24fd42cdca1c866c303d07ed3bc788ad1bb53cdd918568624e355fa77d52600fdf900f3498ba898ac6104a2e51ad7cef7e76b61b524da3e50ca3df715013d60e090824ad47d5e6f8320615b3dbc26bfc7a89e58df1780aa55a62e9f5c8fb31b9d935ba7fda79b075a81a7bf5baae94a3868c23387a5f5414118f83f23a845b9a0e8a27aa67dabde8e407a0ca6786021ac3a56e9d9928e4ba40c10f42a1a52dd280367e4cc120d980437a7626e13f73d4333c621b910adbcf54e152c4065c974b5b6045d752505784c506e190897b45d8f274568f7b6d69c106b1111e8f089cca4b8eb508db843322f00323147d4e19f84014b79393c5641b6601f19f5baae957b935d2fcea55542adcd39ef44281446d46201d3cff6f164dd44993a9c4ac05d92dbb136e3bfb4f789b757993136008458d54008c7e2ee874e0bd01634b2a123e8af3cd61a3436da132e3ee901753021556e64aa251bff7ef5306e7d76e73bbaec90045fdb33e0d33f0a62505414e77c533493416423fe2a216034c7ad38db8c2a6add3941e6af746afcc32d2c5f72285c4f0fbe9bf1b37c49837a9008006bf9f1f6ef1345f126101b1e33251469875c1711532a3f2fe6c9322734045c6a2692294fcd71a404d7d100d352404833ee7db4a4589e2db5f0fc8767970e61ea6ad0483b7db4555bf12ea44247ed07ae5aba997fb4f96196d45e3f2de748c9057acde133a3620dd16a7c0312b4cebc4ad58710299739e6a16bdc894d580e321c98aaba79673d2e21eb8e2996e36647a439167732dc3486bcea6ec5dc7556368e43a33a09afa7829d113fceb88952669a051c07cdb856fa1b3b0a8aadaa8880be262271299b404bed82c382c5ae4239", 0x1000}, {&(0x7f0000001100)="76405ede7732ba05b69404da25", 0xd}, {&(0x7f0000001140)="755428ddcc0cbbaa8c250319e18507d37495cc925d1c25ff3ea8f4d92f69c053b9df9ae43bfa60379cabdeb74c2fbf33a28f4ecf2ac59b7bb74abe8fb5c88525f072b850d1db36414ad9e690af45b45ffaeb8354169a4618eaf81376e98eec8e66571ffe1cd9947e3c02733d86c10b160a9e255746e4a7953ab53772075a8b82bd0163810c6f2ed996e790565cc042bd01a8555d72bb8e60ca183ef43486bf8b3d15870c5eec19b72df76660a5e67a28d100e25ff404befbf93aa7cb56d070ddcf638269edc9ef1a6ff80dbc2a182ec7a48683e9e4d9dec79feed17f0c143081af65fd86fc", 0xe5}, {&(0x7f0000001240)="d8c39defb19504fa8572fd6a373c525f071c004b8cf94b04e82776429d2c2943bc0d2e351025006dbbb55cefbfba9309b65c3c37cc82a9ef82b16ce6c794f7392d7d91f54e608b16c11d89bf003b7956680b28549f88e9abc4a6ef2a030b98da85199a13a39d44d85983b41c73cf0657a17ea094c88ad2dfc9d725c53bc50eb015ad2640d65cb649dd7515baf0d055dd02b7927c3ef2bbfd0cfab16a486cf5c3b46ddb4cdb8fb6a393102ba3b0f2386000caebedc082526b0dcf1af9614a8c8f341d5886282203743095b3b4c24fe8a01ec405c74a0fb6c2644fb437bbe533623e4127af7ab18b0a", 0xe8}, {&(0x7f0000001340)="e400c2282e485741d6c2a5e610fa48e990ba4e56e2d954bc8ecae29b40aa479ee428672ce73530d2cf0c4a3fbf74edaf2b8c22cb7bf5eb8248f0c610c236c55cfdff889bef1f326465c454c83b776a5dde8dd1fa62c140afa3d2d29f", 0x5c}, {&(0x7f00000013c0)="076602029f81e7d80612b47483fc405d5ed5ac82fffb1c174e6243109660eb2284675cbd104f6f89f3bf8eb983b92d816180292e7a937da49882", 0x3a}], 0x8}}, {{&(0x7f0000001480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="e16edfacfd255d8d5bc9dc30e4e8ac0e73fd911460b4a6164c61fd7fe733833ae65a9a3275e14d5791233094a76276874894411414b069cb4f94d08d56cd25a292028c895626c16189a6fb1b637b6d1876b32f090633480bc00568532e9bbe16d9ad9e960462e7b94fa55b4b49af20fa1848f014896ed9563154fdd0411e59de9c9077b6867211bf56", 0x89}], 0x1, &(0x7f0000001600)=[{0xf0, 0x11f, 0x5, "26b92f4ac6eea20be82cef8e7df21b6dc2fa5341b86c989a5093bfbcb702534f16bac103b65feb774585c8b7a8b96f086e3dc79512ffe106181d62db5c8e147f87626522938501cc5d9ebf04e58f263e6f8971213bbc3830efbadb6405c3bfdff7e17b3118d99af2cbeafed5b535ad718cb2375a8d2ea76ffeb1360e6795a9ea047c85cce7c9be6dc5a987a12f58390e2aca69d4cc853fd401db7b23240554ab257d565ff6a2587724ae886a9dcb5e8edfe10a85a0e334d0dc350f407e445333bb13f4ee68102730dbf3c28fbfc0a9c7593764b65b8c8f9b8801c66d21e9706f"}, {0x110, 0x11f, 0x80, "9e6e0ae6164cb9e23d1de463db866c49d660748e088963ad5d06de4c318ba46b0064829d300cef1dea622a03b133640316b5ab8a0e900e4e72ee0d21899e5343fd96b49fe96be24621a71754d402e778e4f61e6954b8dd7ad6f19b6552a16c504b44e35f64aa2f7521fec1038358aeca9da9cc68fff2351ff9709f5dad36a4747c1aff487e34b75a81cad1fdb34a3831edceea87e4dc8c29c3864d13791efdf6950d89e3e18af7192ef7b869165ab21266908b4a92034718bc789a5e96f3814bc9408f0037c0bbf0b181ab0431014d3a86053932bfd6a7d6beb14b14bc3ea4a2e08e84ef24d250bd35a3d884d7ef7366bf13bb34e39d8e0fca82e39cf8"}], 0x200}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="4e602bd294b386c3", 0x8}], 0x1, &(0x7f0000001880)=[{0x30, 0x117, 0x4, "70ec31ad2eaa5f066fa96b05d0c5d4ba0e5637beed76c169ebf05fa8ad33c3"}, {0x50, 0x11f, 0xb, "2f498a37fd36130c2d9a2feab1702b893c25bd378e0a5b74f9383a42c2999fd6a23073a9747eb3454c7604742e26524d3a5e4eed508176731c8c97fd0d206c"}], 0x80}, 0x1}], 0x3, 0x50) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000001a00)=0x1, 0x4) 17:25:42 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204100, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) [ 227.572335] binder: 7556:7562 ioctl c0306201 20000100 returned -14 [ 227.586213] binder: BINDER_SET_CONTEXT_MGR already set [ 227.597050] binder: 7556:7566 unknown command 536872576 [ 227.597061] binder: 7556:7566 ioctl c0306201 20008fd0 returned -22 [ 227.597385] binder: 7556:7568 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:25:42 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) exit(0xba6) 17:25:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ee7465733d99cb6f7be1ee0db9fc8a911da2e96492f17e455aac0a9b50981e9a57e773d8511b35cfa02871aa303f2ae697b00d9be552d7005ce981f300a77eaac93da64eb49fd3728686579cd78f8d74ad331dd13e887ef3eef738f9ec4710d00d5af7aefdaa7a028d50d40f317e1a3e4c1f0b3a8b6be817ce00de", 0x7b}, {&(0x7f00000000c0)="fd378464f514bfa8b70bb5698f5dd6d8d18d872c9428a6", 0x17}, {&(0x7f0000000100)="e94b7c1ef74bccbfa05c0cfab5c360d82e2ff1217665d96cbd3e618c976133b8aa68b605be3db17e73bb852b59377437994647ee4c12f24b4cb851b0200e2bd2a41e9f4093e9863d7c78bee971e1a9bc9d7a9e3b82943167757becc7a39526ec59e771e2216f74b9a6d6c6288eb56cf974dbe7c75a6ac0ea20f91d843bcdfc4d0f340fd57cebcf6c135187f52fd5a579dbb83f43841f1afa4378b6f924a48403a56f52831bf4e14c4fc5dc526a338ef9cde6d68dbe2b7ff624a37d1fa7cc55f1ecacd3ec8b5f6749bb74b81f116a3a61661dc1e2df515af5bececa175f7c3af8de190ce06726adb4dd41b32c5fa7b523ce561a4a37397d2a8b0ee68a4b61eb92292373f2d8adcf8c3c4c9becb7759d7eccfac4bc045555382945dae85f4df6987ccf822312ceb24caf45a380ea7450c23bc8f33dc2223e95f713dfbaeb5563f9ab76f71b3e0f38a5c9de8a008f7e5ef9c864c930bad5c0b196ff9a325dc0645d909b0d6a4947b4e0b938802cb6fbf4941f3e1b4459f30d81732a3919e42f0b5bdf57e631c25544540e53d2dbfead0232fdb25ffc24c92fa216bfebe73a8708d57e6047b4b382610906218c47c57c61cbe8ac07cca5817fc3b06c9ab2653c24232f58c14177b6a66d6b8a17bab9723bd0d2dbb98ce915f184eba4d84b118fb0950d71b9117afdebb2dd32a71b32954cdb204fc33d20920d4465ebdd997e37a8110d50491af2b5e34668315d9a2a1fd4721880bf4b8265227dc05a1dda7536698c7604f3b1041526639321f3d893da4f84e951deb4a12d0cff6bbb802eebd38c1ec21aedb855bf5ac2f9ed279f62a36019623ad3cef40f9cbfd15e0631d9e44747454582c17b8795610ea2fa50f6be98928d82bd83cf23b3721f1ac4188eeab49ffcd544da810b72803df85692515966a5a126453244b5a1900d6003f2ea297fa6519cf3f2e6ab07ab1ad5a85dc8e444a5501d9bca49e5e9d785f2e930ddec69bab2598e293c193a269977952968d13698ff16201cab38a0c767880e5388b5c04a04e2b03677b88104d573990820b6098c4e4db43e3194f82f2a932cccc0b699f14a72d2de3101df5c0a413d47cc0d3175f8e3dd084571ac08eae55104677f10c11eeb6d4aaae9aeddf2787a2e45af97d0a937e6d2025f0ae5325d385354cdd22d9ef63246da4fe1e9401fe7e0d6a0f75a74dc6524f1d3e9e5d1df7873014e35893cd62cac7cc39bd90b6c4bbea7776314420a028617d1c0bea6e98b5a9ded5614620fa5cf51827063b8c29aae8ddeacf067ef1306fcc0a06a931cb342e7b552121c994283417c5a6a6e986093704823480a1bcdadc7a65d9daab508061d2d41d5415d88e511fdc5a20f051e9f2cd18088f9cd9de71d499bae50d3907958742d15efe548e271ef8dae1a39640d008ae8bdfd63dfd500a65b98c3c05ad48f298b87ed950168c0939efe51b7dbf1482181819d523f7860b1c58fc9a5f4a384f03060ceb92455beecdf179201a00a77a24fe39cd877575f9b6d9a81cac38bbef644a541634960d0ed11e717da796ae8a1a9f37d613352d8e89446d41eb866177fb204aabef757dad51951172f7aa392d6c14d0afb22ae119e415c342946c0f41003d91835bb069c3e3553e09ac11e34ec72406641c347fc5e82db1e38f1868219fd6e0b55a869c557839a57bbbc16e548ceb54def673692de3b2bc974c93a77b890688e8cdd49355c076c40a505ffc4b5bfcf57fee15809c46fe4bdd31ead8ae0707c5d3da71ff28fcad9a7a665e2d2bf1acf3c35178c97127f9a0e1e2b4e3680303a5af055c5810751756d6c1e23b9d3cfdba589604b4da96a23f13ae7b9deb2dc33da2b7c7b929bd75f065ece5d74ba892f76eed5cf8e5eb4469fa15528c037ed54c64d0eee0fe1a0420d1bd3e441c78293f2f6a17af5c91d3b7b43a639218193f3664f406554b7449e881265857348f5aae788c73cc986dd04376933e222a398df397845cc97c07c33d4ae588c708be0ad10ff08bd65a62367b119ed16ec0719103698879e96dd47c3fb0618c7267974724b707a9a3caf3d557acf2ebd651ad20a8c799be3fa2eb74797143370b2dacdd2739013f51af51bae55cbffa2ed1bca22defdcd33db792827a65882ac8b36d1d86c7043a4df93fa5ef65be94c9724d236687eb85908f17dee326fb19c975ac93b55279e1d6bdea5fc2b76723b50faa810392d6e7148124c79290fda138a5e3ad501781399c52d4a283297d827d2a2d07815bfd147bf1b0dcf7f03ae55b2a8f5eab8a5230e956b79640368f0620ecd4f7029f35e620d94c76ef25735ef5ba3033145a5c7a1161a470e447cb5ea76a4a8c3630cde8529a89d7006d774ab85728635b7b0cfa568055bfefe98391682b53122115960d8ab778e3a412a83d6b895fb97726aeb60862b231ce1b46c2f47d97d1e3142c8546f56015484f572c1932668dc06ae28ad823b8aec70ded52780b5b4e5072e97af334f48fc4817ea338f5f5b3063a144c9915d55476098de04c688a5dc2d14d909fb622e5119b271ce9466da1f26d0b54b37441c4763fcaa295527c257c83370d37a734ae5a1307536f010c9000e1a857736b8f7094d48bc64f4fbdb9813a89706298f07f1cf9779aae7ed710cae2d4b685a3fb51ceeaa52e5d6e3e24fda0e6ba516e7e0e7d0228ba936dda9f4f9893fac0c77b8b9a8d91013a138d7de5dc121593cee794e6c12da2aa5ffd41fb239dc6ce4deee3d115b0034e272c74d82c69fdf8608486819d17d7ade05482318b3d455a2c9b20a7ee864a5584b8961e6b3d04018cbcaab2f4639e0783c8364a6f87f91db4c5a39beb7d795642b05a1544b7ac06dfe6f5f9ac86b45b36163c5e510ecfd5656b7fa15362ed73ba97092c9eb40dba6d920504d785f057d3afaf14ca8af16b938b7a821486fd6e966706699c1b3b07aef8bb45c966d5c0422fa35e8db288bc89521a0b1a0d36252bb32a8fddb4d60f15ee09e61d0f5489bc5d34709574d779923edfd4cb8e411cfb924d98b6686545ad82de88c9f47e9409f1e3877792bd783bbe30b5d435ddca4deede22168fa87bf58f1e2c882ed9b71dc0ed856705be6878616ace5443aaccc7578e9de83809b87f1ad6e41c0b1b2ddd85d7ff2a6d5344aff6c4bd10a338b482e7571177715e1ea6937a462b4d7bf485b7dce07ae54e65a5fd90e28e431af842000e771857da93979bc601032625c08eb60bd5223f1e2c6c8fc6df8d3dfedfae483741f45e99874e591f824990ce66c3640e3fcb54bc606caf50104baa8a6defa582b3414fd1e6cba8d3c9d940a03fd51437614c26e36eb05dbfc9331bdee12b80701647f8b5bda11926ab89bd462c1aeeb954a42a5dfbd46a5403640d4bbd040a2015ce36048d9c87507afbe867977aad94aa940b2be98761f91e436c99c1102f6e66be84ca54acea0853cd2794eec6edffcfda7e03040b6623f2a85e6e2964d742181ed7785768f78e5435fef219a3e82261629ecdbdb3c0e9c1993a68795c028388e5d4beb1b2ae63d6e5cb46a69f1226efa56242159a222df7e72c779f81f39da90280891d5d4ae4520030fd6ae5840b2204df1618728b6cebb106745cfd038e383f10377eb0e31163e764ebef343089c27f39b8b6127ef10e0883e6532f5972796ccf56392d07624483e9a20e3625fff23b4a6d86ac6f34bf375296e2f03f398c28f82dc345b6476c5fe77714f757eec12517de2b2920ba7a0e6720f0b3240b5808a1d4cb8de97f2b9964552f5cb32efa90bf91a81917096501f946fe0e810720c5df02cae242b7c275192cebe0b38dfc29473143b6c6e51250f34cc091e17dcd84a07d18e2154c40f1fce82a86a947d78ce6411a9648cc59d2870bfdbbe180d8d9d7e46b309259a3b607de626b3f89fb1b934cfa7ff364480cb38584956d344d7f4dee37a4b85eb626c0e395506f88f4aec0f9018eb80938a5aafdc4c27411e36a1e978533597f88e6cc3441e2c502b8a58264d77585a0220720296ec68b420133dd585f599cb51c4b84887c0afc49fd6ebb350c26bde9f0979ed1e40e349d185a15ddf522727047e56d2325a90c045bcb37249a530c85d49a5eb7256d2ea9d32fbe9f2c7448a2f40adcddf464c153c6acc512416aedf9cad613d244d4ef76603a62965d40fcd0e2a5a2392c1235e25347b94dc318920beaee540a487c60d9d5f4df04e26cdd627edfa72f67af5b4611e7d2ac51734628b05e3db9fc24a6bf160d8173ed91e6c3c8323a1e769b408c14e3f5b16bdd39a09d005fc8ee91d9a6488fd5f7f9d47847316fa1924c72853d0ebb7251f9add8aaf71494ea486c927797dc272861f91d1c4f37a7c491ace4d5848237dc4b561d1b08b35f359054664de88d64442785e95c85fd5dc6b870fd7ae76385e2f2817794ac48c3140a7fa8955c7df7d882470b1ffa219509c7681966a1e7603e50809f5e215e59ca10293744436bf2b5d57d74607d39863deb55e6e1291cd864b19b7556bb87f12ffd5dd73ab09602fe3f58dd327da47822086ad4e1b1aaa7f942cc85bc18354c95295b4bb21b4b757c8379600e5bc25568f1a05b31feedc30a3e03174770d5f0a7e28baaa35ec3cc9e2a3ae271b214a36d16af53915fc59f299d049b5bc5c179382cf7a27141f3f6c093ae94fc25b62d3bb9a22fc5cf9fb129aeb0c99aa824bc62343de042b1bf388b440efa199cf3fcbf60f1b469f48e2d31beaac566eec633a570832dcdbf6c66a30cddafc0d11091b1a0dfee61598bda5eb42aea21693982d25c15b54aea3551bd97aad03dbb6d3c587469f8ad442d76f9574a4043c5a52f59cc4b89fcc0c07ef561a9f01834fd92abace52befe9d5d0ca2b6b1da677ad52e50476a7e824f66537be4e50919230106d3af9a7c4997bdb0f24fd42cdca1c866c303d07ed3bc788ad1bb53cdd918568624e355fa77d52600fdf900f3498ba898ac6104a2e51ad7cef7e76b61b524da3e50ca3df715013d60e090824ad47d5e6f8320615b3dbc26bfc7a89e58df1780aa55a62e9f5c8fb31b9d935ba7fda79b075a81a7bf5baae94a3868c23387a5f5414118f83f23a845b9a0e8a27aa67dabde8e407a0ca6786021ac3a56e9d9928e4ba40c10f42a1a52dd280367e4cc120d980437a7626e13f73d4333c621b910adbcf54e152c4065c974b5b6045d752505784c506e190897b45d8f274568f7b6d69c106b1111e8f089cca4b8eb508db843322f00323147d4e19f84014b79393c5641b6601f19f5baae957b935d2fcea55542adcd39ef44281446d46201d3cff6f164dd44993a9c4ac05d92dbb136e3bfb4f789b757993136008458d54008c7e2ee874e0bd01634b2a123e8af3cd61a3436da132e3ee901753021556e64aa251bff7ef5306e7d76e73bbaec90045fdb33e0d33f0a62505414e77c533493416423fe2a216034c7ad38db8c2a6add3941e6af746afcc32d2c5f72285c4f0fbe9bf1b37c49837a9008006bf9f1f6ef1345f126101b1e33251469875c1711532a3f2fe6c9322734045c6a2692294fcd71a404d7d100d352404833ee7db4a4589e2db5f0fc8767970e61ea6ad0483b7db4555bf12ea44247ed07ae5aba997fb4f96196d45e3f2de748c9057acde133a3620dd16a7c0312b4cebc4ad58710299739e6a16bdc894d580e321c98aaba79673d2e21eb8e2996e36647a439167732dc3486bcea6ec5dc7556368e43a33a09afa7829d113fceb88952669a051c07cdb856fa1b3b0a8aadaa8880be262271299b404bed82c382c5ae4239", 0x1000}, {&(0x7f0000001100)="76405ede7732ba05b69404da25", 0xd}, {&(0x7f0000001140)="755428ddcc0cbbaa8c250319e18507d37495cc925d1c25ff3ea8f4d92f69c053b9df9ae43bfa60379cabdeb74c2fbf33a28f4ecf2ac59b7bb74abe8fb5c88525f072b850d1db36414ad9e690af45b45ffaeb8354169a4618eaf81376e98eec8e66571ffe1cd9947e3c02733d86c10b160a9e255746e4a7953ab53772075a8b82bd0163810c6f2ed996e790565cc042bd01a8555d72bb8e60ca183ef43486bf8b3d15870c5eec19b72df76660a5e67a28d100e25ff404befbf93aa7cb56d070ddcf638269edc9ef1a6ff80dbc2a182ec7a48683e9e4d9dec79feed17f0c143081af65fd86fc", 0xe5}, {&(0x7f0000001240)="d8c39defb19504fa8572fd6a373c525f071c004b8cf94b04e82776429d2c2943bc0d2e351025006dbbb55cefbfba9309b65c3c37cc82a9ef82b16ce6c794f7392d7d91f54e608b16c11d89bf003b7956680b28549f88e9abc4a6ef2a030b98da85199a13a39d44d85983b41c73cf0657a17ea094c88ad2dfc9d725c53bc50eb015ad2640d65cb649dd7515baf0d055dd02b7927c3ef2bbfd0cfab16a486cf5c3b46ddb4cdb8fb6a393102ba3b0f2386000caebedc082526b0dcf1af9614a8c8f341d5886282203743095b3b4c24fe8a01ec405c74a0fb6c2644fb437bbe533623e4127af7ab18b0a", 0xe8}, {&(0x7f0000001340)="e400c2282e485741d6c2a5e610fa48e990ba4e56e2d954bc8ecae29b40aa479ee428672ce73530d2cf0c4a3fbf74edaf2b8c22cb7bf5eb8248f0c610c236c55cfdff889bef1f326465c454c83b776a5dde8dd1fa62c140afa3d2d29f", 0x5c}, {&(0x7f00000013c0)="076602029f81e7d80612b47483fc405d5ed5ac82fffb1c174e6243109660eb2284675cbd104f6f89f3bf8eb983b92d816180292e7a937da49882", 0x3a}], 0x8}}, {{&(0x7f0000001480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="e16edfacfd255d8d5bc9dc30e4e8ac0e73fd911460b4a6164c61fd7fe733833ae65a9a3275e14d5791233094a76276874894411414b069cb4f94d08d56cd25a292028c895626c16189a6fb1b637b6d1876b32f090633480bc00568532e9bbe16d9ad9e960462e7b94fa55b4b49af20fa1848f014896ed9563154fdd0411e59de9c9077b6867211bf56", 0x89}], 0x1, &(0x7f0000001600)=[{0xf0, 0x11f, 0x5, "26b92f4ac6eea20be82cef8e7df21b6dc2fa5341b86c989a5093bfbcb702534f16bac103b65feb774585c8b7a8b96f086e3dc79512ffe106181d62db5c8e147f87626522938501cc5d9ebf04e58f263e6f8971213bbc3830efbadb6405c3bfdff7e17b3118d99af2cbeafed5b535ad718cb2375a8d2ea76ffeb1360e6795a9ea047c85cce7c9be6dc5a987a12f58390e2aca69d4cc853fd401db7b23240554ab257d565ff6a2587724ae886a9dcb5e8edfe10a85a0e334d0dc350f407e445333bb13f4ee68102730dbf3c28fbfc0a9c7593764b65b8c8f9b8801c66d21e9706f"}, {0x110, 0x11f, 0x80, "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"}], 0x200}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="4e602bd294b386c3", 0x8}], 0x1, &(0x7f0000001880)=[{0x30, 0x117, 0x4, "70ec31ad2eaa5f066fa96b05d0c5d4ba0e5637beed76c169ebf05fa8ad33c3"}, {0x50, 0x11f, 0xb, "2f498a37fd36130c2d9a2feab1702b893c25bd378e0a5b74f9383a42c2999fd6a23073a9747eb3454c7604742e26524d3a5e4eed508176731c8c97fd0d206c"}], 0x80}, 0x1}], 0x3, 0x50) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000001a00)=0x1, 0x4) 17:25:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) prctl$PR_SET_PDEATHSIG(0x1, 0x3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) close(r0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'\x00', {0x2, 0x4e23, @remote}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 227.597401] binder: 7556:7568 ioctl c0306201 20000100 returned -14 [ 227.627338] binder: 7557:7565 ioctl 40046207 0 returned -16 [ 227.629419] binder: undelivered death notification, 0000000000000000 [ 227.647472] binder: 7557:7571 transaction failed 29189/-22, size 24-0 line 3118 17:25:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ee7465733d99cb6f7be1ee0db9fc8a911da2e96492f17e455aac0a9b50981e9a57e773d8511b35cfa02871aa303f2ae697b00d9be552d7005ce981f300a77eaac93da64eb49fd3728686579cd78f8d74ad331dd13e887ef3eef738f9ec4710d00d5af7aefdaa7a028d50d40f317e1a3e4c1f0b3a8b6be817ce00de", 0x7b}, {&(0x7f00000000c0)="fd378464f514bfa8b70bb5698f5dd6d8d18d872c9428a6", 0x17}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="76405ede7732ba05b69404da25", 0xd}, {&(0x7f0000001140)="755428ddcc0cbbaa8c250319e18507d37495cc925d1c25ff3ea8f4d92f69c053b9df9ae43bfa60379cabdeb74c2fbf33a28f4ecf2ac59b7bb74abe8fb5c88525f072b850d1db36414ad9e690af45b45ffaeb8354169a4618eaf81376e98eec8e66571ffe1cd9947e3c02733d86c10b160a9e255746e4a7953ab53772075a8b82bd0163810c6f2ed996e790565cc042bd01a8555d72bb8e60ca183ef43486bf8b3d15870c5eec19b72df76660a5e67a28d100e25ff404befbf93aa7cb56d070ddcf638269edc9ef1a6ff80dbc2a182ec7a48683e9e4d9dec79feed17f0c143081af65fd86fc", 0xe5}, {&(0x7f0000001240)="d8c39defb19504fa8572fd6a373c525f071c004b8cf94b04e82776429d2c2943bc0d2e351025006dbbb55cefbfba9309b65c3c37cc82a9ef82b16ce6c794f7392d7d91f54e608b16c11d89bf003b7956680b28549f88e9abc4a6ef2a030b98da85199a13a39d44d85983b41c73cf0657a17ea094c88ad2dfc9d725c53bc50eb015ad2640d65cb649dd7515baf0d055dd02b7927c3ef2bbfd0cfab16a486cf5c3b46ddb4cdb8fb6a393102ba3b0f2386000caebedc082526b0dcf1af9614a8c8f341d5886282203743095b3b4c24fe8a01ec405c74a0fb6c2644fb437bbe533623e4127af7ab18b0a", 0xe8}, {&(0x7f0000001340)="e400c2282e485741d6c2a5e610fa48e990ba4e56e2d954bc8ecae29b40aa479ee428672ce73530d2cf0c4a3fbf74edaf2b8c22cb7bf5eb8248f0c610c236c55cfdff889bef1f326465c454c83b776a5dde8dd1fa62c140afa3d2d29f", 0x5c}, {&(0x7f00000013c0)="076602029f81e7d80612b47483fc405d5ed5ac82fffb1c174e6243109660eb2284675cbd104f6f89f3bf8eb983b92d816180292e7a937da49882", 0x3a}], 0x8}}, {{&(0x7f0000001480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="e16edfacfd255d8d5bc9dc30e4e8ac0e73fd911460b4a6164c61fd7fe733833ae65a9a3275e14d5791233094a76276874894411414b069cb4f94d08d56cd25a292028c895626c16189a6fb1b637b6d1876b32f090633480bc00568532e9bbe16d9ad9e960462e7b94fa55b4b49af20fa1848f014896ed9563154fdd0411e59de9c9077b6867211bf56", 0x89}], 0x1, &(0x7f0000001600)=[{0xf0, 0x11f, 0x5, "26b92f4ac6eea20be82cef8e7df21b6dc2fa5341b86c989a5093bfbcb702534f16bac103b65feb774585c8b7a8b96f086e3dc79512ffe106181d62db5c8e147f87626522938501cc5d9ebf04e58f263e6f8971213bbc3830efbadb6405c3bfdff7e17b3118d99af2cbeafed5b535ad718cb2375a8d2ea76ffeb1360e6795a9ea047c85cce7c9be6dc5a987a12f58390e2aca69d4cc853fd401db7b23240554ab257d565ff6a2587724ae886a9dcb5e8edfe10a85a0e334d0dc350f407e445333bb13f4ee68102730dbf3c28fbfc0a9c7593764b65b8c8f9b8801c66d21e9706f"}, {0x110, 0x11f, 0x80, "9e6e0ae6164cb9e23d1de463db866c49d660748e088963ad5d06de4c318ba46b0064829d300cef1dea622a03b133640316b5ab8a0e900e4e72ee0d21899e5343fd96b49fe96be24621a71754d402e778e4f61e6954b8dd7ad6f19b6552a16c504b44e35f64aa2f7521fec1038358aeca9da9cc68fff2351ff9709f5dad36a4747c1aff487e34b75a81cad1fdb34a3831edceea87e4dc8c29c3864d13791efdf6950d89e3e18af7192ef7b869165ab21266908b4a92034718bc789a5e96f3814bc9408f0037c0bbf0b181ab0431014d3a86053932bfd6a7d6beb14b14bc3ea4a2e08e84ef24d250bd35a3d884d7ef7366bf13bb34e39d8e0fca82e39cf8"}], 0x200}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="4e602bd294b386c3", 0x8}], 0x1, &(0x7f0000001880)=[{0x30, 0x117, 0x4, "70ec31ad2eaa5f066fa96b05d0c5d4ba0e5637beed76c169ebf05fa8ad33c3"}, {0x50, 0x11f, 0xb, "2f498a37fd36130c2d9a2feab1702b893c25bd378e0a5b74f9383a42c2999fd6a23073a9747eb3454c7604742e26524d3a5e4eed508176731c8c97fd0d206c"}], 0x80}, 0x1}], 0x3, 0x50) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000001a00)=0x1, 0x4) [ 227.666853] binder: 7557:7565 BC_FREE_BUFFER u0000000000000000 no match 17:25:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ee7465733d99cb6f7be1ee0db9fc8a911da2e96492f17e455aac0a9b50981e9a57e773d8511b35cfa02871aa303f2ae697b00d9be552d7005ce981f300a77eaac93da64eb49fd3728686579cd78f8d74ad331dd13e887ef3eef738f9ec4710d00d5af7aefdaa7a028d50d40f317e1a3e4c1f0b3a8b6be817ce00de", 0x7b}, {&(0x7f00000000c0)="fd378464f514bfa8b70bb5698f5dd6d8d18d872c9428a6", 0x17}, {&(0x7f0000000100)="e94b7c1ef74bccbfa05c0cfab5c360d82e2ff1217665d96cbd3e618c976133b8aa68b605be3db17e73bb852b59377437994647ee4c12f24b4cb851b0200e2bd2a41e9f4093e9863d7c78bee971e1a9bc9d7a9e3b82943167757becc7a39526ec59e771e2216f74b9a6d6c6288eb56cf974dbe7c75a6ac0ea20f91d843bcdfc4d0f340fd57cebcf6c135187f52fd5a579dbb83f43841f1afa4378b6f924a48403a56f52831bf4e14c4fc5dc526a338ef9cde6d68dbe2b7ff624a37d1fa7cc55f1ecacd3ec8b5f6749bb74b81f116a3a61661dc1e2df515af5bececa175f7c3af8de190ce06726adb4dd41b32c5fa7b523ce561a4a37397d2a8b0ee68a4b61eb92292373f2d8adcf8c3c4c9becb7759d7eccfac4bc045555382945dae85f4df6987ccf822312ceb24caf45a380ea7450c23bc8f33dc2223e95f713dfbaeb5563f9ab76f71b3e0f38a5c9de8a008f7e5ef9c864c930bad5c0b196ff9a325dc0645d909b0d6a4947b4e0b938802cb6fbf4941f3e1b4459f30d81732a3919e42f0b5bdf57e631c25544540e53d2dbfead0232fdb25ffc24c92fa216bfebe73a8708d57e6047b4b382610906218c47c57c61cbe8ac07cca5817fc3b06c9ab2653c24232f58c14177b6a66d6b8a17bab9723bd0d2dbb98ce915f184eba4d84b118fb0950d71b9117afdebb2dd32a71b32954cdb204fc33d20920d4465ebdd997e37a8110d50491af2b5e34668315d9a2a1fd4721880bf4b8265227dc05a1dda7536698c7604f3b1041526639321f3d893da4f84e951deb4a12d0cff6bbb802eebd38c1ec21aedb855bf5ac2f9ed279f62a36019623ad3cef40f9cbfd15e0631d9e44747454582c17b8795610ea2fa50f6be98928d82bd83cf23b3721f1ac4188eeab49ffcd544da810b72803df85692515966a5a126453244b5a1900d6003f2ea297fa6519cf3f2e6ab07ab1ad5a85dc8e444a5501d9bca49e5e9d785f2e930ddec69bab2598e293c193a269977952968d13698ff16201cab38a0c767880e5388b5c04a04e2b03677b88104d573990820b6098c4e4db43e3194f82f2a932cccc0b699f14a72d2de3101df5c0a413d47cc0d3175f8e3dd084571ac08eae55104677f10c11eeb6d4aaae9aeddf2787a2e45af97d0a937e6d2025f0ae5325d385354cdd22d9ef63246da4fe1e9401fe7e0d6a0f75a74dc6524f1d3e9e5d1df7873014e35893cd62cac7cc39bd90b6c4bbea7776314420a028617d1c0bea6e98b5a9ded5614620fa5cf51827063b8c29aae8ddeacf067ef1306fcc0a06a931cb342e7b552121c994283417c5a6a6e986093704823480a1bcdadc7a65d9daab508061d2d41d5415d88e511fdc5a20f051e9f2cd18088f9cd9de71d499bae50d3907958742d15efe548e271ef8dae1a39640d008ae8bdfd63dfd500a65b98c3c05ad48f298b87ed950168c0939efe51b7dbf1482181819d523f7860b1c58fc9a5f4a384f03060ceb92455beecdf179201a00a77a24fe39cd877575f9b6d9a81cac38bbef644a541634960d0ed11e717da796ae8a1a9f37d613352d8e89446d41eb866177fb204aabef757dad51951172f7aa392d6c14d0afb22ae119e415c342946c0f41003d91835bb069c3e3553e09ac11e34ec72406641c347fc5e82db1e38f1868219fd6e0b55a869c557839a57bbbc16e548ceb54def673692de3b2bc974c93a77b890688e8cdd49355c076c40a505ffc4b5bfcf57fee15809c46fe4bdd31ead8ae0707c5d3da71ff28fcad9a7a665e2d2bf1acf3c35178c97127f9a0e1e2b4e3680303a5af055c5810751756d6c1e23b9d3cfdba589604b4da96a23f13ae7b9deb2dc33da2b7c7b929bd75f065ece5d74ba892f76eed5cf8e5eb4469fa15528c037ed54c64d0eee0fe1a0420d1bd3e441c78293f2f6a17af5c91d3b7b43a639218193f3664f406554b7449e881265857348f5aae788c73cc986dd04376933e222a398df397845cc97c07c33d4ae588c708be0ad10ff08bd65a62367b119ed16ec0719103698879e96dd47c3fb0618c7267974724b707a9a3caf3d557acf2ebd651ad20a8c799be3fa2eb74797143370b2dacdd2739013f51af51bae55cbffa2ed1bca22defdcd33db792827a65882ac8b36d1d86c7043a4df93fa5ef65be94c9724d236687eb85908f17dee326fb19c975ac93b55279e1d6bdea5fc2b76723b50faa810392d6e7148124c79290fda138a5e3ad501781399c52d4a283297d827d2a2d07815bfd147bf1b0dcf7f03ae55b2a8f5eab8a5230e956b79640368f0620ecd4f7029f35e620d94c76ef25735ef5ba3033145a5c7a1161a470e447cb5ea76a4a8c3630cde8529a89d7006d774ab85728635b7b0cfa568055bfefe98391682b53122115960d8ab778e3a412a83d6b895fb97726aeb60862b231ce1b46c2f47d97d1e3142c8546f56015484f572c1932668dc06ae28ad823b8aec70ded52780b5b4e5072e97af334f48fc4817ea338f5f5b3063a144c9915d55476098de04c688a5dc2d14d909fb622e5119b271ce9466da1f26d0b54b37441c4763fcaa295527c257c83370d37a734ae5a1307536f010c9000e1a857736b8f7094d48bc64f4fbdb9813a89706298f07f1cf9779aae7ed710cae2d4b685a3fb51ceeaa52e5d6e3e24fda0e6ba516e7e0e7d0228ba936dda9f4f9893fac0c77b8b9a8d91013a138d7de5dc121593cee794e6c12da2aa5ffd41fb239dc6ce4deee3d115b0034e272c74d82c69fdf8608486819d17d7ade05482318b3d455a2c9b20a7ee864a5584b8961e6b3d04018cbcaab2f4639e0783c8364a6f87f91db4c5a39beb7d795642b05a1544b7ac06dfe6f5f9ac86b45b36163c5e510ecfd5656b7fa15362ed73ba97092c9eb40dba6d920504d785f057d3afaf14ca8af16b938b7a821486fd6e966706699c1b3b07aef8bb45c966d5c0422fa35e8db288bc89521a0b1a0d36252bb32a8fddb4d60f15ee09e61d0f5489bc5d34709574d779923edfd4cb8e411cfb924d98b6686545ad82de88c9f47e9409f1e3877792bd783bbe30b5d435ddca4deede22168fa87bf58f1e2c882ed9b71dc0ed856705be6878616ace5443aaccc7578e9de83809b87f1ad6e41c0b1b2ddd85d7ff2a6d5344aff6c4bd10a338b482e7571177715e1ea6937a462b4d7bf485b7dce07ae54e65a5fd90e28e431af842000e771857da93979bc601032625c08eb60bd5223f1e2c6c8fc6df8d3dfedfae483741f45e99874e591f824990ce66c3640e3fcb54bc606caf50104baa8a6defa582b3414fd1e6cba8d3c9d940a03fd51437614c26e36eb05dbfc9331bdee12b80701647f8b5bda11926ab89bd462c1aeeb954a42a5dfbd46a5403640d4bbd040a2015ce36048d9c87507afbe867977aad94aa940b2be98761f91e436c99c1102f6e66be84ca54acea0853cd2794eec6edffcfda7e03040b6623f2a85e6e2964d742181ed7785768f78e5435fef219a3e82261629ecdbdb3c0e9c1993a68795c028388e5d4beb1b2ae63d6e5cb46a69f1226efa56242159a222df7e72c779f81f39da90280891d5d4ae4520030fd6ae5840b2204df1618728b6cebb106745cfd038e383f10377eb0e31163e764ebef343089c27f39b8b6127ef10e0883e6532f5972796ccf56392d07624483e9a20e3625fff23b4a6d86ac6f34bf375296e2f03f398c28f82dc345b6476c5fe77714f757eec12517de2b2920ba7a0e6720f0b3240b5808a1d4cb8de97f2b9964552f5cb32efa90bf91a81917096501f946fe0e810720c5df02cae242b7c275192cebe0b38dfc29473143b6c6e51250f34cc091e17dcd84a07d18e2154c40f1fce82a86a947d78ce6411a9648cc59d2870bfdbbe180d8d9d7e46b309259a3b607de626b3f89fb1b934cfa7ff364480cb38584956d344d7f4dee37a4b85eb626c0e395506f88f4aec0f9018eb80938a5aafdc4c27411e36a1e978533597f88e6cc3441e2c502b8a58264d77585a0220720296ec68b420133dd585f599cb51c4b84887c0afc49fd6ebb350c26bde9f0979ed1e40e349d185a15ddf522727047e56d2325a90c045bcb37249a530c85d49a5eb7256d2ea9d32fbe9f2c7448a2f40adcddf464c153c6acc512416aedf9cad613d244d4ef76603a62965d40fcd0e2a5a2392c1235e25347b94dc318920beaee540a487c60d9d5f4df04e26cdd627edfa72f67af5b4611e7d2ac51734628b05e3db9fc24a6bf160d8173ed91e6c3c8323a1e769b408c14e3f5b16bdd39a09d005fc8ee91d9a6488fd5f7f9d47847316fa1924c72853d0ebb7251f9add8aaf71494ea486c927797dc272861f91d1c4f37a7c491ace4d5848237dc4b561d1b08b35f359054664de88d64442785e95c85fd5dc6b870fd7ae76385e2f2817794ac48c3140a7fa8955c7df7d882470b1ffa219509c7681966a1e7603e50809f5e215e59ca10293744436bf2b5d57d74607d39863deb55e6e1291cd864b19b7556bb87f12ffd5dd73ab09602fe3f58dd327da47822086ad4e1b1aaa7f942cc85bc18354c95295b4bb21b4b757c8379600e5bc25568f1a05b31feedc30a3e03174770d5f0a7e28baaa35ec3cc9e2a3ae271b214a36d16af53915fc59f299d049b5bc5c179382cf7a27141f3f6c093ae94fc25b62d3bb9a22fc5cf9fb129aeb0c99aa824bc62343de042b1bf388b440efa199cf3fcbf60f1b469f48e2d31beaac566eec633a570832dcdbf6c66a30cddafc0d11091b1a0dfee61598bda5eb42aea21693982d25c15b54aea3551bd97aad03dbb6d3c587469f8ad442d76f9574a4043c5a52f59cc4b89fcc0c07ef561a9f01834fd92abace52befe9d5d0ca2b6b1da677ad52e50476a7e824f66537be4e50919230106d3af9a7c4997bdb0f24fd42cdca1c866c303d07ed3bc788ad1bb53cdd918568624e355fa77d52600fdf900f3498ba898ac6104a2e51ad7cef7e76b61b524da3e50ca3df715013d60e090824ad47d5e6f8320615b3dbc26bfc7a89e58df1780aa55a62e9f5c8fb31b9d935ba7fda79b075a81a7bf5baae94a3868c23387a5f5414118f83f23a845b9a0e8a27aa67dabde8e407a0ca6786021ac3a56e9d9928e4ba40c10f42a1a52dd280367e4cc120d980437a7626e13f73d4333c621b910adbcf54e152c4065c974b5b6045d752505784c506e190897b45d8f274568f7b6d69c106b1111e8f089cca4b8eb508db843322f00323147d4e19f84014b79393c5641b6601f19f5baae957b935d2fcea55542adcd39ef44281446d46201d3cff6f164dd44993a9c4ac05d92dbb136e3bfb4f789b757993136008458d54008c7e2ee874e0bd01634b2a123e8af3cd61a3436da132e3ee901753021556e64aa251bff7ef5306e7d76e73bbaec90045fdb33e0d33f0a62505414e77c533493416423fe2a216034c7ad38db8c2a6add3941e6af746afcc32d2c5f72285c4f0fbe9bf1b37c49837a9008006bf9f1f6ef1345f126101b1e33251469875c1711532a3f2fe6c9322734045c6a2692294fcd71a404d7d100d352404833ee7db4a4589e2db5f0fc8767970e61ea6ad0483b7db4555bf12ea44247ed07ae5aba997fb4f96196d45e3f2de748c9057acde133a3620dd16a7c0312b4cebc4ad58710299739e6a16bdc894d580e321c98aaba79673d2e21eb8e2996e36647a439167732dc3486bcea6ec5dc7556368e43a33a09afa7829d113fceb88952669a051c07cdb856fa1b3b0a8aadaa8880be262271299b404bed82c382c5ae4239", 0x1000}, {&(0x7f0000001100)="76405ede7732ba05b69404da25", 0xd}, {&(0x7f0000001140)="755428ddcc0cbbaa8c250319e18507d37495cc925d1c25ff3ea8f4d92f69c053b9df9ae43bfa60379cabdeb74c2fbf33a28f4ecf2ac59b7bb74abe8fb5c88525f072b850d1db36414ad9e690af45b45ffaeb8354169a4618eaf81376e98eec8e66571ffe1cd9947e3c02733d86c10b160a9e255746e4a7953ab53772075a8b82bd0163810c6f2ed996e790565cc042bd01a8555d72bb8e60ca183ef43486bf8b3d15870c5eec19b72df76660a5e67a28d100e25ff404befbf93aa7cb56d070ddcf638269edc9ef1a6ff80dbc2a182ec7a48683e9e4d9dec79feed17f0c143081af65fd86fc", 0xe5}, {&(0x7f0000001240)="d8c39defb19504fa8572fd6a373c525f071c004b8cf94b04e82776429d2c2943bc0d2e351025006dbbb55cefbfba9309b65c3c37cc82a9ef82b16ce6c794f7392d7d91f54e608b16c11d89bf003b7956680b28549f88e9abc4a6ef2a030b98da85199a13a39d44d85983b41c73cf0657a17ea094c88ad2dfc9d725c53bc50eb015ad2640d65cb649dd7515baf0d055dd02b7927c3ef2bbfd0cfab16a486cf5c3b46ddb4cdb8fb6a393102ba3b0f2386000caebedc082526b0dcf1af9614a8c8f341d5886282203743095b3b4c24fe8a01ec405c74a0fb6c2644fb437bbe533623e4127af7ab18b0a", 0xe8}, {&(0x7f0000001340)="e400c2282e485741d6c2a5e610fa48e990ba4e56e2d954bc8ecae29b40aa479ee428672ce73530d2cf0c4a3fbf74edaf2b8c22cb7bf5eb8248f0c610c236c55cfdff889bef1f326465c454c83b776a5dde8dd1fa62c140afa3d2d29f", 0x5c}, {&(0x7f00000013c0)="076602029f81e7d80612b47483fc405d5ed5ac82fffb1c174e6243109660eb2284675cbd104f6f89f3bf8eb983b92d816180292e7a937da49882", 0x3a}], 0x8}}, {{&(0x7f0000001480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="e16edfacfd255d8d5bc9dc30e4e8ac0e73fd911460b4a6164c61fd7fe733833ae65a9a3275e14d5791233094a76276874894411414b069cb4f94d08d56cd25a292028c895626c16189a6fb1b637b6d1876b32f090633480bc00568532e9bbe16d9ad9e960462e7b94fa55b4b49af20fa1848f014896ed9563154fdd0411e59de9c9077b6867211bf56", 0x89}], 0x1, &(0x7f0000001600)=[{0xf0, 0x11f, 0x5, "26b92f4ac6eea20be82cef8e7df21b6dc2fa5341b86c989a5093bfbcb702534f16bac103b65feb774585c8b7a8b96f086e3dc79512ffe106181d62db5c8e147f87626522938501cc5d9ebf04e58f263e6f8971213bbc3830efbadb6405c3bfdff7e17b3118d99af2cbeafed5b535ad718cb2375a8d2ea76ffeb1360e6795a9ea047c85cce7c9be6dc5a987a12f58390e2aca69d4cc853fd401db7b23240554ab257d565ff6a2587724ae886a9dcb5e8edfe10a85a0e334d0dc350f407e445333bb13f4ee68102730dbf3c28fbfc0a9c7593764b65b8c8f9b8801c66d21e9706f"}, {0x110, 0x11f, 0x80, "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"}], 0x200}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="4e602bd294b386c3", 0x8}], 0x1, &(0x7f0000001880)=[{0x30, 0x117, 0x4, "70ec31ad2eaa5f066fa96b05d0c5d4ba0e5637beed76c169ebf05fa8ad33c3"}, {0x50, 0x11f, 0xb, "2f498a37fd36130c2d9a2feab1702b893c25bd378e0a5b74f9383a42c2999fd6a23073a9747eb3454c7604742e26524d3a5e4eed508176731c8c97fd0d206c"}], 0x80}, 0x1}], 0x3, 0x50) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 227.696288] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.707914] binder: 7575:7580 tried to acquire reference to desc 0, got 1 instead [ 227.708848] binder: 7575:7583 BC_REQUEST_DEATH_NOTIFICATION death notification already set 17:25:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 227.709026] binder: 7575:7583 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 227.742124] binder_alloc: 7584: binder_alloc_buf, no vma [ 227.742144] binder: 7584:7588 transaction failed 29189/-3, size 24-0 line 3255 [ 227.742255] binder: 7584:7588 BC_FREE_BUFFER u0000000000000000 no match [ 227.742686] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.792536] binder_alloc: 7591: binder_alloc_buf, no vma [ 227.792557] binder: 7591:7592 transaction failed 29189/-3, size 24-0 line 3255 [ 227.793044] binder: 7591:7592 BC_FREE_BUFFER u0000000000000000 no match [ 227.793445] binder: undelivered TRANSACTION_ERROR: 29189 17:25:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4008000, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="ee7465733d99cb6f7be1ee0db9fc8a911da2e96492f17e455aac0a9b50981e9a57e773d8511b35cfa02871aa303f2ae697b00d9be552d7005ce981f300a77eaac93da64eb49fd3728686579cd78f8d74ad331dd13e887ef3eef738f9ec4710d00d5af7aefdaa7a028d50d40f317e1a3e4c1f0b3a8b6be817ce00de", 0x7b}, {&(0x7f00000000c0)="fd378464f514bfa8b70bb5698f5dd6d8d18d872c9428a6", 0x17}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="76405ede7732ba05b69404da25", 0xd}, {&(0x7f0000001140)="755428ddcc0cbbaa8c250319e18507d37495cc925d1c25ff3ea8f4d92f69c053b9df9ae43bfa60379cabdeb74c2fbf33a28f4ecf2ac59b7bb74abe8fb5c88525f072b850d1db36414ad9e690af45b45ffaeb8354169a4618eaf81376e98eec8e66571ffe1cd9947e3c02733d86c10b160a9e255746e4a7953ab53772075a8b82bd0163810c6f2ed996e790565cc042bd01a8555d72bb8e60ca183ef43486bf8b3d15870c5eec19b72df76660a5e67a28d100e25ff404befbf93aa7cb56d070ddcf638269edc9ef1a6ff80dbc2a182ec7a48683e9e4d9dec79feed17f0c143081af65fd86fc", 0xe5}, {&(0x7f0000001240)="d8c39defb19504fa8572fd6a373c525f071c004b8cf94b04e82776429d2c2943bc0d2e351025006dbbb55cefbfba9309b65c3c37cc82a9ef82b16ce6c794f7392d7d91f54e608b16c11d89bf003b7956680b28549f88e9abc4a6ef2a030b98da85199a13a39d44d85983b41c73cf0657a17ea094c88ad2dfc9d725c53bc50eb015ad2640d65cb649dd7515baf0d055dd02b7927c3ef2bbfd0cfab16a486cf5c3b46ddb4cdb8fb6a393102ba3b0f2386000caebedc082526b0dcf1af9614a8c8f341d5886282203743095b3b4c24fe8a01ec405c74a0fb6c2644fb437bbe533623e4127af7ab18b0a", 0xe8}, {&(0x7f0000001340)="e400c2282e485741d6c2a5e610fa48e990ba4e56e2d954bc8ecae29b40aa479ee428672ce73530d2cf0c4a3fbf74edaf2b8c22cb7bf5eb8248f0c610c236c55cfdff889bef1f326465c454c83b776a5dde8dd1fa62c140afa3d2d29f", 0x5c}, {&(0x7f00000013c0)="076602029f81e7d80612b47483fc405d5ed5ac82fffb1c174e6243109660eb2284675cbd104f6f89f3bf8eb983b92d816180292e7a937da49882", 0x3a}], 0x8}}, {{&(0x7f0000001480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="e16edfacfd255d8d5bc9dc30e4e8ac0e73fd911460b4a6164c61fd7fe733833ae65a9a3275e14d5791233094a76276874894411414b069cb4f94d08d56cd25a292028c895626c16189a6fb1b637b6d1876b32f090633480bc00568532e9bbe16d9ad9e960462e7b94fa55b4b49af20fa1848f014896ed9563154fdd0411e59de9c9077b6867211bf56", 0x89}], 0x1, &(0x7f0000001600)=[{0xf0, 0x11f, 0x5, "26b92f4ac6eea20be82cef8e7df21b6dc2fa5341b86c989a5093bfbcb702534f16bac103b65feb774585c8b7a8b96f086e3dc79512ffe106181d62db5c8e147f87626522938501cc5d9ebf04e58f263e6f8971213bbc3830efbadb6405c3bfdff7e17b3118d99af2cbeafed5b535ad718cb2375a8d2ea76ffeb1360e6795a9ea047c85cce7c9be6dc5a987a12f58390e2aca69d4cc853fd401db7b23240554ab257d565ff6a2587724ae886a9dcb5e8edfe10a85a0e334d0dc350f407e445333bb13f4ee68102730dbf3c28fbfc0a9c7593764b65b8c8f9b8801c66d21e9706f"}, {0x110, 0x11f, 0x80, "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"}], 0x200}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)="4e602bd294b386c3", 0x8}], 0x1, &(0x7f0000001880)=[{0x30, 0x117, 0x4, "70ec31ad2eaa5f066fa96b05d0c5d4ba0e5637beed76c169ebf05fa8ad33c3"}, {0x50, 0x11f, 0xb, "2f498a37fd36130c2d9a2feab1702b893c25bd378e0a5b74f9383a42c2999fd6a23073a9747eb3454c7604742e26524d3a5e4eed508176731c8c97fd0d206c"}], 0x80}, 0x1}], 0x3, 0x50) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1510400829ae3359, 0x0, &(0x7f0000000400)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r3}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ptr={0x70742a85, 0x2, &(0x7f0000000300), 0x0, 0x2, 0x11}, @fda={0x66646185, 0x2, 0x3, 0xc}], &(0x7f00000003c0)=[0x48, 0x20, 0x38, 0x38]}}, @free_buffer={0x40086303, r3}], 0xffffffffffffffad, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x3ff, 0x3f, 0x6, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 229.695927] binder: 7606:7608 Acquire 1 refcount change on invalid ref 3 ret -22 [ 229.711027] binder: 7606:7608 BC_INCREFS_DONE u0000000000000000 no match [ 229.719173] binder: 7606:7608 got reply transaction with no transaction stack [ 229.735398] binder: 7606:7608 transaction failed 29201/-71, size 0-0 line 3026 [ 229.743559] binder: 7606:7608 ioctl c0306201 20000240 returned -14 [ 229.744717] binder_alloc: 7605: binder_alloc_buf, no vma [ 229.744737] binder: 7605:7610 transaction failed 29189/-3, size 24-0 line 3255 [ 229.744864] binder: 7605:7610 BC_FREE_BUFFER u0000000000000000 no match [ 229.745314] binder: undelivered TRANSACTION_ERROR: 29189 [ 229.751477] binder: 7606:7615 ioctl c028660f 20000040 returned -22 17:25:44 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1fc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xbc8c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x11}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x814000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x45b6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x78}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4048010) [ 229.850458] binder: 7606:7620 Acquire 1 refcount change on invalid ref 3 ret -22 [ 229.858153] binder: 7606:7620 BC_INCREFS_DONE u0000000000000000 no match [ 229.865089] binder: 7606:7620 got reply transaction with no transaction stack [ 229.872435] binder: 7606:7620 transaction failed 29201/-71, size 0-0 line 3026 [ 229.880624] binder: 7606:7620 ioctl c0306201 20000240 returned -14 [ 229.887180] binder: 7606:7608 ioctl c028660f 20000040 returned -22 [ 229.897123] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.903335] binder: undelivered TRANSACTION_ERROR: 29201 17:25:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x49, "09d4a06a3b3e0f5e9f9a674ed6127331248bf487ad190a6ea5d0c9d0de9e4ba12cb8b735c71b12b20ba9d78d291106461ca1a994aaa05a1332ed9b7e5093e5ebdf5e5f3ec90c7c7531"}, &(0x7f00000000c0)=0x6d) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000400)=@sco, &(0x7f0000000480)=0x80, 0x80000) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000004c0)={'mangle\x00'}, &(0x7f0000000540)=0x54) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x30000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x17c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe8f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5e19}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0xfffffee2, 0x0, &(0x7f0000000440), 0x2c8, 0x0, &(0x7f00000004c0)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:44 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) 17:25:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 230.011157] binder_alloc: 7629: binder_alloc_buf, no vma [ 230.017887] binder: 7629:7634 transaction failed 29189/-3, size 24-0 line 3255 [ 230.018052] binder: 7632:7633 unknown command 0 [ 230.018061] binder: 7632:7633 ioctl c0306201 2000dfd0 returned -22 [ 230.018216] binder: 7632:7633 ioctl c0306201 20000100 returned -14 [ 230.018297] binder: 7632:7633 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:25:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000280)=0xffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)='$#\x00', r3}, 0x30) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', r5}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 230.029501] binder: BINDER_SET_CONTEXT_MGR already set 17:25:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:44 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 230.029512] binder: 7632:7633 ioctl 40046207 0 returned -16 [ 230.057135] binder: 7629:7646 BC_FREE_BUFFER u0000000000000000 no match [ 230.057617] binder: 7632:7640 unknown command 0 [ 230.057627] binder: 7632:7640 ioctl c0306201 2000dfd0 returned -22 [ 230.057756] binder: 7632:7640 ioctl c0306201 20000100 returned -14 [ 230.057980] binder: undelivered death notification, 0000000000000000 17:25:44 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 230.058011] binder: undelivered death notification, 0000000000000000 [ 230.074265] binder: BINDER_SET_CONTEXT_MGR already set [ 230.074273] binder: 7648:7649 ioctl 40046207 0 returned -16 [ 230.154362] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.158916] binder: 7648:7649 BC_REQUEST_DEATH_NOTIFICATION death notification already set 17:25:46 executing program 4: clone(0x70024101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7f) r1 = gettid() ptrace$getsig(0x4202, r1, 0x3612, &(0x7f0000000040)) 17:25:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 231.733920] binder_alloc: 7673: binder_alloc_buf, no vma [ 231.740034] binder: 7673:7674 transaction failed 29189/-3, size 24-0 line 3255 [ 231.748386] binder: 7673:7674 BC_FREE_BUFFER u0000000000000000 no match [ 231.756206] binder: undelivered TRANSACTION_ERROR: 29189 17:25:46 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x199500, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) 17:25:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="e5a5cc000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10c00, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:46 executing program 3: socketpair$unix(0x1, 0x2003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:46 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x200040, 0x0) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, "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", 0xfffffffffffffeb9}, 0x1006) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x2, {0xff}}, 0x18) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 17:25:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 231.889828] binder: 7686:7690 BC_FREE_BUFFER u0000000000000000 no match [ 231.909949] binder: release 7686:7690 transaction 495 out, still active [ 231.912120] binder: BINDER_SET_CONTEXT_MGR already set [ 231.912129] binder: 7685:7691 ioctl 40046207 0 returned -16 [ 231.913982] binder: 7685:7691 unknown command 13411813 [ 231.913990] binder: 7685:7691 ioctl c0306201 20008fd0 returned -22 [ 231.967374] binder: 7685:7705 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 231.980025] binder: BINDER_SET_CONTEXT_MGR already set [ 231.989036] binder: 7685:7705 ioctl c0306201 20000100 returned -14 [ 231.995733] binder: 7685:7705 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 232.003450] binder: undelivered TRANSACTION_COMPLETE [ 232.009308] binder: send failed reply for transaction 495, target dead [ 232.016657] binder: 7703:7707 ioctl 40046207 0 returned -16 [ 232.024655] binder: 7703:7707 transaction failed 29189/-22, size 24-0 line 3118 [ 232.033066] binder: 7703:7707 BC_FREE_BUFFER u0000000000000000 no match [ 232.040800] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.687518] binder: 7685:7705 tried to acquire reference to desc 0, got 1 instead [ 232.695686] binder: 7685:7705 unknown command 536872576 [ 232.700438] binder: 7685:7717 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 232.700459] binder: 7685:7717 ioctl c0306201 20000100 returned -14 [ 232.717030] binder: 7685:7705 ioctl c0306201 20008fd0 returned -22 17:25:48 executing program 4: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, r0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000001040)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10630840004d000000000000000000"], 0x0, 0xfffffdfd, 0x0}) 17:25:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) io_setup(0x8, &(0x7f0000000000)=0x0) io_destroy(r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x134, r4, 0x42e, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x87}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf767}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40085}, 0x408c0) [ 234.104794] binder: 7729:7731 ioctl c0306201 20000100 returned -14 [ 234.124130] binder: 7729:7731 BC_DEAD_BINDER_DONE 0000000000004d00 not found [ 234.133621] binder: 7728:7732 BC_FREE_BUFFER u0000000000000000 no match 17:25:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 234.150312] binder: release 7728:7732 transaction 503 out, still active [ 234.157129] binder: undelivered TRANSACTION_COMPLETE [ 234.178861] binder: BINDER_SET_CONTEXT_MGR already set 17:25:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 234.178870] binder: 7729:7731 ioctl 40046207 0 returned -16 [ 234.184481] binder: 7729:7731 tried to acquire reference to desc 0, got 1 instead [ 234.189944] binder: 7729:7731 unknown command 536872576 [ 234.189954] binder: 7729:7731 ioctl c0306201 20008fd0 returned -22 [ 234.198194] binder: 7729:7744 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 234.198212] binder: 7729:7744 ioctl c0306201 20000100 returned -14 [ 234.216116] binder: BINDER_SET_CONTEXT_MGR already set [ 234.216126] binder: 7743:7747 ioctl 40046207 0 returned -16 [ 234.221227] binder_alloc: 7728: binder_alloc_buf, no vma 17:25:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x82) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x17, 0x4, 0xfffffffffffffff7}, {{}, 0x12, 0x1000, 0x1}, {{}, 0x14, 0x7, 0xffffffffffffffff}], 0x48) clone(0x9ffffffd, 0x0, 0x0, 0x0, 0x0) 17:25:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 234.221247] binder: 7743:7747 transaction failed 29189/-3, size 24-0 line 3255 [ 234.221380] binder: 7743:7747 BC_FREE_BUFFER u0000000000000000 no match [ 234.252333] binder: BINDER_SET_CONTEXT_MGR already set [ 234.252342] binder: 7749:7752 ioctl 40046207 0 returned -16 [ 234.304251] binder: 7749:7755 unknown command 0 [ 234.304262] binder: 7749:7755 ioctl c0306201 20000100 returned -22 [ 234.304340] binder: 7749:7755 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 234.353050] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.358648] binder: undelivered death notification, 0000000000000000 [ 234.373797] binder: send failed reply for transaction 503, target dead [ 234.377762] binder: 7759:7760 BC_FREE_BUFFER u0000000000000000 no match [ 234.381072] binder: BINDER_SET_CONTEXT_MGR already set [ 234.381080] binder: 7749:7752 ioctl 40046207 0 returned -16 [ 234.381236] binder: 7749:7755 tried to acquire reference to desc 0, got 1 instead [ 234.391939] binder: 7749:7752 unknown command 536872576 [ 234.391948] binder: 7749:7752 ioctl c0306201 20008fd0 returned -22 [ 234.434534] binder: 7749:7765 unknown command 0 [ 234.434546] binder: 7749:7765 ioctl c0306201 20000100 returned -22 [ 234.456587] binder: send failed reply for transaction 508 to 7759:7760 [ 234.463911] binder: undelivered TRANSACTION_COMPLETE [ 234.469030] binder: undelivered TRANSACTION_ERROR: 29189 17:25:51 executing program 4: clone(0x800, 0x0, 0x0, 0x0, 0x0) 17:25:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:51 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x8000, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0xc2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x6}, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='nr0\x00', 0x0, 0x3f, 0x6}) getpeername$netlink(r1, &(0x7f0000000240), &(0x7f0000000280)=0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x8e) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 17:25:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 236.762746] binder: 7783:7785 ioctl c0306201 20000100 returned -14 [ 236.773480] binder: 7781:7787 BC_FREE_BUFFER u0000000000000000 no match [ 236.773752] binder: release 7781:7787 transaction 513 out, still active [ 236.773756] binder: undelivered TRANSACTION_COMPLETE [ 236.782407] binder: send failed reply for transaction 513, target dead 17:25:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:25:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:51 executing program 4: getitimer(0x0, &(0x7f00000000c0)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-'}, 0x28, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0/file0\x00', 0x3ff, 0x5, &(0x7f0000001400)=[{&(0x7f0000000180)="9c3f09965d61d1d3170c399b597c6e7ac78e62611e74f37b6ae502edcafcc0ad5edc2a9dd9ea5c3a6c68340ab3cd2452f2a8cc4cbe5d8909c03f31ca9c2d3d9bb433b97d824de0fa5437dae547179abf6c72b2bc2667e1568afabd45659c5759ed8ba2ce42c7d01e2745799886e1cfb4c2583e687e9cad796be9cc0a455940b99ae6cd35f40daee1488ad98cf8d58305f5ca28434369163d9fab", 0x9a, 0x3}, {&(0x7f0000000240)="45cf63de42a7edcf7e62f67122f642e927f663500d551c59fe564f2c22223451e6aad5cfe9b74941793263d801", 0x2d, 0xb38}, {&(0x7f0000000280)="dba70bb7401dd6de7eb9c16fdb2b9801be93ffa91d34f35218c54db0d4703736ae0dd80b8fa396da54a631bb022c67d2277b5548dab7a9605145ff779c714a1b679414d0b4ef447acec8c0c10e249b4106c3e3ae7d7cb21a8b80f4a1c0c54c2f20157d6dc2a13d5508a6e86154ca39c20c60526fd44ab77c2e6e7238ea8689c70dba4de10858ed8276f80a410a5d0ecf1e6771fdd58954ab42187db3829d", 0x9e, 0xf6}, {&(0x7f0000000340)="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", 0x1000, 0x1f}, {&(0x7f0000001340)="937115446dfa884b47667750fb098b6e135c3a67570af9a4627370a62eb71cc08450b3f096d744629e5fcdf91de9cd44c6ac1f4b875e8f481a8690cec5e99260e45a34a95c298ed3133ddadc63bac6c3b6dea9a652f6c535e1c0d37e568f31db0c0dc76b9394921ada65e09eb71c32c2d0fb58a6c49d210e72c2651ee0e282ef936e02f174fc615f9e336a419c46d13c547f97372e78363ea826163d8ed8574ee7cb21ae6441924793449a43f67945ae", 0xb0, 0xc00}], 0x1300000, &(0x7f0000001480)={[{@journal_dev={'journal_dev'}}], [{@appraise='appraise'}, {@context={'context', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}]}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 17:25:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 236.814178] binder: 7783:7792 tried to acquire reference to desc 0, got 1 instead [ 236.823046] binder: 7783:7793 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 236.834163] binder: 7783:7793 ioctl c0306201 20000100 returned -14 [ 236.838088] binder: 7783:7785 unknown command 536872576 17:25:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:51 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4280, 0x0) write$UHID_CREATE(r0, &(0x7f0000003a00)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/119, 0x77, 0x5, 0x3, 0x4, 0x65e, 0x55}, 0x120) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x41) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80000, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)=',\x00'}, 0x10) stat(&(0x7f0000000780)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000003b40)=""/101, 0x65) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000cc0)=0x0) r8 = geteuid() r9 = creat(&(0x7f00000020c0)='./file0\x00', 0x8) sendmsg$netlink(r1, &(0x7f00000039c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000003900)=[{&(0x7f00000001c0)={0x29c, 0x36, 0x0, 0x70bd26, 0x25dfdbfe, "", [@nested={0xe0, 0x6c, [@generic="a1d73d3681ea49ee4dbcbc8627230a06f69ca6c9edc9f3d1840a073dc4162004819c16154c22cf2fdc51296ed493ec51faaab28d1b2d85849bd49d36df89e33194cf0bc84f3a79a90c2472c240527e571e910f9e3a1bf8c9ad6309fc5539cafadc673d1e04f0f750d4ab8eb14fffb0901dca258a4666b7e68afc058f303e598958d8d16aac1195c0c458fcc1e5ac926ad8c1d526554585831cca0dfe166697f33ecf1d34f6864f10a1887327f536b64cd72a21cdd30b326cd144ff5de15a7723fab4865687334fbee95e07af", @typed={0x4, 0x6b}, @typed={0x8, 0x1f, @ipv4=@initdev={0xac, 0x1e, 0x5, 0x0}}, @typed={0x4, 0x6f}]}, @generic="6cb27b1ff81c4f3ef58b4a81432f5ff28904d19282f4945b5a9dbcc1394c7baca48d789773221dbdaf9bf0f0559fa19ea7103962a902e9f88c2e51af47da5e", @nested={0x16c, 0x14, [@generic="ed064c8f68d21ed0ce6b26d7f303c3d4fd1f17e31b8863714f8ee32e13507a5e2d213f8dc7001c911367698eec9b04230b68365674dcef1395e4fdb4eeda02b6c3bff503cbab8628f888116a3e1f9356cf5c2c5e2b491c942dfe4b3fa3b685a11aef9e06c5a830c69abeda1f724410577e09d2a018a8505b38", @generic="ec40b732d0f4bdb78a854bb334ed78ebc27234deb7c457d0baa935113fee710f9e197b86419be8dddaf540776c3a73d7f5d05f097131a8a1d9989a23894bf1f132db5df5da2158f86fc02d8fe8f6f54a9f514000a6b75581c7dfd1107a72784063c71e26c5b5c25855d867dd818a57616b1a2e247c2066fd3af61e1c021db681109837ac745653c361ce6ff368856ca0f484c0159daab7923eeff7f09c7043630e74ee0dc34adbd46942ac6d77462b89f8011a6e2fb22b46ca8b173c9594047fa438bed452e8b960c5496fdb648f8eaf420a08873a5e93923aab3469598c571d338d590d00dc81", @typed={0x8, 0x3f, @fd=r2}]}]}, 0x29c}, {&(0x7f0000000500)={0x244, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@generic="7c1d54929f55c77b17af4735f35f010a5e65f5dcf15cd76aaa09900ceb56ae1a12b91bc9cece5170617512bf06e69061ab665755501aa5b3e3aa7ca1278490bf8f165d31a6c5fe4f2edc54862946b64fea4a65576a31b642a34c2138e31da35434ef2dceae0e811cf4a76059fa8acc7f93586d03ce81eb1360a2bcdee9100a97e0d91784c7f4c9821f64d8be6811abcefc9756800ed02405ea684947a89c", @typed={0x14, 0x22, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @generic="c218f62b1fe2c951f9349a3a84f58d87eefc65587b03d57f644a21f661562d18c09c2783ddea29ce7aa3ab583dfe9faa551aa81facf5622a0412b3439a4170dfaa293d417b3de5e80a9b4374e9692e0e5fbc6ecde3bb2d4ff70369e9c55327cbda489daf3382c6c75753fdbb957af0a8652b9d0cb7f69545ca7cd51d43d5b8edb3d2c41a290733b44861537638b7851f62f0dca1044f922cce", @generic="053c551760d00666b805ecc03d7a6e02b0885238c8255a97e19ef0b67a41f297ed8ed4fcd6c8c568d298cc0de5da3bb7ef64eed78cc82e315d69e209ab420e1feab6c2ed61a1f655d86e3cfb5fc8a0dc8ed7609155ec2fe7eb52af5c4cd36376cc192bc6828bc3048e9e6e54c0a787b0dddb66d75d24e6661f876836f2edb95a50219f45192ceb5c49187319e372bf100425a108ec29dfd3f15430555873a5c6c76db0cbf120a5c05b418967aaa94b7117ed292a3f6f73ad1de0cd74984ca54bfc23c8c2a09967a3363c48856c2a91c3f7c630a86a", @typed={0x8, 0x43, @fd=r3}, @typed={0xc, 0xf, @u64=0x54c}]}, 0x244}, {&(0x7f0000000840)={0xc4, 0x1e, 0x408, 0x70bd29, 0x25dfdbff, "", [@nested={0x74, 0x34, [@generic="4c48fa46872d484607a18e18a09693b942f94220a5e022485010542ee21948d6114c8c854c6a93afaa46d94a9348bc54279c1850e6f2e692dec1abf6ac56619e2ef5fb7e84b78119214d1af3503ad285aa9215b41aa1117d5c6fbe4461f2685232e70bf3d1d7c965e702795c9ef4e0"]}, @generic="d7f1a1dbd1bbd321385f6c37aff8f63f999e9f1b41d127f20298d7924111f981205622dab2819b86eb43369a928fe631c6a9328729408aab", @typed={0x8, 0x66, @uid=r4}]}, 0xc4}, {&(0x7f00000009c0)={0x2e8, 0x10, 0x10, 0x70bd27, 0x25dfdbfe, "", [@nested={0x124, 0x38, [@typed={0x8, 0x2a, @uid=r5}, @typed={0x8, 0x70, @ipv4=@multicast1}, @typed={0x14, 0x53, @ipv6=@mcast2}, @generic="644ce4cbb1cdad059113761ba4711dfff45460dcbbc09aedf642a4731c19d9cd6f73450b841d98693d1bf973216fd004c1a6a951f900c140e8d993bee9a26fe5168ad0514438ff8ee4703d701ba40fee1d24e3b9b90c6a52b878f0f0d190766b33fc86729250d2343c924d02f0c18027d4641a53f4cc4e62c7989f917d6aa81b6476258f542301a8538b6d0215e85afced758e5cdb21e07f4e41c8ddd3b78ee773e4102a9db919f81d24b4638cd74be0cfc5e3aa623bfc1a259f1f8f9e2518bc2dca1925666fe654c945bca09455dc7fa49cb803b9e335ffd14c1b1a81637a75c10a4109386495777695b41fac2ba12cd5010c9a", @typed={0x8, 0x2, @u32=0x1000}]}, @generic="ecc2ad4c1ea920d568048a38b4b52b4bb9451ac1ed1c6926ca5d466c435a9a48d7d5f8cc14fd386d016bec43521df0abca5f75c1b440d5e6c11489782d991aad28", @nested={0x170, 0x17, [@typed={0x14, 0x18, @ipv6=@rand_addr="b962acb07c35c57a4d734e6494d91ed1"}, @generic="86c062de9fbb69611fc1c1dfb795a06cc6001ff7630f48f4eb7a177f917810496ac75b237cf0f252f6a4d10f24832f09a817e1c5c82e61cb7395025c69ee5013fda5b7450292efec010310f58b2cf2bf4d5a2b64d78a880735f11641fb6059f939f58d3751d45e6525ed67e4d8e1667dce813d744b45cadcb61f276ff5cc02ff01600440db9cc84bc73d20c73c49edb54de39407ff7e9aba8751c88c20e0bf2945e7b66c0b026460aff747ec378fa341af2296ae3d1ec023e78b90fe68f77160281803cfa150f2d8d26047762cb5d114cb5f76a3947e073ef1491e944e77ad8884", @generic="3bbd8c1d2f52cbf67b05d2e1c2a38110e1b4b6b8155bfe469bdcd761a105dc11803ae86045a6384c3aebece751fa066d62bd54d29f", @generic="002766a52d6caa70f063d089ddc40ed66834e7f560f497ad67b4ef813666e2422bc9931d27ccfa9a7fd498b384eb85f32efa65bc47", @typed={0xc, 0x54, @u64=0x9}]}]}, 0x2e8}, {&(0x7f0000000d00)={0x20c, 0x36, 0xe00, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xfc, 0x96, [@typed={0x18, 0xd, @str='eth0mime_typeppp0\x00'}, @typed={0x8, 0x5c, @fd=r6}, @typed={0xc, 0x3c, @u64=0xda}, @typed={0x8, 0x8, @u32=0x134}, @generic="cc72e62133590c0706e5694f681567225757feeacc6b11974149ab37ef490b3854dfa4f95eaaa47627803a6a4dfceccbe30a5c1a7758ac5c9af9d07a0377686c653a1dcee460775a570fe02c5aa470ba3b57d92aa317f6192d1dc994537b911cc23cef1d5a06c41d1898af66ce11106155933e92a5247eb61b383809625d4d", @typed={0x14, 0x62, @ipv6=@mcast2}, @typed={0x8, 0x57, @pid=r7}, @typed={0x14, 0x6b, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @typed={0xc, 0x1a, @u64=0xb64}, @typed={0x8, 0x26, @u32=0xd2af}]}, @generic="2d5451f492c158902a2c73c1cd80b7c579e07daf46d2e128b0769ec8f242b0a6f6686cb8843f3271e44752b031e00da591d98cc9e70a3ba423c026df33fd0adf1da29c7782cc7347267435a9d052ada76f3051b0100ca4e17fd46b9031fbd1fcff7c69ecf77e258bafcab6a6db882f31b13a347b6e25ba7fb12696ca1dbee15c0a01e05fdec66235d1b301c74c30e24173d0d0268b502338a147ab75206b0e13b2e7ca08c94bc00c51904182aa36c70231c48d15343755e114b505326cd44e9307a8f92ad2f01649766f12afcf5268a37faa4342f22f2de683173b8a3a1453", @generic="74300e2be7e0c524993c5f2a768974bdb55808c41068d4663b4afdfffe338d"]}, 0x20c}, {&(0x7f0000000f40)={0x1180, 0x2a, 0x1, 0x70bd2c, 0x25dfdbff, "", [@nested={0x4, 0x95}, @nested={0x10a4, 0x50, [@typed={0x4, 0x7fffffff}, @generic="93057d2802c722e549d26d3f5ab85452", @generic="ba9999f2846545de91b6a8bd3ea60be6dbf86e57a6b0e573d5358c8a9c318e93b224e69abcc2e8910c065a4b8eb61edcb31503b481add1c5e7968eddbb08adb67f4b56dbf3287e8a3bf0a4b2deedbecca2fe5cbe201ee86d441eb6f5076902e4a015fe1d8f70209151cc3ac011a02c3d4e510b6f155f65efbefba9edc969bfb07fc348f0647f99cb5ad1fe793168a703a8a63a313b376cfe4942e68a42b2d40e90449a841e0aeb4657b58c521c578335096191dbc87bbec4e04f43e8cf7bd05dac198ebb26cb2745cbb22b893c467aa9d792c01f344d85d07b1a3b75be70dc6543f9ca5cbff683343756b7220e529053e3258080eafd18ebc4c3898d85c2cb9e5c55571916770a2bfd6a862c151f4b1657347916a2cb372606422d478630e9bc8cd161da0f2bf017e4b97ddf3ace129c3944fd7363a3cd233530c7812bc1b428bcd0b89f2b0479450d0e0ac3868c5a5a5dee7ba88b0335226cbac40f430fe990c9a27ac6ab189c0df8f3e96c9ce2f13216524f3399fe96da1002f3d18b2e5e0d9a5852eccff425c8248fafabb41699a1f1f3931817f0cfbc04fb18a9ef52d3b6175b8e043a05822d0a9ad3280cece89b11c2092899534141286b6b9285892bd1c911098b069b6bd50d57be55979fce39002cc3d2fe18fa552c4fc96613765ace6878b1345043796cb0403fd4b11d9a53eeb7b680b4c7bb939c0bbcf36d0b528f8771f26dc96b440b9c38aa133ae5278723c176da656fc6127ebabf8bf23b11f4636dc040e2ff2b9ebaa371fc8a270efb3ac57089aed0258efb70ba50a7c006ac5b3a40d1c16aee43a2eaedd814303fdc2b83f29de8fe71b89fc6625c8ee61e15f3f6e1ff0dd0e2c6d9147702b64ef5c48837f92177908c7243847d869d2b76a456fcec0bf58190a2e16b4e8187a90b11239d0dd399a1ba0d5eb36d6ab362cc18ec48ce8640957a0baca8aef697ad1e76b4731aae232272c64bc190db910fd189b10fdf9999bae4930e632c7d32b1c67a23d4801feb6b8a29d0b74488bf57504dfd481d285198e354262ac9faceba7a0374a2aaed6bbd41c2af97cb8187852c2b98893bd48aa00e1349295ed94af0415bf0194dbbe8882f255ae0207a8f0b42d4a1b17d9ca58db592c5a943fbd16de4e886238df48d67cfa6b9f5192f6c668d52f40521307f31055de5b292c9a23714ead1dcbb2acfd955b2062c77729bdfcf9b31829d0815f3296e2326f2787bd9fc76496d0d83ca45f7e808065bfd339f0b8296ea12094c67a7702bc063b854afc7afe8546f50afc2a4c6d2a9ed79433bd2c8e2db3d39d713e6c71b6877f4f70dbc290768f15a8a76b7e6c571b8f106813de8182e39c5c6bf306bb9342e2dbd8341e7db004379982f94f4960134b7ac90bf61d275c150141133afb87f62f99e58f94240906134182154e74f3ed4b84da270915f02a7e4f2eeea4c5d83bfd86e6f213deda1b1d527cce1377fb5bbe36276c20a6cfaa45356545d3d7c1936b81a5d45430065847bb59fe2e1e18e0f57722c3b4d603858de3806d380e7f9cacb4d07b97c0aaa85d6f73bc5a268a2a6ffd5f4c79b5bc349849513e4f2eab13fb257c267f25da85c0278db06a728e2b1e5b38dcd60e40aaeef82f6e4b18c7a03e625429a46470773c0da72f6a2e1e6100b785a5c23e9282630ba9d0547b0c08201a98218fd4cd578263748cb868e7ec505da1623b01fe867fe2a6c3c91fb3c736f40fb45c61f124fb056523273f037bacc58332798e3c70c38fa28d27660e482bc61b8a2e2fee0495af1ce1f926326ea155b6b71e68b0f17a2ca932c0190fd356c656b1825047ab1ca0765b4350eee5e50e73ff8d24dcc3b4a900c60ef9aab32ed9529f1e5dfed198fbfe17d2df4c0a2f50f6aaa428b1e8dd51398f4080caa89dd11ec30b0ef0a25c49b7ac98317b27a51517a325106467f1076064f0fcbc77bf1f01650b7b5a87f320cc5393fd30b2bcebe999608a4da44018f2e6ecb506cde83539875538371fe3c56529c9ea7a6aa704cb3948f4b6837f3f2e0cfdb5574b0b3438d442dffa453f50a104f0c7328321de1791e4a7fe9de8d1961b7efad80f741ded78c6c1e2d6c324422544598573aa60e4b7edcb1321c9c18fec35e3354ef0e7c1fe310ec5318bcfb9fefa41f4d5dc6f8338085bd3c19216dd8963bfadb1ae1231894784e7c69a1188179f17249ef3beda35431533e40788a37d16e6a3c1b1bd32926d4d39146d37a2501f7f1cf63de7e548ac45aa03d2ea1f39136ad56b9414e08adebd3ed53a5f768804347e062d77f827e90b396ef18b285c62606d68ae8c173b81ff3b81ba6dd583dcec487aadd67b220bcb159fcd5876a02b55909c3462b04dc976e2856f9a17110505a60c351b08ee5d68cdc4f37422ad283977171f87706309e39d13e2f2fb882387dfb7385a80a29a0f14929e909ef023abdb3db8ae0496b7bf2dceb56692009e0d15e66aaceac377076cc1cef2828d4e1bf9b3d60e8a991c5e325f3f60e0ea0a54444606869d843cd391283d25901e7a065a24f07491030cc5a3662506a395e24b9bfe1f4f746c8b460b67b940d5513752ee6b82f36336a7444a2ef96cabcabc1a62508734ffbc10a9bdfc940fc4c9b61db748cc496213689a4a4fb2efcc085f55c986c15acbfee38faea8f1d38246a11417c4cc84398a7830a6460f67d67bbd51564267228ba4505ec2e02acb33d48d879f6743f075897ffa9cbe9bcb70498f775fbffd3b1d64668b5fbfe6992957a1cfae43dd53ee03fd5e1b2a0ebb10cadea3611c3c372a95836e4b8e2b5357ec74dfff8ec649bf8c2de49707c36ae422fd545e981992476520f5637de7a85d7eb594cb0e2b9434400bae175087341c5c67c87690b8a147d38dd2e1a19e5d7dee9f619f5f7a3f5ae0543728c088de2a90d5ac897bf3080685ab0b538c37cb221280ba5b000c0cb84b3e7e2cce8bfb7629aabcc698dc77bb40f1ca6603f08948e1adf1696348593320bad5db49cc5e0ebf1bbaf393a84f717a6f4c5bdc5680693fb80d077798f2d41373db4638ca89fb215dd5a30b7396c97cafbc24adceb2e4ed626113080fa9b4e8e199632027dd1b43439a8ddd5f393921cf29fe7f98aaf483b454e2f3d4ddc5ec21a5608a0f5d213d9c2fd5dbbbd58bc70f26cd1ca53707733b4c0c0fa84362ac94bee005fbf0d734c8bd4a9d65416bcb57337464603a0b1f788df092fad9d010ec037ac307fec952846ba0f029248291b8c9631ac4b9d14495deef9618390441c72af6c49489e591667f18c7aa0ae1f4ef78c9b75127de5e4cb0ea4229f7aece34c8ca18f2d9cbb01fa6a0c5bcf6c02f42ab4febc11e78b435a4709ca75700c7af24199574e1635335f2376fe9d5dd6ff45c0e086f5c7c78b565dfe41849528e3012a280e30a265b7b440b16b71d6f6f598f32ff799feb22744c31360ee6cd60b0e9eb1e0a7a7d9107c4b1aa4cff65c582af96073feca6c1510ad34a16c15ca1cc1979a16f64b353d98ddba45e90dcb97bd05e626d9193c241b3e4926fe56ff3f7b56cdc847ba2c4c4818e732223f7b30b67af1ac12fd564cc68249e9deadaebb5f3f2102fd0838a86d84dedde184e46ac4bb3615c31566b1222af8e4407387fefc3e371c5e574aff7f6fb1bcd42de87b002a91227fc765a7165fdef0169870fd976708d22454acba29b48f3e4616ccfc3a836a1b140588154eab4dc59f136cbdd69fbc71fdd7ae08cbc45393dff3a9eaa80d5a7f2e2c002b4d541b1af44b631971d1c96e699fd52254ee1d2fc2ecefd99939eea4c051cb715d65417137f689ddd765dceeaefc985df3ae50dbdba37cf3b26eddb97436c1b927137f9f3702020ab6de952653e9bb27c44ae8b89983bcbee27e5d031d8946b50e10574a722b45084c21918ec58c2f197f4cf683929520fb01c632b8f69691525e7898e2ce71cd95c7e87c6e7dc6328ff4a3583d7d70c9a15b4638acb145447ef69dc12cba3f46ffc0cd5c2be8d6ef28ae80e6b53cfce47a6acd088a8dd58bfebf406a36f2fff73469018a502ff213f17cc0363207d24de435deae0c72d54c349932e43ddb48248c34e6b4ea08a92dcecf5daddf0ec82ef854084c080e12200bf6c526d624230f1b991556a31d8743681ddacfbbc8139a5aa60d47dbeb4e83a030f810bca9afd03c663ac81b407c53c6dc69c110dd3aeab391d621eed63a40f3a4fd79c64ce81e6f344bc52bd0aa6a21dc9e111cfc0e0247cb97658bee1b751285c28c6d4ec266bde80a8d8da68341fbf5bf7bc9206921ddfc7b182b8c77b374dc93ace5f069a12e99b3a6da5fd0a70e9e791c68d92acaf78e285c7b38eadc423d2945c453478c8b38f65d2ef7e683dc5cb1e2ab3985d70404a6f3364524fa0a67f8a7e40c3c3c5fd037955045ba22d317a7728d756e30adaf5aae9d4d863fda73c6a914dfb58eac2357e0ab14ab7dbab97810c5c1c0b2e9486afc78ff6f5b50f9c742ed5395c62b378c24aa605911a07ba881fb040c9e0f462a37d56a832f59c7fccae554391132c2afdf6b2f9809ad55c03657d375ab0ac0d056dc20c891a171292f60244af7c1534e481fc584430bb8f79158b9f5d2c67c8fcbf457d1d5b775f8b90668602773199405ce2ac33dc900a2f14e593d9bfff6d7ae4edf71f49f603731b3bfa946f843d86ac72725d5a7232d6e87896d5c539d766c1b102189cf211d18546adb3580d5234faf64f412a18d26e2de480f066e0a95f97ab83d9c91ecb3fb55d67f8e23259635b8c2743e7a565e7c3a7a2d373e2603f08ce7d60d814cb08a41ff4303f8962cc92c647f15337ecb032784a956e9f35c0391f1582974587ba4ca0508c072b6a595e44eef9809d0df7d7fea370f31f93f16b280eb58d1e0e6df73fafb410811d07b67c87d74ab19fe2ed2b8a21d461070bb52407ccca2df3afd129ff802dff175bb5e864d9760ff1f093d2852424cc99f575731e59039d0deceb57cc8116cdbd332e97c9b39f39145b4821a02bace81606ff11dae646ec2115e9bfd297a013abff2efca3238d00821470feda95dd8cf64c6410267197aa49cf3ba6fa7dc919f63a23dc57a42666d333a15626c2300173baf3dcbda069764199330a0aecdef789722a0fdf9399251687c1bbef75c8b9f3ec1c13075e91b0d03436da31b5bd1f1ccdd4f5d8fe5abfa6918636cc93a9220f2a7021640c2535dc390566f11358fdf508bfb78743586253b26de50dc0cc419a9dbda0949f9ff0278c489bc2697e0698f905c6ca3bf6f79537454e22aa8f162bf6ec8ed0758e771c3120e88464f419df01bd0fdbe37861af000bfd351e14b49ededbbcde19e9028420d5cd3ef7e79d8ee4ab7b143850ce252d9d2c21bd8579613a99c6cabf401ef5c2b08bb2b347c7d60cc9f89275bba2ef9683211a9343ad2909c13b75bd4a9fa38816b59e56bb02717848bc54573d17236f5acb0426e58206b57fa0e9b31b85e2639a3758ae03c951d09d90108a306395668ed6d3caec4c627e60111f29899c9821b3cc505f09f630906e8e7051c0c487b8acdda006ff9475de8ee71e65e06c913bd823fa14a10b670a10cf628e1507a3fa1d86675803f24d9cb4338140622392090fd5ddf00325a4e629d4f47c3505e7eb23eb7f364bde4591c78337a240b1f03947398e6223e1d2cebd248033bd6b375ea97b8df30429da1810c2827328f01bfba06c793c497f0dfd13baa65ea6f70a5c1f794e32177b9efa0cba3091466f2c1c6d3cd0423e928117a711ae0560dff1e2ee3aad97244ed", @typed={0x4, 0x18}, @generic="25af8dee22614fbcd4c90375aabe9c3134507f6fb571557f43af40ec7175c2ae4a2b5254d395478ec2fe12a954a53058619d040f27876577661798f16617e83ee983b816b03449c3a1bb119209e622dec0042a4b0850007fc1a83c36fa74b6920e5cea9bae68b44ccc39042920ef62a2614b65ad6de6fcc046690d6f42873364f8d64779c93d71a6"]}, @typed={0xc, 0x92, @u64}, @typed={0x60, 0x6b, @binary="12c5558ac2a9790718261f753867003cd2784330c42e02120b56989943cc59a9ee6e0f93289cfa815ead58cb289e0ae3d458dd40ccbadb85a465ede7342f7d1d2cc38a074a4c0d6e63798eb96616a8fe76f586a996da677972c8"}, @nested={0x5c, 0x5b, [@generic="b0cb53dce42bf5eadf", @typed={0x8, 0x1c, @uid=r8}, @generic="160a229a3720f9f76262958912af8c4d1a455dd5eec17e89487e1e291b647fd9add5c269a4984ee31fa55f80ca020f4b2210791fccce0c09f3bdd93d7d", @typed={0x4, 0x41}, @typed={0x4, 0x3a}]}]}, 0x1180}, {&(0x7f0000002100)={0x17f0, 0x20, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1380, 0x8f, [@generic="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", @generic, @generic="9a6489dcc78c3d44550da9e7ef6ea760e8803d5aa643d8c78e1c2c217cd98adc1039470e48067fac0215a843553bc88648a003865bdfa531acae20788908e968b2d715bdced2f571016e00e60eb0d4416f68cdf745b9d53dfa721b9ac65bdd7a016b92a6e88fea971011dd3d1699c90e10f8893f1778426a9d635ae070ad6086076ebb5300b9a7e6de357796a10a2441b6c7b43fbb5478dd831aa81636cd00c6e9e919661b482fb55a7c8c633920b5dc9f", @typed={0x64, 0x47, @binary="1f801c060e8e08e64e0b430f8ae180556d47fc942544ad6185757e81a09a8221a6709d7da5d064e671d28d0975f8c79e8361cf3a5997d2eec0abdc4491fe9f6976b3756b1fff5e1caf9eb658ecf2c7353eb415ea07b1e5b15f8c562fdf1b1dec"}, @generic="e6246ed055dfc318762c2f91e462e468d22dc113fb797f0ded42cdfa6de2e9c74886d3ab32d85b8875fa6b32c422682155ef3c94b784201ba5327c94b768cd9d30ccaab124e903a67ec52fa2d3c28ee1c9216cb25313b52becac0e3fdf7dd68a915a7c237d0630fcb0f246d93495cc1c7baa441d76b0b634810d349c73710fcf2b9aeb98a5fbf2a4d2", @generic="40ea18480a4e621e7d29ead2bd4cfa8b7f936599f0d2d218ff2fbe9b7695e30d31e2d7886c748b0885bd4e9eb1790484f7dad1e9bc00144b1f28ac7c37b26e8a08842d901c2abde1516256619060e7a8907d3bab31f832a3c281ad35f824e843", @generic="1886787825d4118de39707d4f38103fbe28185774b0d3248f9c4413b8db825e2ecf9f6f47ef86d099147a3906a631c77206875853278c60d38ab37cf0c47826109fc6fa82533c5f99a4845b4d8e788871abbba79195b43c26471b3db648326102d86b10a045868c2ca359af1501eac4d6af203687bfb5a93612e025451941a465dd2315e037f5cab62a85f13be623d7f34ce52", @generic="48a52735f00d1aaa2445513e9468e2dd5ed1309f459979269cc8924975e109070c1482e3ce2937a2185c73aae95c112f78722839daefc37edf425d8fdb2fdf083e65357ce7f09a2602fe139f83b5530673a18900515b84c0d685f47a064423fc9a910cbc0ded4ae1b033184acefd38b6732a6c5ddc13486210769a2615805e73df549d6e78882a60c8009008c532d8d083b1ca995fc45d3329c35f92c95adbf0cafb1207406b2eedc4ecb279004773f323a251caaad73882faf7cd29fccdc4d4d17c52863a0de9179b9e71226d9f2b78e89af2448cd1c80949b0f751f48160e41b8039f7642cd6b303151f"]}, @nested={0x440, 0x4e, [@generic="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", @generic="ce8ff32a237e951de68f2a02b313b9730943459587defe8ccb1156d6752d6710ed795f67e5198e9d2442bb4970d6ff351608ec94a5482728ed9df48eac3beae71f051988206f951c312390b11e67028343a223fcd675202c2a8b36c3c11d822e3d1561d880ca10c7d6e3ee35e6a8d74fcc2e8952880fbe156df9b92129b8b8a157d938386b670523", @typed={0x4, 0x39}, @typed={0x14, 0x3a, @ipv6=@mcast1}, @typed={0x18, 0x55, @str='}vboxnet1em1\xa1\\wlan1\x00'}, @generic="73a846ce53e8986038caaddf40bbeca8e45a7d1f0db67789fb507908b03994c60094812aff248ce2858f57eda386e5297289300f8b7bbff8dd4db3b14cc87348216344c801b40848b7bc54e0dd9d7fdd90d9b3cc547ebe91ab8b3d3d63b1dacc50a0e3d228fc6875fa0415fed907872ec89d2b563bb562d0fd20529c8cf73ca888d2b975c7a39f16bed2092fa8b823ac81279ef732c363ff467720058bba1bfdbc06661ce51d3114061de0c0ada5d5f73f5cef5380405b5c1550a74bc8a6f803a139dbbe711f879f0e938eb5c91f", @generic="04e9066298432b8aa3b32828891d19204674eafebac72d165db4202c9efdb7e321e4b76839ab716c1a5a532df3dc5ca0bf11de150edeed75fc83c0f798120b90c08fb31cac9f31cd1611f8032bd8d3a64cd08cbf0ff661cd26", @generic="bfecb1cb1c56fe3016978a6289c109aa34a2f67b720630f80983a9c4bfaf6d91d6181ef45faa715374a3f04463e5c4fe874923e786790c67ca30abf93da250bba852fb6d260298e582579603e717931dd0a140db265e0db56f357c5beb0c8946793eaf2255c0663da42c6ea5b1fd2cae3ed6093bab29520beb366d428b0da8e48946e60e12dcdb494c2e1e8e6685c5d93b43fa3afba55f298075726501e44c93efcee6a096c887f95b07a6a5281bae255f3c4f51e9b5076e641c87ceae9f899d49b547a55709360781e90543773634ea3c66d39ad256cb5f408977a0f56ce362eb08495659e13b96cdb036", @generic="ef28fdbcf9385e21f9043a2e8d6c5250cded107206e81c276fd53a01facaf194213aa9fd7ed70f9e4df91e1ea5aee48c075aea7a", @generic="140d3033e20f54662704a178a58cc63a2dfe5aecd5dcbaf1422580eb2f2e7e65a586c3de532cfb7246528a4f6f5390ee5101bd7264dd265bd5bb1a02fa13c90b36"]}, @nested={0xc, 0x65, [@typed={0x8, 0x83, @fd=r9}]}, @typed={0x14, 0x88, @ipv6=@rand_addr="be559686f2e505d8b2c12823a3645fcd"}]}, 0x17f0}], 0x7, &(0x7f0000003980)}, 0x4000) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000003980)={0x0, 0x0, 0x7, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ptrace$cont(0x3f, r7, 0x0, 0x1) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 236.838097] binder: 7783:7785 ioctl c0306201 20008fd0 returned -22 [ 236.861912] binder: 7794:7797 BC_FREE_BUFFER u0000000000000000 no match [ 236.862302] binder: release 7794:7797 transaction 517 out, still active [ 236.862306] binder: undelivered TRANSACTION_COMPLETE [ 236.886992] binder: send failed reply for transaction 517, target dead 17:25:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000001040)={0x0, 0xfb, 0x1015, 0x1, 0x9, "16cc5a883213ec175bfb78f692ba92d2", "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"}, 0x1015, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffdde, 0x0, &(0x7f00000000c0), 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 236.967392] binder: 7809:7811 BC_FREE_BUFFER u0000000000000000 no match [ 236.985792] binder: BINDER_SET_CONTEXT_MGR already set [ 236.985802] binder: 7815:7817 ioctl 40046207 0 returned -16 [ 237.017039] binder: release 7809:7811 transaction 519 out, still active [ 237.025053] binder: undelivered TRANSACTION_COMPLETE [ 237.038002] binder: 7815:7821 ioctl c0306201 20000100 returned -14 [ 237.038071] binder: 7815:7821 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 237.056366] binder: send failed reply for transaction 519, target dead [ 237.057639] binder: 7815:7817 tried to acquire reference to desc 0, got 1 instead [ 237.057961] binder: 7815:7817 unknown command 536872576 [ 237.057969] binder: 7815:7817 ioctl c0306201 20008fd0 returned -22 [ 237.103979] binder: 7815:7822 ioctl c0306201 20000100 returned -14 17:25:54 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x8, &(0x7f0000000140)=']]nodev\x00', r2}, 0x30) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x3) 17:25:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:25:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x2b, 0x0, &(0x7f0000000200)="9c0ab31d92b08e1f6fbdbc567d5ad6e6dc422f13324f692200ae50dbbf2a997febbb4803080e5169a95618903da69475209e241976271d1daeccc1bf4737f9fd626218edab407b071b587bf66a6420d8a4037972aac56bae53cfc5d1ba766bd0a2d136b78cbf9360cc83f52d8522c7ccd1aa367480771d3db0a5cbfd300a864e7998d5840b240cb56a215d4efb34227c6518ae67c1ea37d8b636cca06499fbf8fd1b6bc4d3377a9362abe2b3c91aa3852bb3ece05d842bcce9a9aa675514e6d43b11c06526ff3c5dfba244b546af3c6a7c2a8d065e0a99848d9e70749b2709d4cdfd3b1772589d8692fe3fb6f3174c803ecafb8532"}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000300)=[r2]) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000005c0)=0x2) fcntl$setlease(r1, 0x400, 0x1) clone(0x70024180, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="22002abd7000fedbdf250200000038000300080007004e2400000800080006000000080003000000000014000600ff020000000000000000000000000001080008000800000070000300080001000200000008000300010000001400020079616d30000000000000000000000000080004caded55b3f000101000008000400f10c000008000400f7ff0000140002006873723000000000000000000000000014000600fe8000000000000000000000000000220800030002000000080006"], 0xc4}, 0x1, 0x0, 0x0, 0x40040}, 0x40080) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1) syz_read_part_table(0x8000, 0x7, &(0x7f0000000500)=[{&(0x7f00000000c0)="76209bd18419acbac3bd898bcb872f49c5103b37812f6fa14432f67206504a08ac5e9e41e4ea827fbaab7ac048345708177676db06023d534769a042ecd3013fa7ee0c9698b48aa055852be7bd3b82572455a8e9111f1cba6ea1d6ea4f57802d03a0ac94d524574190404bb812ad62c412e7e50488", 0x75, 0x3}, {&(0x7f0000000140)="d3e8aecf3366d0a919c20c52d0eb57930ea712a2aa8f8eb3fcfd270bfbb4f68726470f1c30802cec99", 0x29, 0x8}, {&(0x7f00000001c0)="b6f7cc45e70441c7501c58adbc946e4ff284d88689f64399d756c35fa7f1a2bec79f97b40a13e6a7bfda0ff6d94a0e33e6a036f9ababf3efbf696acf07b69bdd6b61d61b7293f97d1da5d4f79ff0ecbc325e0c9bef2288353f7b9142", 0x5c, 0x80}, {&(0x7f0000000240)="e866ee5cd488ff4ab20e8a483dec0c6f20e5f652832a826a5068e0fb7bb85dd3bafaf6949eabe29221c93cdc8d203a33110851a6331ea43637e11f13b650e43728b77df0560a2127486a30bf6ffdaa7bc8b908b772882852d3f3b7ffdba9f3bfbb3e1dd8a5bdadfbea4bdbe3ac1f283d", 0x70, 0xfffffffffffffffd}, {&(0x7f00000002c0)="6cdf9af3a54d11cd221afbedd2", 0xd, 0xd303}, {&(0x7f0000000300)="cec6718dbc31cd3c85dacd92e1e5ade478c16175f594ad03ce8d06b8d4648b0e3d673fd796466eaaddf9f2e13bea91b7a971bdf0e18157ac05f8c9e76507ae0c8925a767f73bf095961115b98b31c0b9b4e2adeaf5b086a228d6c5f97a822d284abb181ad1290a44f6de36672c7baf8ebc0cce86973967bd1e5bf87a78ffbd80f66d9700d4d5c36f319f91a39d3ab373578564e60f7da0093b8b97d40799e52f4c362824ff7761a151fa3b729bc3518043d098b3b98521929333c167142bc604d3f93c969c", 0xc5, 0x57}, {&(0x7f0000000400)="bbb6ff3a382613cd5b4946f9084ae455525dfd23075b24785975ab94103bb4369fb39d45aca926b172aeaecc6ef5e4f400dab9b3b078725f04cbc41b82699f62566eb7d890aa779f6f12702925130fe84e910c9685cd3725ed4f87a0b41a987773f441f09d232dc36c5d06cddb900a1ef887538a80fc34514203980671f907b23d9a3c21a48e0336a58c1d375dc9a86141e5a17c52ed764dfb56858cbcc6c0693269120b34737ee59eb345d1bb40b205a5d155e3244af7e15960dc2398112d0ad067", 0xc2, 0x7f}]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x1ff, 0x3ff, 0xfffffffffffffffa}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 17:25:54 executing program 4: pipe(&(0x7f0000001500)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) futimesat(r0, &(0x7f0000001540)='./file0\x00', &(0x7f00000015c0)={{r1, r2/1000+30000}, {0x77359400}}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) writev(r4, &(0x7f0000001480)=[{&(0x7f0000000100)="483d14263d9bdad7a274985bc474d913720470d606fe0c6501526739329ed9ed65a3bcf854c3810814cf4085769932df5b05b9f85d5b1844026dc36ecc1acac136af8136a4f85a579e713e842184ea79252160aabfb2d6ed0b2b49163200e1da45c55c3f3bcf0fa8fcb6305e428ce0320810e557c5db3525b6c795889c9240ab77eb06d458fd6ad88b6bfc2dbc55ad28665c4704ee42d8792fb0c552690596518fab8286a6c24f7e250ca5b7571b134a3e25491fba5605b07c84db04117b5cdf0c5bf04eaf85c6e552d59febcd9b3b09ecfc56a55bb36a21c06cddcf158bad6cfbd6a583810552c962f245f6d0b6254d244ff654", 0xf4}, {&(0x7f0000000200)="4bcce20edfd2cc3ee139890b0893ab7be7b0dac7a60b4efb24784085bab8a67c81b8fcf9f785cdd8647a6e34e338bcf7bf1f48ec6cef7639b65107471495cfde03c07355ecf560b9067440e4aaae4ef1aa69b17c082c89ca5e324cf3ef302c44a2bd15c2398eadf2fdd66089b7b4b85739617bd278ce4fc0662af9b5f2168032ae07c9b04d480fd1a7df27", 0x8b}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="5bd2a5842c42160592101d46eb543a92c6225a2df7ceb727dc3618849409db7f", 0x20}, {&(0x7f0000001300)="0b78a0336a32044799adbd8b92251ba2d8f300bd4a61bfe17a20114bafd55994500727bc198f6bf792649a60059f32f21219b3a27e0f3d721095f7eb35b2ed3deab6789d4833892a643315b502e12c0c6078114aec42b5f006e81f7ab25b42421b934c413a7e495c32905e21890963de5ec242c874e56b3784cc5fdb27718b8c22566b42529de80de1b26d675a09355c6a3047f599311748ca2e8f6cacfc876b33ccc2dd281cf2051d", 0xa9}, {&(0x7f00000013c0)="64fa61fd24d5b2f95ab4e51e21954a9707db6c58cdfae55f812a38062829b368a542ccebda00ef6a4c6a25b1946c33b452d4113951036663ffb189341a84f3825b0960949b1b9bef3d9c03272d", 0x4d}, {&(0x7f0000001440)="722f4b2e7a07a014093bc8b57ff82a93e9aa752b683206f50e", 0x19}], 0x7) pipe2(&(0x7f0000000080), 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) 17:25:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:25:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 239.619991] binder: 7843:7849 BC_FREE_BUFFER u0000000000000000 no match [ 239.631002] binder: BINDER_SET_CONTEXT_MGR already set [ 239.631019] binder: 7845:7851 ioctl 40046207 0 returned -16 [ 239.660154] binder: release 7843:7849 transaction 524 out, still active 17:25:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 239.674325] binder: undelivered TRANSACTION_COMPLETE [ 239.683315] binder: send failed reply for transaction 524, target dead [ 239.692859] binder: 7845:7851 ioctl c0306201 20000100 returned -14 [ 239.705950] binder: 7845:7851 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:25:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1510400829ae3359, 0x0, &(0x7f0000000400)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r3}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ptr={0x70742a85, 0x2, &(0x7f0000000300), 0x0, 0x2, 0x11}, @fda={0x66646185, 0x2, 0x3, 0xc}], &(0x7f00000003c0)=[0x48, 0x20, 0x38, 0x38]}}, @free_buffer={0x40086303, r3}], 0xffffffffffffffad, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x3ff, 0x3f, 0x6, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 239.735854] binder: BINDER_SET_CONTEXT_MGR already set [ 239.745014] binder: 7866:7869 ioctl 40046207 0 returned -16 [ 239.745067] binder: undelivered death notification, 0000000000000000 [ 239.781295] binder: 7866:7869 transaction failed 29189/-22, size 24-0 line 3118 [ 239.802394] binder: 7866:7869 BC_FREE_BUFFER u0000000000000000 no match [ 239.814556] binder: BINDER_SET_CONTEXT_MGR already set [ 239.814567] binder: 7876:7880 ioctl 40046207 0 returned -16 [ 239.841811] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.853306] binder: 7876:7880 tried to acquire reference to desc 0, got 1 instead [ 239.866170] binder: BINDER_SET_CONTEXT_MGR already set [ 239.866180] binder: 7876:7881 ioctl 40046207 0 returned -16 [ 239.872129] binder: 7876:7885 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 239.889351] binder: undelivered death notification, 0000000000000000 [ 239.896547] binder: undelivered death notification, 0000000000000000 17:25:56 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5f, 0x80, 0xffff, 0x1, 0x0, 0x1, 0x8000, 0x5, 0x5, 0x3ff, 0x5, 0xfb, 0x401, 0x9, 0x3, 0x20, 0x3, 0x2, 0x3000000000, 0x5, 0x1, 0x849, 0x0, 0x5, 0x6d694316, 0x9, 0x7fff, 0x0, 0x0, 0x17, 0x100, 0x1000, 0x2, 0x800, 0x6, 0x7ff, 0x0, 0x3ff, 0x4, @perf_config_ext={0x3}, 0x0, 0xfffffffffffff800, 0x6, 0x0, 0x7fffffff, 0x4, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x1) 17:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1510400829ae3359, 0x0, &(0x7f0000000400)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r3}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ptr={0x70742a85, 0x2, &(0x7f0000000300), 0x0, 0x2, 0x11}, @fda={0x66646185, 0x2, 0x3, 0xc}], &(0x7f00000003c0)=[0x48, 0x20, 0x38, 0x38]}}, @free_buffer={0x40086303, r3}], 0xffffffffffffffad, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x3ff, 0x3f, 0x6, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@generic, &(0x7f0000000180)=0x80, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r3, 0x700, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="d0872e32728aa00eb5dfe962c7ef4fb1"}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x39649afc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffffd6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe3e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close(r0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200cc0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000140)={0xa, 0xa, 0x6}, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r5 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x1d, 0x3, 0x200000, 0xfff, 0x6, 0x80, 0xffffffff}}, 0x50) 17:25:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@local, r2}, 0x14) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 241.770080] binder: 7902:7905 tried to acquire reference to desc 0, got 1 instead [ 241.774804] binder: BINDER_SET_CONTEXT_MGR already set [ 241.774813] binder: 7903:7904 ioctl 40046207 0 returned -16 [ 241.774936] binder_alloc: 7902: binder_alloc_buf, no vma [ 241.774954] binder: 7903:7904 transaction failed 29189/-3, size 24-0 line 3255 17:25:56 executing program 4: clone(0x700240fd, 0x0, 0x0, 0x0, 0x0) 17:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1510400829ae3359, 0x0, &(0x7f0000000400)=[@acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r3}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ptr={0x70742a85, 0x2, &(0x7f0000000300), 0x0, 0x2, 0x11}, @fda={0x66646185, 0x2, 0x3, 0xc}], &(0x7f00000003c0)=[0x48, 0x20, 0x38, 0x38]}}, @free_buffer={0x40086303, r3}], 0xffffffffffffffad, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x3ff, 0x3f, 0x6, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c09000000000000000000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 241.775104] binder: 7903:7904 BC_FREE_BUFFER u0000000000000000 no match [ 241.775479] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.790977] binder: 7902:7916 BC_REQUEST_DEATH_NOTIFICATION death notification already set 17:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+30000}, {0x0, 0x2710}}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+30000}, {0x0, 0x2710}}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 241.906661] binder: 7923:7929 BC_FREE_BUFFER u0000000000000000 no match [ 241.917766] binder: BINDER_SET_CONTEXT_MGR already set [ 241.917777] binder: 7925:7930 ioctl 40046207 0 returned -16 [ 241.933039] binder: release 7923:7929 transaction 538 out, still active [ 241.943013] binder: undelivered TRANSACTION_COMPLETE [ 241.952158] binder: 7925:7930 unknown command 151806735 [ 241.958238] binder: 7925:7930 ioctl c0306201 20000100 returned -22 [ 241.965234] binder: send failed reply for transaction 538, target dead [ 241.977394] binder: 7935:7936 transaction failed 29189/-22, size 24-0 line 3118 [ 241.977913] binder: 7935:7936 BC_FREE_BUFFER u0000000000000000 no match [ 241.978254] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.012002] binder: 7925:7930 tried to acquire reference to desc 0, got 1 instead [ 242.021226] binder: 7925:7940 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 242.039372] binder: 7925:7939 unknown command 151806735 [ 242.039493] binder: 7925:7940 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 242.054039] binder: 7925:7939 ioctl c0306201 20000100 returned -22 17:25:58 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$getown(r0, 0x9) getpgrp(r1) getpgrp(r1) 17:25:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+30000}, {0x0, 0x2710}}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x578b6204}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c4000c9740000000000000000000000"], 0x19f, 0x0, 0x0}) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 244.124876] binder: 7953:7955 BC_CLEAR_DEATH_NOTIFICATION invalid ref 7653632 [ 244.125084] binder: 7952:7959 transaction failed 29189/-22, size 24-0 line 3118 [ 244.125198] binder: 7952:7959 BC_FREE_BUFFER u0000000000000000 no match [ 244.125601] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.158991] binder: 7953:7955 ioctl c0306201 20000100 returned -14 17:25:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 244.168841] binder: 7953:7955 ioctl 40045201 20000040 returned -22 [ 244.179356] binder: 7953:7955 tried to acquire reference to desc 0, got 1 instead [ 244.188795] binder: 7953:7965 unknown command 536872576 [ 244.188803] binder: 7953:7965 ioctl c0306201 20008fd0 returned -22 [ 244.213173] binder: 7953:7965 ioctl 40045201 20000040 returned -22 17:25:58 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='wlan0%eth1/\x00', 0xc, 0x1) 17:25:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0xaad9, 0x3}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:25:59 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:25:59 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x4000, 0x0) write$P9_RLOCK(r0, &(0x7f0000000840)={0x8, 0x35, 0x2}, 0x8) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0x0, 0x148, 0x148, 0x148, 0x148, 0x358, 0x358, 0x358, 0x358, 0x358, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x7, 0x3ff}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x42677914, 0x9, 0x1, 0x2, 0x3}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3, 0x1}, {0xffc, 0x0, 0x80}, 0x4, 0x40}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ppoll(&(0x7f0000000740)=[{r2, 0x81}, {r1, 0x100}, {r1, 0x2}, {r1, 0x310}, {r1, 0x8}, {r2, 0x161a}, {r2, 0x4250}, {r1, 0x220}, {r1, 0x90}], 0x9, &(0x7f0000000200), &(0x7f00000007c0)={0x4a2d}, 0x8) r3 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="98ec5804f336108fad3116b917680a5a91ceb6b53b7d6befcea765928775bf1cf8f5cfa31bbda3542716ef336c58964dd4a6e672894e77accb38a2e33cd2c26e692ad2bd5123bcdea93d211776ee209ade84c6b4979a576ccd45db780c2b74c3c74fa8129e56f9e48553635bd824b0079f0cac410e43906acc039183e8a8a5e2bb03fa28d2139f", 0x87, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', &(0x7f00000001c0)) clone(0x1fffc, 0x0, 0x0, 0x0, 0x0) [ 244.306732] binder: 7973:7975 tried to acquire reference to desc 0, got 1 instead 17:25:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 244.315846] binder_alloc: 7973: binder_alloc_buf, no vma [ 244.315865] binder: 7976:7977 transaction failed 29189/-3, size 24-0 line 3255 [ 244.315972] binder: 7976:7977 BC_FREE_BUFFER u0000000000000000 no match [ 244.316330] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.326085] binder: 7973:7984 unknown command 536872576 [ 244.326095] binder: 7973:7984 ioctl c0306201 20008fd0 returned -22 [ 244.397468] binder: 7988:7993 BC_FREE_BUFFER u0000000000000000 no match 17:26:01 executing program 5: gettid() clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) r2 = getpgrp(r1) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) 17:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:01 executing program 4: clone(0x800c, 0x0, 0x0, 0x0, 0x0) 17:26:01 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0xddb2, 0x2, 0xfffffffffffff514, 0x4}, 'syz0\x00', 0x22}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:01 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x3ff}}, 0x18) 17:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) openat(r2, &(0x7f0000000040)='./file0\x00', 0x202, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$void(r0, 0xc0045c78) 17:26:01 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 246.625657] binder: 8011:8017 BC_FREE_BUFFER u0000000000000000 no match [ 246.627408] binder: BINDER_SET_CONTEXT_MGR already set [ 246.627417] binder: 8010:8016 ioctl 40046207 0 returned -16 17:26:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) openat(r2, &(0x7f0000000040)='./file0\x00', 0x202, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$void(r0, 0xc0045c78) [ 246.674112] binder: 8010:8016 ioctl c0306201 20000100 returned -14 [ 246.683791] binder: 8010:8016 tried to acquire reference to desc 0, got 1 instead [ 246.694906] binder: 8026:8027 BC_FREE_BUFFER u0000000000000000 no match 17:26:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 246.699413] binder: 8010:8033 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 246.699429] binder: 8010:8033 ioctl c0306201 20000100 returned -14 [ 246.730004] binder: 8036:8037 ioctl c0306201 0 returned -14 [ 246.730098] binder: 8036:8037 BC_FREE_BUFFER u0000000000000000 no match [ 246.763209] binder: 8040:8041 ioctl c0306201 0 returned -14 [ 246.763302] binder: 8040:8041 BC_FREE_BUFFER u0000000000000000 no match [ 246.780738] binder: undelivered death notification, 0000000000000000 17:26:03 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:26:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) openat(r2, &(0x7f0000000040)='./file0\x00', 0x202, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$void(r0, 0xc0045c78) 17:26:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x220000, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/67) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 17:26:03 executing program 5: clone(0x40000700240ff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000500)=0x6) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000440)={0x67, 0x7d, 0x2, {{0x0, 0x49, 0x3, 0x80, {0x1, 0x3, 0x2}, 0x4010000, 0x200, 0xfffffffffe6d732b, 0x3ea3, 0x9, '/dev/ion\x00', 0x9, '/dev/ion\x00', 0x0, '', 0x4, 'nat\x00'}, 0x9, '/dev/ion\x00', r2, r3, r4}}, 0x67) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7f) write$P9_RLERROR(r5, &(0x7f0000000100)={0x12, 0x7, 0x2, {0x9, '/dev/ion\x00'}}, 0x12) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x7a, "2bb17b5dace3a928d8f2336e2d015c45adcdd4ce3024d8e6524dae20b27a1bba55ccc7ac4a638356664747439360a4c30f4043ba60342a3eb08c330db5401ee920367cb86855e318839cadf69354775706c8ec80c999fbcd7b270c25dcc5a45b85e0682b3ea0a36df683f752ad076a72d6b19e0c4a791df183b6"}, &(0x7f0000000200)=0x9e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18000, 0x110) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) [ 249.112781] binder: 8061:8065 ioctl c0306201 20008fd0 returned -14 [ 249.135776] binder: 8061:8065 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 55c1cdd333063edf != 0000000000000000 [ 249.155510] binder: 8061:8065 ioctl c0306201 20000100 returned -14 [ 249.161983] binder: 8060:8072 ioctl c0306201 0 returned -14 [ 249.162612] binder: 8060:8072 BC_FREE_BUFFER u0000000000000000 no match [ 249.177860] binder: 8061:8065 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 249.190902] binder: 8061:8065 tried to acquire reference to desc 0, got 1 instead [ 249.199504] binder: 8061:8076 BC_REQUEST_DEATH_NOTIFICATION death notification already set 17:26:03 executing program 4: clone(0x1800005, 0x0, 0x0, 0x0, 0x0) 17:26:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5a) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x402000, 0x100) renameat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 249.199531] binder: 8061:8076 ioctl c0306201 20008fd0 returned -14 [ 249.201722] binder: 8061:8077 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 55c1cdd333063edf != 0000000000000000 [ 249.201741] binder: 8061:8077 ioctl c0306201 20000100 returned -14 [ 249.201790] binder: 8061:8079 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 17:26:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 249.267280] binder: 8084:8085 ioctl c0306201 20000100 returned -14 [ 249.276938] binder: 8084:8088 tried to acquire reference to desc 0, got 1 instead [ 249.287034] binder: BINDER_SET_CONTEXT_MGR already set 17:26:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x81, {{0xa, 0x4e20, 0x42426e8f, @mcast2, 0x200000000005}}}, 0x88) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000340)={0xffffffff, {{0xa, 0x4e20, 0xc43e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}}}, 0x88) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x8000, 0x4) accept4(r0, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x1a}, @ipv4={[], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101, 0xffffffffffffd8d9, 0x6, 0x500, 0x1d, 0x4, r2}) clone(0x210000, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 17:26:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 249.287044] binder: 8081:8083 ioctl 40046207 0 returned -16 [ 249.287535] binder: 8081:8083 BC_FREE_BUFFER u0000000000000000 no match [ 249.311157] binder: BINDER_SET_CONTEXT_MGR already set [ 249.311166] binder: 8092:8094 ioctl 40046207 0 returned -16 17:26:04 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\x00') r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/127) ioctl$BLKRRPART(r0, 0x125f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 249.311523] binder: 8092:8094 BC_FREE_BUFFER u0000000000000000 no match [ 249.338071] binder: 8084:8096 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 249.338632] binder: 8084:8085 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 249.338650] binder: 8084:8085 ioctl c0306201 20000100 returned -14 [ 249.338700] binder: 8084:8096 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 249.372331] binder: 8099:8101 BC_FREE_BUFFER u0000000000000000 no match [ 249.439508] binder: 8106:8110 BC_FREE_BUFFER u0000000000000000 no match [ 249.465499] binder: undelivered death notification, 0000000000000000 17:26:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x1, 0x0, 0x1) 17:26:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80000, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x16) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xfffffffffffffea3) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000009c00)={r3, 0x1, 0x6, @random="303f0d1a35fd"}, 0x10) 17:26:05 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x80800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 17:26:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:05 executing program 5: clone(0x10100001, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x600200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x5, 0x0, 0x3000}, 0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) 17:26:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xfd42afba051b66db}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x254, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30bf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x664}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @local, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @loopback, 0x3}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x938}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8d73}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c230000d496208cd36d785bdf325631272cb66660bed2909112608d0552102bc0b4690a979ae53ebc00000054409188a3"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c40000000000000000000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xfffff, 0x0, 0x0, 0x0, 0x0) [ 250.671535] binder: BINDER_SET_CONTEXT_MGR already set [ 250.678055] binder: 8129:8133 ioctl 40046207 0 returned -16 [ 250.688468] binder: 8129:8133 BC_FREE_BUFFER u0000000000000000 no match [ 250.711142] binder: 8128:8134 unknown command 8972 17:26:05 executing program 5: statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/232) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x2, 0x390, 0x1, 0x0, [0x0]}}, 0x29) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 250.716343] binder: 8128:8134 ioctl c0306201 2000dfd0 returned -22 17:26:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8000, 0xfff, 0x2, 0x0, 0x1, 0x10000, 0x2}, 0x1c) clone(0x8000, 0x0, 0x0, 0x0, 0x0) [ 250.742231] binder: 8128:8134 ioctl c0306201 20000100 returned -14 [ 250.756303] binder: 8149:8152 BC_FREE_BUFFER u0000000000000000 no match [ 250.784514] binder: 8128:8134 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 250.786617] binder: 8155:8157 BC_FREE_BUFFER u0000000000000000 no match [ 250.786995] binder: release 8155:8157 transaction 576 out, still active [ 250.786999] binder: undelivered TRANSACTION_COMPLETE [ 250.790458] binder: send failed reply for transaction 576, target dead [ 250.818667] binder: release 8160:8161 transaction 578 out, still active [ 250.822563] binder: BINDER_SET_CONTEXT_MGR already set [ 250.822572] binder: 8128:8134 ioctl 40046207 0 returned -16 [ 250.841827] binder: undelivered TRANSACTION_COMPLETE [ 250.853217] binder: send failed reply for transaction 578, target dead [ 250.858111] binder: 8128:8134 unknown command 8972 [ 250.858121] binder: 8128:8134 ioctl c0306201 2000dfd0 returned -22 [ 250.858261] binder: 8128:8134 ioctl c0306201 20000100 returned -14 [ 250.858292] binder: 8128:8162 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 250.902738] binder: undelivered death notification, 0000000000000000 [ 250.909827] binder: undelivered death notification, 0000000000000000 17:26:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) 17:26:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 17:26:07 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x74000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:07 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 17:26:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10040, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xc}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:07 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x40) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) 17:26:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 253.180796] binder: release 8182:8183 transaction 580 out, still active [ 253.189125] binder: undelivered TRANSACTION_COMPLETE [ 253.196905] binder: send failed reply for transaction 580, target dead 17:26:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 17:26:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x180, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x809c0000, 0x0, 0x0, 0x0, 0x0) 17:26:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xfffffe3c, 0x0, &(0x7f0000000200), 0x536, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='bcsf0\x00', 0x2, 0x6, 0x723da257}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f630c403e3a6b2df941e86e8e07000000000000000000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 253.250407] binder: release 8188:8194 transaction 582 out, still active [ 253.267084] binder: undelivered TRANSACTION_COMPLETE [ 253.272817] binder: 8187:8204 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:26:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r2, 0x0, 0x0, 0x7f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) [ 253.300051] binder: send failed reply for transaction 582, target dead [ 253.316002] binder: 8210:8212 unknown command 0 [ 253.316011] binder: 8210:8212 ioctl c0306201 20008fd0 returned -22 [ 253.316089] binder: 8210:8212 unknown command 0 17:26:08 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 253.316097] binder: 8210:8212 ioctl c0306201 2000dfd0 returned -22 [ 253.316597] binder: 8210:8212 ioctl 890c 20000140 returned -22 [ 253.316658] binder: 8210:8212 BC_CLEAR_DEATH_NOTIFICATION invalid ref 762001982 [ 253.316673] binder: 8210:8212 ioctl c0306201 20000100 returned -14 [ 253.316755] binder: 8210:8212 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 253.317109] binder: BINDER_SET_CONTEXT_MGR already set [ 253.317117] binder: 8210:8212 ioctl 40046207 0 returned -16 [ 253.317401] binder: 8210:8212 BC_CLEAR_DEATH_NOTIFICATION invalid ref 762001982 [ 253.317414] binder: 8210:8212 unknown command 0 [ 253.317443] binder: 8210:8212 ioctl c0306201 20008fd0 returned -22 [ 253.317795] binder: 8210:8213 unknown command 0 [ 253.317803] binder: 8210:8213 ioctl c0306201 2000dfd0 returned -22 [ 253.317900] binder: 8210:8213 ioctl 890c 20000140 returned -22 [ 253.317971] binder: 8210:8212 BC_CLEAR_DEATH_NOTIFICATION invalid ref 762001982 [ 253.317985] binder: 8210:8212 ioctl c0306201 20000100 returned -14 [ 253.318013] binder: 8210:8213 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 253.341611] binder: BINDER_SET_CONTEXT_MGR already set [ 253.341622] binder: 8203:8218 ioctl 40046207 0 returned -16 [ 253.341777] binder_alloc: 8210: binder_alloc_buf, no vma [ 253.341796] binder: 8203:8218 transaction failed 29189/-3, size 0-0 line 3255 [ 253.341889] binder: 8203:8218 ioctl c0306201 0 returned -14 [ 253.358817] binder: BINDER_SET_CONTEXT_MGR already set [ 253.358829] binder: 8216:8219 ioctl 40046207 0 returned -16 [ 253.505395] binder: 8216:8219 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 253.519865] binder: undelivered TRANSACTION_ERROR: 29189 17:26:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x800, 0x0, 0x0, 0x0, 0x0) 17:26:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:09 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000080)='md5sum\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x9, 0x800, 0xdd, 0xea, 0x0, 0xce, 0x1b99, 0x1, 0x3, 0xa6, 0x48f6, 0xffffffffffff8001, 0x69, 0x7fff, 0x0, 0x1, 0x9, 0x6, 0x1000, 0x4, 0x2b94, 0x4, 0x16e, 0x1, 0x1, 0x2, 0x3, 0x100, 0x81, 0x3ff, 0x1, 0x0, 0x41, 0x0, 0x8, 0x6, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x10800, 0xffff, 0x80, 0x6, 0x1, 0x1000, 0x7fff}, r0, 0x6, r1, 0x0) 17:26:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400023002c7c00007500007b447c6b0000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 17:26:09 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x216}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00de00", @ANYRES16=r1, @ANYBLOB="14012abd7000fcdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) 17:26:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:sysfs_t:s0\x00', 0x1d, 0x0) fcntl$setown(r0, 0x8, r1) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x8000, 0x40}}, 0x28) 17:26:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_execute_func(&(0x7f0000000040)="c4e17d75b00b000000c4c248f34d4547d8d1643666440fd86300c461f8292d000080dfc4a14dc2254a3200000ac462619a9dbabc0000c40129f4f3d9735c41d9f6") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:10 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x15) clone(0x800, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 17:26:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0xd4) fcntl$dupfd(r0, 0x406, r1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) dup2(r0, r0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) recvfrom$unix(r1, &(0x7f0000000040)=""/188, 0xbc, 0x20, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 255.303259] binder: BINDER_SET_CONTEXT_MGR already set [ 255.313084] binder: 8249:8258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 255.321109] binder: 8250:8255 ioctl 40046207 0 returned -16 [ 255.328978] binder: 8250:8255 transaction failed 29189/-22, size 0-0 line 3118 [ 255.338071] binder: 8250:8255 ioctl c0306201 0 returned -14 [ 255.345899] binder: undelivered TRANSACTION_ERROR: 29189 17:26:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 255.363930] binder: 8249:8272 BC_CLEAR_DEATH_NOTIFICATION invalid ref 738206464 [ 255.380257] binder: 8249:8272 ioctl c0306201 20000100 returned -14 [ 255.388236] binder: 8249:8272 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 255.399807] binder: 8273:8276 ioctl c0306201 0 returned -14 [ 255.406041] binder: release 8273:8276 transaction 591 out, still active 17:26:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 255.414182] binder: undelivered TRANSACTION_COMPLETE [ 255.427920] binder: send failed reply for transaction 591, target dead [ 255.448105] binder: release 8277:8279 transaction 593 out, still active [ 255.456235] binder: undelivered TRANSACTION_COMPLETE 17:26:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 255.464267] binder: send failed reply for transaction 593, target dead [ 255.495405] binder: release 8282:8283 transaction 595 out, still active [ 255.502523] binder: undelivered TRANSACTION_COMPLETE [ 255.511640] binder: send failed reply for transaction 595, target dead [ 256.096192] binder: 8249:8285 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 256.110866] binder: 8249:8285 BC_CLEAR_DEATH_NOTIFICATION invalid ref 738206464 [ 256.114946] binder: 8249:8288 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 256.126333] binder: 8249:8285 ioctl c0306201 20000100 returned -14 17:26:12 executing program 4: clone(0x10000, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(r0, &(0x7f0000002580)=[{&(0x7f0000000000)="b18cc6e692798ca0f1e198d5b5894c4283a245b1a459c28bce23e1e697039254f8b7f5dc070287142c61237155f08f9f04fbde1a713131dca9362abcb59560ca1f140f1c068af2af629f7ce6f1d44993ab6d040ba2538118b816bafacb43ce4b44564797eac94babbdca16e5c815df100870a49ba999e902d4775c827cae7153e07eb7bd0f32c09dc27bda3378a5d12b935cbf6b1af8e91e238cd1cb65ffbf951290da2650d34b39b149ea1d076ead760fbe297edc2b7f136b7c91264c205cc46decd2c4fbec3ef198b7f27b5c44baee84da3909e2cfd8384b051007364dc139c40b944e4fb580a0f46ec2e838afcf8a6095", 0xf2}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="dce90cc4d3395aca17f439a6380d58c594399fb6dc04d33a7c75c8ba8836837fc399123779fb6e99310309d190b0116c1eb5a08ba8dbcda11270814320638c74f2bb4c6f28b643f1ccc39cb73292d58aab79f33cbddcd2cd533b4e81689755ee8678953fcb770375dd0758c6ae58a98dd20ee0", 0x73}, {&(0x7f0000001180)="086348d35c591eb04b6c9c939fd39722c5428438f8063505b5b09740f64eb4e4bc3387314e16639904246f4b75eadcbcf91ac80265ce8435a2230fedd393b5948ea96c9e8c", 0x45}, {&(0x7f0000001200)="45ba009566fffafb4c98e21301071111fd53cb97ceacb10347f3a6cd29ca50ee5753fc42741d8a331e93fadb23f84da860691838837ed590f6123333dce79e69dbc37ae96dac440cbaa393d057242a1049885d9bbae56227acabfbd742c1116497164736602c3fa8a9556fec363f71992fcc28ccef5a121671b3f3de43ab6f709e7a2d23bb182df7e4bb3b16096122fcc0f1b1877c", 0x95}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="56400727d9916f3879586befd736b6792ce167c55dff374d318f13092292c557ac476864c263e141908f00946419dcf37362df24ef15d11d9f6d48a6d955780c4ceb7edb55002b7c6fe1b86ac9ac3b828a22d3e8e2a94ab76467757b8667667b33e6b78df34b25b212eefe3b4bc25eaed069f6e500e8a150b019974ca732a12301ed49eee5c0e16dd462dad728fabcdfef6c4b815685ca79960c37abc3a09a7a74e0941b793d1e0c26f8e6d395693307ff3407b343126192916e1f36d12071ec9f6294cf2937a0d037a8f922fdd965000b114fd6a0f75163a9810fed06071cd1a2e1d99c7a", 0xe5}, {&(0x7f00000023c0)="7c9257d1be43e699969e5db3b66e6294556e5a19050edb9309751cb2ad3296c062cc95e006f621723b0f9ab03c68a3a2b48281d2f3823ec717720729d7e898f7c0ddd2289492bd2d5802e89dbba21ceb494cd0eeb638a661244d4ce2823271b8cd07dcf6a823f2671b3fb11001c94af152895c99c811a05ccc809693d2344e512bff616481438826048b76272ade6eb4b2296aabdb0c0b3c0c25389b6115e96ae70b31", 0xa3}, {&(0x7f0000002480)="74f49752a3eba6a55f6d9f6850dd928d89fe5619aedaef396aca87c42cece8566e2462f41c9b7530b5b9b1c4ee832b7089960fff892ec00c77b7e28b580d6ff9ebdcac0e3282df76dbf6ad5b7c271a64bd61a35e3a6afcd642ddd39d8eb370d14490c14c5a24b15ce0dc42418947ddf21ab1fad29902a82fce16791b8d18d5a9ffa5580d0d68d6145656024db8c752d04e4a1d587f7a2bdc2494d9442cc803f5ea29cbf35416d095ce19fb37d137dab15248bb677e944c50e2678c263d1604e6f39325076e300016068cfeebe2585b550848a722678b", 0xd6}], 0x9, 0x1) r1 = timerfd_create(0x7, 0x80000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002640)='/dev/ppp\x00', 0x40000, 0x0) ppoll(&(0x7f0000002680)=[{r1, 0x1}, {r1, 0x4401}, {r1, 0x20}, {r0}, {r2, 0x60}, {r0}], 0x6, &(0x7f00000026c0)={0x77359400}, &(0x7f0000002700)={0xf00a}, 0x8) 17:26:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:26:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000b65904ec53e527d8906af8cfafdecf02f43323894f882317c784c1bfa2e6fce1a7bfe2511a2f5aaaa7d671363f3eda5511f8c32006631f1b600b234f4c3ec5df67ab46ce929a8665e58eca6aa868b2c32a6e4dd15df26b2d45ea0cc065ef3bcba4bd323538c43b2bfca47996736b73bfe2547707ae8302f3b0ccae8a66567518d21196c001292f"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:12 executing program 2: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:12 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='environ\x00') r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x411, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20800, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2f, 0x0, 0x70bd25, 0x25dfdbff, {0x5}, [@generic="a31fd4999d"]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x10) 17:26:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, &(0x7f00000001c0)=""/4096, 0x1000}, 0x5}], 0x1, 0x10000, &(0x7f00000011c0)={0x0, 0x1c9c380}) accept$inet(r2, &(0x7f0000001200)={0x2, 0x0, @broadcast}, &(0x7f0000001240)=0x10) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001280)={0xe, 0x1, 0x5, 0x800, 0x77, "05680d9638194a3549b06c050ee2770965859619576f6c25707f7c09113dde05f23efcd19361a134a6803272697f1754f85841ef6d1be952898d197115a545a0f3b69f9c24c9743a5b0aa3d0f0536991f09d75484bfd073c61b3a728b54821e92d1b9cae4eccf7ce52cdccd50f5fda1bc2f50d76e69bcf"}, 0x83) clone(0x700240fd, 0x0, 0x0, 0x0, 0x0) 17:26:12 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xc, 0x5, {0x57, 0x2, 0x400, {0x8, 0x80000000}, {0x7fffffff, 0x6}, @period={0x5e, 0x40, 0xfff, 0x10001, 0x52b2, {0x4, 0x2, 0x40, 0x5}, 0x2, &(0x7f0000000040)=[0x1, 0x0]}}, {0x57, 0x1, 0x3, {0x8, 0x1}, {0x81, 0x6}, @const={0xbb7a, {0x9, 0x4, 0x3, 0x7ff}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) clone(0x70024110, 0x0, 0x0, 0x0, 0x0) inotify_init() 17:26:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}) [ 257.754530] audit: type=1400 audit(1553707572.432:22): avc: denied { wake_alarm } for pid=8310 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 257.777856] binder: 8305:8316 ioctl c0306201 20000100 returned -14 [ 257.794049] binder: 8305:8316 tried to acquire reference to desc 0, got 1 instead 17:26:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}) 17:26:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x9}, @window={0x3, 0x5, 0x5}, @mss={0x2, 0x5}, @mss={0x2, 0x2a}], 0x4) futex(0x0, 0x86, 0x1, 0x0, 0x0, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x6) write$P9_ROPEN(r2, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x0, 0x7}, 0x80000001}}, 0x18) unlink(&(0x7f0000000080)='./file0\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x30, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x3ea) socket(0x9, 0x0, 0x6) clone(0x1, 0x0, 0x0, 0x0, 0x0) 17:26:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}) [ 257.794549] binder: BINDER_SET_CONTEXT_MGR already set [ 257.794558] binder: 8307:8315 ioctl 40046207 0 returned -16 [ 257.794703] binder_alloc: 8305: binder_alloc_buf, no vma 17:26:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 257.794722] binder: 8307:8315 transaction failed 29189/-3, size 0-0 line 3255 [ 257.795155] binder: undelivered TRANSACTION_ERROR: 29189 [ 257.816158] binder: 8305:8317 unknown command 536872576 [ 257.816167] binder: 8305:8317 ioctl c0306201 20008fd0 returned -22 [ 257.819987] binder: release 8322:8324 transaction 603 out, still active [ 257.819991] binder: undelivered TRANSACTION_COMPLETE [ 257.825232] binder: send failed reply for transaction 603, target dead [ 257.860962] binder: release 8327:8330 transaction 605 out, still active [ 257.860967] binder: undelivered TRANSACTION_COMPLETE [ 257.864961] binder: send failed reply for transaction 605, target dead [ 257.907489] binder: release 8333:8336 transaction 607 out, still active [ 257.907494] binder: undelivered TRANSACTION_COMPLETE [ 257.914844] binder: send failed reply for transaction 607, target dead [ 257.977144] binder: release 8342:8343 transaction 609 out, still active [ 257.977149] binder: undelivered TRANSACTION_COMPLETE [ 257.984880] binder: send failed reply for transaction 609, target dead [ 258.000988] binder: undelivered death notification, 0000000000000000 17:26:13 executing program 4: clone(0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x14}) 17:26:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0xb, 0x1}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x1435a107}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) 17:26:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 17:26:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = getpid() ptrace(0x4217, r2) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 258.588120] binder: release 8352:8355 transaction 611 out, still active [ 258.600310] binder: BINDER_SET_CONTEXT_MGR already set [ 258.608632] binder: undelivered TRANSACTION_COMPLETE [ 258.624349] binder: send failed reply for transaction 611, target dead [ 258.634346] binder: 8356:8358 ioctl 40046207 0 returned -16 [ 258.635190] binder: 8356:8358 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.635503] binder: 8356:8358 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.681573] binder: 8356:8370 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 258.688459] binder: 8356:8370 ioctl c0306201 20000100 returned -14 [ 258.695895] binder: 8356:8370 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 259.385782] binder: 8356:8370 unknown command 536872576 [ 259.391577] binder: 8356:8370 ioctl c0306201 20008fd0 returned -22 [ 259.398089] binder: 8356:8370 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:14 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400000, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffbe, &(0x7f0000000000)='system)\xdeselinux\\/+vmnet0cgroup]!%{\x00'}, 0x30) sched_getscheduler(r0) 17:26:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 17:26:14 executing program 2: exit_group(0x1f) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x10000000, 0x0, 0x0, 0x0, 0x0) 17:26:14 executing program 4: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 17:26:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'ppp1GPLkeyring[,'}, {0x20, '/selinux/mls\x00'}, {0x20, '/selinux/mls\x00'}], 0xa, "f8eaeb79cab30c9650e88c8dcdd866ad623c889c7635a38aed56987226246f02830e36ca3482d69032b378f17d58a86facec3606d9f24bb3e4b430c9fea1ffa3aafece833f6f1642bde9935b0a9a0cdf"}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r1}, 0x10) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000dbff4d0d00510001000080ff9078ac1e0101ac1e0101831fc57f000001e00000016000000000ac1e0101e0000001ac1414bbffffffff00000000006ac69d00ffff00000000000200004e23000000007fffffff"], 0x55) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:14 executing program 2: socketpair$unix(0x1, 0x1000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb14) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x4) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) connect$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 17:26:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0363"], 0x0, 0x0, 0x0}) [ 260.120504] binder: 8379:8384 tried to acquire reference to desc 0, got 1 instead [ 260.129186] binder: 8379:8389 unknown command 536872576 [ 260.129208] binder: 8379:8389 ioctl c0306201 20008fd0 returned -22 [ 260.132979] binder: release 8380:8387 transaction 619 out, still active [ 260.132983] binder: undelivered TRANSACTION_COMPLETE 17:26:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0363"], 0x0, 0x0, 0x0}) [ 260.140279] binder: send failed reply for transaction 619, target dead [ 260.166978] binder: 8395:8397 unknown command 25347 [ 260.166987] binder: 8395:8397 ioctl c0306201 20000380 returned -22 [ 260.167311] binder: release 8395:8397 transaction 621 out, still active [ 260.167315] binder: undelivered TRANSACTION_COMPLETE 17:26:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000100)) 17:26:14 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000080)="627a74f69489bb20f3d4d3e775320f49dae15f44a230daf6857e", 0x1a}, {&(0x7f0000000380)="b0569c2ecbdf151ecdca5a88a1f3e39b316baede8b6a2101193fd0c547e0747996a3bfda9634fe77e974b5218414dc2ef6b5ed8d2772208093009420aafd0b6bebb8b7213f2c661b0161b9b91693c51e52fa049143d3da811047a5188e4202d1d729026ec54b9176171166ae9df093e50eb83d5eb30c920c624af98ae919befc08100c960f4cc2675b86f3ecdad7766e894c9ff2148d45e74bd7e544f47e8e65236ca03a682e5dec1f7cdbdd1c96f16df1b9791e9e25d4d591793c7821b73b038b", 0xc1}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000500)="f47caa96ef95deac8d2a529bae52515f847977dd7603c861acb01355bc57add9cdb88530ddff491b86924143197a710124c6641063cc71302ab0693079448d94b5897fbb207d9a83f6d2d67bab634a4bba3fd1bcd0e8b83907ea9eeec0bf18211f12175a0a19c7b75e5c733ed9d96364e47b5b587675d889ec88103fd280b6e3aa70a475582acf1d", 0x88}, {&(0x7f0000000140)="04a206ce8fdef98ba75fa1f1bc2ba5e22463", 0x12}, {&(0x7f0000003040)="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", 0x1000}], 0x8, &(0x7f00000007c0)=[{0x38, 0x108, 0xffffffffffffffb4, "8739981fb007463bed2239cc48d135dbdcab8061e89646d464e9fa21dec948f1aac3b3"}, {0x48, 0x10f, 0x8, "ca7441570a919f80f5c78338390a1d14b6117b0ea7cb770c1c64bb6107c059fb248b6832254c15f5c42f4e75e57510de5bf08d7c6c750a1e"}, {0xe0, 0x1, 0x8, "2d1a4b5959ffd7863dccfe77116f95ca3af4474167b65d5864d831c33336273e91662d51537184bec5a7e685fe79cdac4ab7f50ff0e80f926ff9c00b84babcec33d942b1b751c8ba9d8c788f0b186f5f8aaa35c2da3fbfcf0ce6d1077476941fd587ad70db98a1d73339f72cd27bfec7db3fbb2094e822324b00cc3516e5867d11cd2bc73d13445ee49974a2224c9fa95db2c2d4505d09f13e2d7b55a8141368dee503fe24c515fcb38783822f6c7c7acc830bdeed565958892714898e5b4d2d44c58d639d3f3342a262a812fe4a"}, {0x40, 0x105, 0x6, "7d1288340c565c6beaf9e666ac08c98c0692c7e2923da016f4e0212fb2e7ce07ccc86a0ff2c8e14cab4326df83"}], 0x1a0}, 0x4040080) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000000100"], 0x0, 0x0, 0x0}) close(r2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x7fff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x0) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioperm(0x0, 0x2, 0x10000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 260.180915] binder: send failed reply for transaction 621, target dead [ 260.245567] binder: 8400:8404 unknown command 25347 [ 260.261327] binder: 8400:8404 ioctl c0306201 20000380 returned -22 [ 260.275296] binder: release 8400:8404 transaction 623 out, still active [ 260.276184] binder: BINDER_SET_CONTEXT_MGR already set [ 260.276193] binder: 8409:8411 ioctl 40046207 0 returned -16 17:26:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev, 0x2}, 0xfffffffffffffd48) sendmmsg(r4, &(0x7f00000092c0), 0x4f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x7, 0x7, 0x423f, 0x2, 0x4, 0x100000001, 0x0, 0x1000, 0x4, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 260.276815] binder: 8409:8411 Acquire 1 refcount change on invalid ref 65536 ret -22 [ 260.277111] binder: 8409:8411 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.277892] binder: 8409:8411 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.277907] binder: 8409:8411 ioctl c0306201 20000100 returned -14 [ 260.278058] binder: 8409:8411 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 260.279176] binder: BINDER_SET_CONTEXT_MGR already set [ 260.279184] binder: 8409:8411 ioctl 40046207 0 returned -16 [ 260.279459] binder: 8409:8411 Acquire 1 refcount change on invalid ref 65536 ret -22 [ 260.279617] binder: 8409:8413 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 260.280035] binder: 8409:8411 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.280050] binder: 8409:8411 ioctl c0306201 20000100 returned -14 [ 260.309028] binder: BINDER_SET_CONTEXT_MGR already set [ 260.309037] binder: 8415:8416 ioctl 40046207 0 returned -16 [ 260.379609] binder: undelivered TRANSACTION_COMPLETE [ 260.384815] binder: send failed reply for transaction 623, target dead [ 260.385193] binder: 8415:8418 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.385213] binder: 8415:8418 ioctl c0306201 20000100 returned -14 [ 260.385303] binder: 8415:8418 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 260.410654] binder: 8415:8419 tried to acquire reference to desc 0, got 1 instead [ 260.410956] binder: 8415:8418 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 260.456741] binder: 8415:8419 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 260.456756] binder: 8415:8420 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 260.471576] binder: 8415:8419 ioctl c0306201 20000100 returned -14 17:26:17 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x105000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x101, 0x6, 0x81}, {0x7fff, 0x1, 0x7, 0xf74}, {0xb79, 0x8, 0x3281, 0x9}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:26:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2080, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) dup(r0) pipe2$9p(0xfffffffffffffffe, 0x80000) 17:26:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0363"], 0x0, 0x0, 0x0}) 17:26:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x407d}}, 0x30) 17:26:17 executing program 4: clone(0x40000000040000, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000010c0)={0x3, 0x1, 0x1025}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/4096) fstat(r0, &(0x7f0000001040)) 17:26:17 executing program 3: socketpair$unix(0x1, 0x8000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x82, 0x2, 0x9, "2dd56ab55218971f9098a140e8bf46b4", "d995b70a611a16b1af95b041262ba7b4cddbd3ed70ceb1cb1766d95c10a08b060e9cc2438c81e377f8cf951a9e5c64b6b33c49f91d066e476c50a1e7b3fa5b397316606b4afbe2cb36aa5120bd6ee711b7951d4410c4798b9ec99f249095dff115bd5506cc63823038a2b0a858"}, 0x82, 0x3) 17:26:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="036308"], 0x0, 0x0, 0x0}) [ 262.915586] binder: 8436:8442 ioctl c0306201 20000100 returned -14 [ 262.931044] binder: 8436:8442 tried to acquire reference to desc 0, got 1 instead [ 262.935994] binder: BINDER_SET_CONTEXT_MGR already set [ 262.936003] binder: 8439:8447 ioctl 40046207 0 returned -16 17:26:17 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) socket(0x9, 0x7, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20070024100, 0x0, 0x0, 0x0, 0x0) [ 262.936120] binder_alloc: 8436: binder_alloc_buf, no vma 17:26:17 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2140, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+30000000}, {r3, r4+30000000}}, &(0x7f0000000100)) 17:26:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="036308"], 0x0, 0x0, 0x0}) [ 262.936138] binder: 8439:8447 transaction failed 29189/-3, size 0-0 line 3255 [ 262.936223] binder: 8439:8447 unknown command 25347 [ 262.936230] binder: 8439:8447 ioctl c0306201 20000380 returned -22 17:26:17 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='TIPCv2\x00', 0x0) keyctl$search(0xa, r2, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r4, 0x610, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x806}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0xc0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) gettid() 17:26:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="036308"], 0x0, 0x0, 0x0}) [ 262.936711] binder: undelivered TRANSACTION_ERROR: 29189 [ 262.940419] binder: 8436:8449 unknown command 536872576 [ 262.940427] binder: 8436:8449 ioctl c0306201 20008fd0 returned -22 [ 262.958925] binder: 8436:8452 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 262.958942] binder: 8436:8452 ioctl c0306201 20000100 returned -14 17:26:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x0) 17:26:17 executing program 1: [ 263.020422] binder: 8458:8460 unknown command 549635 [ 263.020431] binder: 8458:8460 ioctl c0306201 20000380 returned -22 [ 263.020820] binder: release 8458:8460 transaction 633 out, still active [ 263.020825] binder: undelivered TRANSACTION_COMPLETE [ 263.032826] binder: send failed reply for transaction 633, target dead [ 263.056123] binder: 8470:8471 unknown command 549635 [ 263.056132] binder: 8470:8471 ioctl c0306201 20000380 returned -22 [ 263.056562] binder: release 8470:8471 transaction 635 out, still active [ 263.056567] binder: undelivered TRANSACTION_COMPLETE [ 263.079140] binder: send failed reply for transaction 635, target dead [ 263.113226] binder: 8477:8478 unknown command 549635 [ 263.113235] binder: 8477:8478 ioctl c0306201 20000380 returned -22 17:26:17 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001680)=ANY=[@ANYBLOB="7f454c460907068b020000000000000002003e00000000002a020000000000004000000000000000620100000000000001000100ff033800020000000500679007000000ffffff7f218b0000000000000100000000000000000100000000000008000000000000000008000000000000ff7fffffffffffffb74087aa5fe9c723147e02849743453704a7f62efa5a9c96ee43ea2583ca5db593fd7c72dc4f88114fe8d342304c458ec7cd39e02fee25f73e384485b7a2fb4aad88f4f07d624451ee888f9df50ec00886f2284c6c011c88942b6e13273d4d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023e1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000009ec45d15d40b62859340806fe66adb288b9a187abfde5408d8f948bf676437eacf1d47ee0e4e247140e78391aa429634e7290f6f0592ce51241e998c36ae87885fab3795a328d74844fc40edf69a7e4148f1b7c6a799c11b30914ffdf8414d714a69392b541b4fee4d071bb53edbf11a4cb5294dadf8a3a4573b9ad3b5dc96fff7f32dd92f578a697267241961700af1c844f180670656a122d6669676c55ebfce67f2912fd05204cb4cbd70a3bc229f7cf4ee1c0abc5ff71d63"], 0xbb8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) 17:26:17 executing program 1: [ 263.113588] binder: release 8477:8478 transaction 637 out, still active [ 263.113593] binder: undelivered TRANSACTION_COMPLETE [ 263.117379] binder: send failed reply for transaction 637, target dead [ 263.226806] binder: undelivered death notification, 0000000000000000 17:26:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) seccomp(0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x7, 0xd03, 0x40cf, 0x2}, {0xfff, 0x9, 0x2, 0x4}, {0x9, 0x18, 0x8, 0x4}, {0x9, 0x3b13, 0x8001, 0x400}, {0x1f, 0x224, 0x1, 0x40}, {0x7, 0x8, 0x3f, 0x6}, {0x3ff, 0x4, 0x4, 0xffff}, {0x4, 0x3d38800000000000, 0x8, 0x1}, {0x401, 0x2, 0xeb4, 0x7}, {0x4be9, 0x0, 0x2, 0xfbd7}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r1}, 0x30) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) fcntl$lock(r0, 0x27, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x80000001, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x80000) write$ppp(r2, &(0x7f0000000200)="439a88637aed6945e610c52daf5c0fd1834bf670ce7f73c1d10762a08779ec7037b2dd6e2df969c0361d6d9f452879944dcdb404cb09e9e829bbfddb3249b79d129ccff9edeac016f434d1a237542f276ee39961506c3e331667552443350606ff417b17a816a192744d02f41405dcd917a2e94bf9d09f1c06e7ff3c8c053c84c1f92b", 0x83) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x198, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb0}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3a316c8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c88f52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x510000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4501dc4f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x659}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe926}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c7}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x80) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) fstatfs(r0, &(0x7f0000000000)=""/4) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) exit_group(0x7fffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="c1dffd2b317cb71010eb5d92e8c1215b070d5ed2f435b361b1"], 0x0, 0xfffffdfd, 0x0}) 17:26:19 executing program 1: 17:26:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x401, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="17a29c9b4f9a075f41aa7844601e2a0b7d481937d0c7c6362bab8568095e8337ff826a6b0ab2b1f0f3f125b7461ec5a1c9628e3a6404dd499bc5320757eed5680a4a4c327275") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x4f, 0x8, '9P2000.u'}, 0x15) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:19 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) 17:26:19 executing program 4: 17:26:19 executing program 1: 17:26:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x22001, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="35420e2e472f0f7816960d5ff1e99b64e8d6c13e1927fffb47d84438fb6b21d294e05671734f61fce2ba4853199f42ce593dfa6a0c89a6eeec052956f4ad8455e0c403570f1a0cc1d1bf2a4e4c2e26e70a0446bad6a848f10b1dfd6919369b5e2cb879b6fe5acbbec5094d34420d809e6c59bd81acb72e936557216959f2156563d71e6073b8eb27b44a73fb3158a25520c3381b1a83f2bb99a4ea4778f006694c3b91c52a918bcdfd4cb0303207e2552cea14043a41833cc9e2bfc0d7f37c319cd0675ca3cc4cdc950f6a72113640de763ddc5b3d470a1836137b5ce913") 17:26:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) io_setup(0x1b, &(0x7f0000000780)=0x0) io_submit(r2, 0x0, &(0x7f00000007c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1ff, r1, &(0x7f0000000140)="8aa04bbe80fe15a1af47cbf23c1a1d8087c4171f34e0db2a9c624efce2eacb6da27bcaddd537b7e67a3f333735583d56fe0030d6f8ef3c3c10cc30c330e5a1becad9de8ce9e7941f451499cf8e", 0x4d, 0x5, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1f, r1, &(0x7f0000000240)="45d7d966e487daddbcff089d112c5431afe8f4b57ed232d70b992510963ef02a5c45dcdbf33feb797ebada33d98ee0290193c09d97538fab4c467b9fdd3831425a3b5ea466ed432b3d44448d2ca5ce3590a86a5975b09a97109d1bfd98d47ff0f6ceb165aea46a936dcd7f9c2c63dbbc628ab5f913b811d9bf4b62a1b4f637c890685f43371e0bcc973dc3f84a8c4bd06183c9721e56889ad5f9b74345e8ae4176e894f5abebd3a1b63a9310eda3f13b86e6a8120a99443241f0a874b7de9af2b928809cd4f325", 0xc7, 0x4, 0x0, 0x3, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000001040)="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", 0x1000, 0x4, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb4, r1, &(0x7f00000003c0)="e88bf440c13b2de688b3c9dbb7869a6a0780", 0x12, 0x6becae1f, 0x0, 0x0, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x8, r3, &(0x7f0000000440)="ceaa4f567c4ccbc792cc7bd7993e3bb97e7be110531f7f9a8f4fed564cdbd86f39", 0x21, 0x100, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0xb5d1, r0, &(0x7f00000004c0)="e967a4dd24", 0x5, 0x8, 0x0, 0x3, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xe478, r0, &(0x7f0000000540)="8fb438e3a01fc91007014987c7b54820ac62b55398e0590aafa53e2262509a3d0a04b3f39c48568cde22acc69d7a2f0b0d3a7ae473570a0213c4a39920a2b6405181cbd498d37b14471b32d27879c914092570340e628f12833ad521f33c1dc456c53b796e5bea911f761b58ae124f138f9e802ffb45e678", 0x78, 0x9, 0x0, 0x0, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000640)="278002494f166deb81bd0961652b08eb029336efaa2350c346de0bd84a47db5b2ddac66beb69a22724dd6e7048c38d98a537234b1b461946e3bb60345f5bf62c645b435d4a316bf1bc0a927bc03d2bd72f413e9426cf1fcddca4a9429b68ded9cb2a705c694144c817f73bc083d9182efe0d4dc77e359496ced04a63868e008a771bec44ea73d28447b3d75fe23bb954091d787c19c02de4c3e2ccabf633c0de3a235a5327c3b5d3404ce6a1cecae7397227cf6effd1", 0xb6, 0x1, 0x0, 0x2, r3}]) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000002040)=""/4096) [ 264.482165] binder: 8505:8510 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 264.490869] binder: 8505:8510 ioctl c0306201 2000dfd0 returned -11 [ 264.500222] binder: 8505:8510 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.509097] binder: 8505:8510 ioctl c0306201 20000100 returned -14 17:26:19 executing program 1: 17:26:19 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 264.577806] binder: 8521:8524 ioctl c0306201 20000100 returned -14 [ 264.601483] binder: 8521:8524 ioctl 81007702 20002040 returned -22 [ 264.635160] binder: 8521:8524 tried to acquire reference to desc 0, got 1 instead [ 264.646676] binder: 8521:8542 ioctl c0306201 20000100 returned -14 [ 264.654199] binder: 8521:8539 ioctl 81007702 20002040 returned -22 [ 264.663232] binder: undelivered death notification, 0000000000000000 [ 264.669841] binder: undelivered death notification, 0000000000000000 17:26:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7fff, 0x4) 17:26:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, [{[], {0x6558}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x200000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x7f, 0x9, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x5fe91bf3) fcntl$setflags(r0, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x92f) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='mime_typecgroup/\x00', &(0x7f0000000180)='$md5sum\\#.eth0]%eth1\x00', &(0x7f00000001c0)='[\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='/dev/keychord\x00', &(0x7f0000000280)='/dev/keychord\x00', &(0x7f00000002c0)='\x00']) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:21 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:21 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc800008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r1, 0x12, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1487c793}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24004010) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05e3044000000000"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/72) 17:26:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000), 0x1c) 17:26:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip6_mr_vif\x00') getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c) 17:26:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, &(0x7f0000000540)=""/44) syz_open_procfs$namespace(0x0, 0x0) timer_create(0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) 17:26:21 executing program 2: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 266.936485] binder: 8570:8573 unknown command 1074062085 [ 266.942327] binder: 8570:8573 ioctl c0306201 20012000 returned -22 [ 266.951572] binder: 8570:8573 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:26:21 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x8}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 267.009682] binder: 8570:8588 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.016751] binder: 8570:8588 ioctl c0306201 20000100 returned -14 [ 267.027214] binder: 8570:8588 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 267.738053] binder: 8570:8588 unknown command 1074062085 [ 267.743683] binder: 8570:8598 unknown command 536872576 [ 267.743711] binder: 8570:8598 ioctl c0306201 20008fd0 returned -22 [ 267.749710] binder: 8570:8599 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 267.749733] binder: 8570:8599 ioctl c0306201 20000100 returned -14 [ 267.756199] binder: 8570:8598 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 267.777493] binder: 8570:8588 ioctl c0306201 20012000 returned -22 17:26:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregs(0xc, r1, 0x57, &(0x7f0000000040)=""/124) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/56) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:23 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') close(r0) 17:26:24 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) r2 = socket(0xe, 0x2, 0x6210) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040084}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20002abd7000fedbdf25070000004c000200080002004e24000008000500f6000000080001000000080003000300000008000800ff0100b9080002004e24000008000800b79e82010800040002000000080003000000000072c46ca5855ffbc7c50000006bbf78ad"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r4 = open(&(0x7f00000002c0)='\x00', 0x200000, 0x84) ioctl$KDDELIO(r4, 0x4b35, 0x33) rename(&(0x7f0000002300)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) sendmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="e6009802b95827a0d242b77a65f6eae95efd768b7a8cf10c75bf0651005d487cdfaaafa64e800103865219011fa63f5eb5b66d5cc750deb26450f4955b072afa466c474eafd301a89cd3cbfd806f790079aab5da6deeadb9cb24ce20b507440af006b499466b800443b4c023c2ec14444ba7a1902b4d5e7630ae9b2acfc8c8cce23f492fc9ccaa9c23e18b52fa9287acae083ec956efe01d4a7d6c4bd4236f387f93b92e7ed6565ad77399871948234fb17127", 0xb3}], 0x1}, 0xc99}], 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffbc, &(0x7f0000000500)=0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 17:26:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_yield() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev, 0x2}, 0xfffffffffffffd48) sendmmsg(r4, &(0x7f00000092c0), 0x4f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x7, 0x7, 0x423f, 0x2, 0x4, 0x100000001, 0x0, 0x1000, 0x4, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:24 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000009000000ff075e007cd63faaa874796d74580fc85ed88db33b24778d37557700000749d2d3cdb530e993692ee5155d9783c9c1d9ba67d5ee22791545af91e0ee5e3fbdf1348811f6f5b1fb17665129ee116779d9a3273465eac4a0435d5661f262d856a5f997"], 0x6a) 17:26:24 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000401200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 269.823439] binder: BINDER_SET_CONTEXT_MGR already set [ 269.831282] binder: 8621:8629 ioctl 40046207 0 returned -16 17:26:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='keyringem1keyring%0{eth1\x00', 0x19, 0x3) 17:26:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000100)) [ 269.909645] binder: 8624:8649 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 269.916766] binder: 8624:8649 ioctl c0306201 20000100 returned -14 [ 269.928912] binder: 8624:8649 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fcntl$addseals(r0, 0x409, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4800, 0x8) write$evdev(r3, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x0, 0x7, 0x80000000}], 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x3f, 0x9, 0xc99, 0x0, 0x1b, 0xffffffffffffffc0, 0x3ff, 0xca, 0x7fff, 0xff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f0000000040)={0x5627544e}, 0x8) 17:26:25 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) 17:26:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev, 0x2}, 0xfffffffffffffd48) sendmmsg(r4, &(0x7f00000092c0), 0x4f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x7, 0x7, 0x423f, 0x2, 0x4, 0x100000001, 0x0, 0x1000, 0x4, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 270.637132] binder: 8621:8650 tried to acquire reference to desc 0, got 1 instead [ 270.642915] binder: BINDER_SET_CONTEXT_MGR already set [ 270.642924] binder: 8664:8666 ioctl 40046207 0 returned -16 [ 270.652766] binder: 8664:8666 Acquire 1 refcount change on invalid ref 0 ret -22 [ 270.663363] binder: 8664:8666 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 270.712882] binder: 8664:8673 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 270.721708] binder: 8664:8673 ioctl c0306201 20000100 returned -14 17:26:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x480000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000240)="c51a0701277435bcb3a16b0270d7f993b80076398fc2f94a16ca78452143327c3392a0766c784aad0c3a38", &(0x7f0000000280)=""/208}, 0x18) write$P9_RWALK(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="300000006f020003000000000000062000000000000002020000000400000000000000400300000006000000002164d06fc209d5a3000000"], 0x30) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_TSC(0x1a, 0x2) setfsuid(r3) [ 270.733847] binder: 8664:8673 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = geteuid() syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffff8001, 0x0, &(0x7f0000000280), 0x800000, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@user_xattr='user_xattr'}, {@data_err_ignore='data_err=ignore'}, {@abort='abort'}, {@noblock_validity='noblock_validity'}, {@debug='debug'}], [{@subj_type={'subj_type', 0x3d, '/dev/binder#\x00'}}, {@uid_lt={'uid<', r1}}, {@measure='measure'}, {@hash='hash'}]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_ON(r3, 0x7005) dup3(r2, r3, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$ppp(r4, &(0x7f0000000140)="6c9a34bfcd2ae92d22e8bdabefab4ff99818b4a9a05df6eb3303807f8195721dd0d7f998c88d5d3b1dca106c06084084880135b3dc0a8a85c18dbc63392b008a45bd8bd366bce888a591b66f77c8cc3450d35804100239e8c921ad334942b2fd16ef0e06dddd1d8ef0c65c81b10099ca5e4cc268", 0x74) pipe(&(0x7f0000000440)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'bridge_slave_1\x00', 0x4}) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x0, 0x1, 0x4, 0x0, 0xffffffffffffff7f}, 0x101, 0x5d1, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0xeb81, 0x7, 0x100000001}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) close(r1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) 17:26:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev, 0x2}, 0xfffffffffffffd48) sendmmsg(r4, &(0x7f00000092c0), 0x4f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x7, 0x7, 0x423f, 0x2, 0x4, 0x100000001, 0x0, 0x1000, 0x4, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000080)=0x307) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0xffffffffffffffff, 0x3, 0xffffffff, 0x3, 0x1}}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x100a001, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=00000000000000000000010,mode=00000000000000000000003,mode=00000000000000000000000,mode=00000000000000000000156,mode=00000000000000000002364,mode=00000000000000000000007,mode=00000000000000000000011,seclabel,subj_role=,fowner=', @ANYRESDEC=r1, @ANYBLOB="a8"]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 272.437339] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 272.444747] binder: BINDER_SET_CONTEXT_MGR already set [ 272.457206] binder: 8688:8689 ioctl 40046207 0 returned -16 [ 272.466867] binder: BINDER_SET_CONTEXT_MGR already set [ 272.474036] binder: 8686:8696 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 272.474055] binder: 8686:8696 ioctl c0306201 20000100 returned -14 [ 272.474333] binder: 8686:8696 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 272.497333] binder: 8688:8689 ioctl 40046207 0 returned -16 17:26:27 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="978689276512b5da15206b6810e1a7c2f172e66e4e7690d061da43f2117c0ec5e7c8b74a6bdf835cbd4e1ef540bc4aa6129838bab81152cda47962580b9d1a8cea4cf04a888e3ee2f01d4c9f89bc002cee970d818f7baca1cf442c5467a78534334dc4f1df87df338466009322e7a219fa49c2fd5a17f3335bb44908c268cf4ee95a605882317d6f97d373eae7f878c81aca6f315f6b502721d4ace4ff6c502987805dca6d2dd3863191d7334f345e26a42854da142741fd2517ac0f59ab75202bb79d862f82983c94f60ae1c32c1e257d73b200a23cc71168a320d66f1c0cdbd9182005fc0079a6e846d0a651dd0ffbf29a0f7f63ada79c276f4d87ed396d832beaee793ca7709a0369b319aab080ec9518042c3ce11c1c150fa205758a9b3aa7a99aa98bdc574ab6b8a217b09a5c78ba7951318b4e1a7b3612a18d097fd65dd7d73404b5946706f2e472e69b24f5b7cb470e1a9a9e8ca0e07f04b6808033243adecb36ee7908d263b5e299b8dfe9a57e0fda514bb23daca1f1daf6ba8eefb60bc519e46919d4293ecbcb09cac1a05c450a40892602d50b4d09ea18e20cfe7d303c4d0afc8c520866ab8c7d1b343eb29784c06f24695e366c30644b2a65a5ad640842f85966fe8f7d4b843eb40338df7bc8587094004a7ed6055ccc48971e82580ff39e22304e7b5576ec60a82036c191e3bedc43c71c662c0c3d3fa5e46e1643641208133da43dea949fec12493a9f1e7a4342f46c283c0048695adaa4dcf83a7662e11b14c6fdbea8890897c55a98e52a66519d69882e51f02d5e962be6b2df785a0d52dc4342f352520c12340d650ec5f26286c6705f0211f0789f3b738d3e546e732d4f79a2c04be7159827422596204c1aad7f496aada7a7f415c6a4d06d35594530cf0ffbfbbfe61bb30435014e4380d2f6bce778a2a124d6a6e44d8ba93555c91865e4c6299aa974d5e239ec153dbddc85a92e214d9200f324a06871ff5b76a0f7049ce29c6cc48732cd7ea0f626069c0f4d995944c75346a784522239db21dba2116fe15149f044c5c160384dc841520a7258704f025aebcdf84abd41eeae2b0a174e4ef804408d73040a133f973e272f553bc95596a3f997886a6557bb0073c58ca9bc330b2a2d87f8c95a6bec76041de3252fa1de7ff925a3a034b0062f6251160f707422967e3ba527d84ceff8bebbfa796ab241d93f4580b83950fc3f2e0af76073c9b52b9a29202709a54380aa544a6c8eb163515d9f3362e9cf31cad8f705c900224fbf588e713f5e4abf66e4944b4a450d9c4df09b89610dd9834835665dc2da5d1587bffa9b9c19d2b750ef67a405c5452e5029f4080773cae174ac568e7b91d72f2bb8d20d46e680d9adc25335b13ed477637e1521848965100b70b6e477d8250fd01d0747e1972d7a6547dd771dbdea3c62d351c33e90749ad23ddf5c7abf1cdc7f761f0baae142025ed294684dba7f5c4f6bf218b26f1b818f988d2ee4b914d9d557fdd067e52eaf2b95740f0b80c18fd773c5a57a226a5f8b98356c5e7ba58d3f28195b6531186ee3732a6e7d3c7db2613c63aabc6a3c5ef80cfb5f3863fe522dec897f20d6b3943e339b323461bc3310053f0618617f07249cbe1b482a373a6be823f9cb4714358267417f331bf050ad558474241ed7a5cdb9c1d78d3e975fa96025a9ef6fd2cbe5cffcd7bcc5eb4d8d27fa6e28db6d412a7d3fe046c6102d43e850372e9d9317fc212ba0f828397e23407f76deb31cda1fde926230acfdbb9316824a23d3cde6e3012c9e5d1a7a49e6770255d38acc83437eadc23d475793b138b68aaf54ce317758e60d7ec7511dcfa317887daa3db9a355d7314be92743e3813871b8a896211e9fe52787298068207cdc4ff2a1c14f8bcda7e4f05dcab2d49c3426ddc8ebabb2950b8eddae7d00790c206419a620c699ed8a79bd7540be3fd5416ebdfb027a85276137298dfaa24cc574f4e57792b40803c045ee676ce76097fd0860844ef60c4280e44aea09b734908cc32d7b4e4498d47e51f0a83d87cee9fbab4c700dcf6388b33a424080719fefe1dde2406c12faefc75c4b857b17e8b7482277ce1eeeeb7fc7ab6ff829628ae21cb321fdce5eeff327f4a01b78f8d7b2b2bed5297383beb329dda83d484aab2ea0e458fc56161c4a5eef78ba2f0209e1129f6ea6421d72aa23b2878375a8bda641bdfd7a3542ddcde6629f55f77cd5a2b15d6ffd84ea7bf68a886f1f618ac1f9a3bcfa1eb9a192d5845cffad38508627c4bde7201b26976945c4a1db9a2d86255f72b65262bee891f1854dfa8afc779918cb455ba97e982e56d8343dd28f2932eef3ddd97d9213135646f03e67cffa4995dcda1427be4a7c13cbc5b0f7435a263c782bcbe3d98f42afde60f07849df4eecf1f545ea31b7c343fb8d6e5b9fc43193b81689cf06dc5fe8ec9e4193ae5d296f01b496d5aa459521fcbe07b88b1c27bd6084f6d5438aaa9a10d5a633954baddce7fa353251c531725a10916b254e5b27d6ddaccf403c808bb71c409df2abd0d78f542ac73be518211bb46407bc29044f3b7adbe76d9ab28b6a7998b0b9910ddd6f5b91923164096ddf8bd8d41bbd541990118bd8a3c80d59bb346ddaf4a04444c690c8059ca2be73e1777af71ec7887d9848b3a35fa4442b820cf96e4b653caf0fc78584d916cf9f6f4d9e175aa08e21957682144cd47060a1c25b80b61162a3a79b73fa9c32f93ade6f70a6884cd698887d9b63b38bf16003299063cce08e4c1a401776956e9ad08c8dddf1f15600b20598150b841e423c0171cd2c9b75059f50b41804552e3e96117a98e3df73d21d5479474bddae06da0f642aef192319301de4d2ede1860b8fe5fadf5d6726d8710a63487acb26438263034e183a0f4a067447eb7c32c9f0bbcdf89cb13de18caeb9d0c03dc12aad756ca12f7bf0737126c60998cad3ed625dfb62a3fb3b9cadc0ff6c29ef81248bfd0efb03d1abcd7013eeb9850e9757f2ea01f87db8852241289cc3e6de21e601adec9ba67c00ffda27eb3e8ad1160ac8f7b30682a22bf1a7f9ac8afcc761a7fd313ec5441becfd52ec9093fa6d90425ef9d0c123e642afb41f9ec655158c71b6563a8ba8c12daf11937fa899c2fb1cd1b601dfc3bde9f14001036ca3d55f2760201e8618da688a6ecbf7614194a4b3751a703e435d56cd64f87d2931ab176884848650e168dd2809aef768a1059559c1d2a0c05c6e493f5f925ce8c8ab7c2435eaefd572283cb513c9674f4d7a318e6a3f0fd15feedd6ba2021cfd16f15892b1dd590e8b4b0f66508d624fa56b83574ba933745aba971831d2aabddfdc557e887233a1953946e97895bb359f7bb4b297e60e9f66291f06f446f09b88c54b17e2aa064196706356fad17cc78b21c339071d6150a363a6044e16a2c726f86bc89532704cb73b3439cf16543d1c2e2c6b14ddbc16995fd94116e2fd1c6b9e369e9b192e3d9b178786f47baf66cbf1b84be598cdb482c789b52da9db334bf8673f4854c2fb4e0f2325a04fc888f07dec2ec6d06dbd9d737bf6ac04427a768d68151316dcccbff96fb9710b94f124cddd10a262f4f7f669b5b3c1912b93cc549086b9c5fb3023284fd88b7ad3735f5d1a17f4c177cdc7647e3c6718627d5bd29973ca6cb0ddfefa63e20bf3b735016b1f9628c257f2f16abfe183a407a99a831989325b0d5e6373deb1484eb77caac162600d6d6d12fffc5f1e5b82f804af6aa2f735fbea5cb8a038690d688ddb17bb8e3cd2afa2a3f3d351ef04b3a13d044d4b70ae74be91cb93d7182b15203b91f9e5ce2590941447f2d8e2face837e2c9d53b86923d8bfe7442d4955059c822b03f528899c12acf5213ac8af903f9544edd8b9f9d133733083c663dd18e8660461022f37fb5a459e7a01ca1e4ddac5505224ea600495b2d98a70cee33d983ce706d0c70ee3d7ffb201a924d80fd2e906b13f9466ddee9db82319c647403ac555c771623cbba5bfee0c198fda8ee67649bf857a37134890a82fefed085f7aa31100850e8d3baaf33b54c7c7db891de8e019d3a31baf13395bcf92c8907b0da9ae30dcdb5bd21b69ccadb33e44a5377f2827e5984afc43df3b3cb272e8c2d2467fe0f80d3644cc494a950cdb6c2966a4cc704d40192cbd2dee0239a17d670347a887a4961ae2e8184c63ac08ead5d2ff17e6776d415832294d8ddc5077b60322fae150ea9f77c23fe9074a229045a02548761ad7d28fdea91c587834992c58cab70826e0d65b21d7d6d688157a7fdf0e5e70299861a8471180d2b3d0e1738af6f47cbd39c71c1b2e11b2cc86b1e05904db1ea46be13c21731739889d9f88769edbbefd242c3392716441d94670227485bdbd07b9b6ffb6f3ce1131b9dfa217d7f435ed4b4ba4d0e60323269bf24bdaf031791599256a0769edaa0d39d36f7a42b6be2a760610a60aa21082535abb0fd9fd3fb696a157033e911c853fb8171897dd433eda5ac1ca0a44ba79198b4a3f2e191854c379e722ca43ae7718cf235f680feb077603701eaf97ade4bd4684109ecac211d7f227404b8c2a15f457a1527dc07a4685daae6b3226acab37d370bbb28c9cd985e689d47ae02171588b1e21b8e1d7b3ed867533d17c6d477ce83b695c170279d55495eced6badeeb32a9abb7108433e4f29f6bc8e0459b4ae9f64f1b7944735265c9fdc03723ffc218b4e638407d0462d08f4e816955102382edf1ebb8bb378f6f560a7c2f42aa5b75f588979e7c0ec3eb41044546dd0dc5006b9686729191f4d50e056a97173f109d88b88c2f70141247dfd69b96b97cee648a65981f4f6539054f4ad5f2dbcd7ca94958165a16fa1f3514617f14aabab5fce9f8d615662be76eda252723a33a8817905ee502e9f26e2fe24db5d1f0b7653a1ed0c4081e38f222516aa7a7e2a767439542dbfcea79d6da90d910df8406859998f217ba4a61291811e8ea76ed81f94faa6b73a9385aa0fcab2d31e10ecfddd81f1c3ed282f17cd1944a222d3b60fc5e3eb8211e4bc9993b73cad385017b6d988fd9ad25780b180a85c20091ce0aa2c65a386ec98e432d49e1fdfc50abd628d662c73acfb21a719bde69d046f0d859b6486a9d5c3b2944f5117377d997c401f373f67e7ea11594ee6fc22c52721a0bdc391af5ce4e652e76a6b0e685c3df9a3ea328f63e09c6d22609e7180f3f4356e6fbf443440f11a7fc4e66511a0070348ec091b3f22a82858f2083ae6037b648a02e576829744ae091bbe89559560ce9bcc53f620ca44384b4c058ec8082c4549c21b2fc3ffab5a9533cc204c8b017ed030482e2bff853d3fc4ad4b23297e7f2070b226febee3806c534c28d261e7f2abde3ad4d052e74823f7ed7d17cc8805cc01e15ad2d92fa51b3d38f33acfb7735649f48a4dd3f6938bbbf8883a63650c0d7bdb7a5a4d9e058c2e138e46b6c8187d9c20551389716a185d729abfe77c15edac88e45583af0e2e8ef1b71972b7896ed7cde3c1d83d88e8e43e04a22b882f6bbaf2b0702b29608344a28b261edccf4022b54943a3190daf87476f81a8595e85f14db7973327ca751748b506d2f52c634d8e7acfe8b8e810e06ba95a3c46bf62a1768302000ee7dd68375da7b6e0cc6b446b4d9f9bb791fee97267fac8876aa7265515ed210c68b549b6bff960d6138def1c9c24b9523cae89e12b4e0962cb1365b1adcf9ba1788e86db9e96ced5dd4dc0fe147c617c596d0fa5be62050a696cb1cc8b036f79ca4747d24a9c2343dba6b90e22dcb5"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r8, 0x2}], &(0x7f0000000180)=[0x48, 0x48, 0x38]}, 0x100000000}}], 0x71, 0x0, &(0x7f0000000280)="95bb15a5510e58c55f9214200b679c2ead232e815ea2290de9c52a840236d72e1d0c132aa49cc3845d2b51fb641f585fd73983c27e43f5b67b8a091b76813f4886c93b6ec96cdd21907fa643a8c082f2854a3347d56aaecde8589c5b3d8b2179ee892771b6f99daac64c46807ea2157c0a"}) 17:26:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) openat$cgroup_int(r2, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000240)=0x8) rt_sigreturn() getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000180)=""/150, &(0x7f00000000c0)=0x96) 17:26:27 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0xe, 0x4810) 17:26:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x800000, 0x0, 0x0, 0x0, 0x0) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='hsr0\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 272.886347] binder: BINDER_SET_CONTEXT_MGR already set [ 272.892534] binder: 8707:8715 ioctl 40046207 0 returned -16 [ 272.905432] binder: 8707:8715 unknown command 0 [ 272.910974] binder: 8707:8715 ioctl c0306201 20008fd0 returned -22 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) fchdir(r0) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_getoverrun(0x0) clone(0x100000, 0x0, 0x0, 0x0, 0x0) [ 272.931751] mmap: syz-executor.5 (8726) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 272.966141] binder_alloc: binder_alloc_mmap_handler: 8707 20ffb000-20ffd000 already mapped failed -16 [ 272.976700] binder: 8707:8733 got transaction to invalid handle 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 272.983615] binder: 8707:8733 transaction failed 29201/-22, size 72-24 line 3118 [ 272.992604] binder: 8707:8733 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 273.001359] binder: 8707:8733 ioctl c0306201 20000100 returned -14 [ 273.008921] binder: 8707:8733 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 273.017140] binder: 8707:8733 got reply transaction with no transaction stack [ 273.026715] binder: 8707:8733 transaction failed 29201/-71, size 24-24 line 3026 17:26:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) r2 = socket(0xe, 0x2, 0x6210) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040084}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20002abd7000fedbdf25070000004c000200080002004e24000008000500f6000000080001000000080003000300000008000800ff0100b9080002004e24000008000800b79e82010800040002000000080003000000000072c46ca5855ffbc7c50000006bbf78ad"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r4 = open(&(0x7f00000002c0)='\x00', 0x200000, 0x84) ioctl$KDDELIO(r4, 0x4b35, 0x33) rename(&(0x7f0000002300)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) sendmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="e6009802b95827a0d242b77a65f6eae95efd768b7a8cf10c75bf0651005d487cdfaaafa64e800103865219011fa63f5eb5b66d5cc750deb26450f4955b072afa466c474eafd301a89cd3cbfd806f790079aab5da6deeadb9cb24ce20b507440af006b499466b800443b4c023c2ec14444ba7a1902b4d5e7630ae9b2acfc8c8cce23f492fc9ccaa9c23e18b52fa9287acae083ec956efe01d4a7d6c4bd4236f387f93b92e7ed6565ad77399871948234fb17127", 0xb3}], 0x1}, 0xc99}], 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffbc, &(0x7f0000000500)=0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 17:26:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2a400) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 273.686386] binder: 8707:8752 tried to acquire reference to desc 0, got 1 instead [ 273.694351] binder: 8707:8752 unknown command 0 [ 273.699032] binder: 8707:8752 ioctl c0306201 20008fd0 returned -22 [ 273.706285] binder_alloc: binder_alloc_mmap_handler: 8707 20ffc000-20fff000 already mapped failed -16 [ 273.716815] binder_alloc: binder_alloc_mmap_handler: 8707 20ffb000-20ffd000 already mapped failed -16 [ 273.726684] binder: 8707:8752 transaction failed 29189/-22, size 72-24 line 3118 [ 273.729358] binder: 8707:8753 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 273.729887] binder: 8707:8753 ioctl c0306201 20000100 returned -14 17:26:30 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$notify(r0, 0x402, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x6) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x24000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) clone(0x8100000, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x8) 17:26:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x41) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r8, 0x2}], &(0x7f0000000180)=[0x48, 0x48, 0x38]}, 0x100000000}}], 0x71, 0x0, &(0x7f0000000280)="95bb15a5510e58c55f9214200b679c2ead232e815ea2290de9c52a840236d72e1d0c132aa49cc3845d2b51fb641f585fd73983c27e43f5b67b8a091b76813f4886c93b6ec96cdd21907fa643a8c082f2854a3347d56aaecde8589c5b3d8b2179ee892771b6f99daac64c46807ea2157c0a"}) 17:26:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:30 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) clone(0x22024000, &(0x7f0000000000)="35001c2cae8421b5b26c51186c2c08c5024b439e9334b9f298a8ceca281707af752141d022709e372e9d34bc43c235b0cace87bc4b47522926c43a41b0eb8ffd8414ce195a7ddd569421b46b47e46936d7ac8ca3267fa3e238ff99a9392e5411b4ec460bcc43dc6b008c4881831e0b2243e028b1d85e6af827f8027324dd0fdb59117e164782b599cdfccbe1c2faf4634ddda531b8573089324a4748c539113a09b45a2f7f7b548571b3cb0004b8dc23b7d7f7f76245ec9d325eee815cb7", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="cb583f203fe2a8e5eee0b885131958ef7699546e811230179d3e9938c006045e6be8f64b677114ae5a32affb24a23e1a8153d747ca07b2c2e2f85d6ecdd8657337dcc64d43a99ad7beede704b0a6d907a769a0004e248f7e310d90e6ee449ace4c9b8a300a4860f4156fa679d64fc7156c3734414effe17aa472d5b2b9b161078f9ed28ab171d77004badddf51c78522c4b2eb13f89e98cbd2a20c8690dae54bcfc07a7a40f71c33799a97aa2a505e95bb8539b8347ac9eb210e365a2f9ad0187d28d85f7242f9cbcf2854c6a24488f79473de057e5ba6b733b6b11c6e79928d3711a7") [ 275.920225] binder: BINDER_SET_CONTEXT_MGR already set [ 275.933174] binder: 8767:8774 ioctl c0306201 20000100 returned -14 [ 275.940255] binder: 8768:8772 ioctl 40046207 0 returned -16 [ 275.943201] binder: 8768:8772 Acquire 1 refcount change on invalid ref 0 ret -22 [ 275.944202] binder: 8768:8772 unknown command 0 17:26:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) tkill(r2, 0x3a) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x70ed, 0x20000) clone(0x2080000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000001c0)={@loopback, 0x79, r4}) [ 275.944302] binder: 8768:8772 ioctl c0306201 20008fd0 returned -22 [ 275.988348] binder: 8767:8783 ioctl c0306201 20000100 returned -14 [ 275.994244] binder_alloc: binder_alloc_mmap_handler: 8768 20ffb000-20ffd000 already mapped failed -16 [ 275.994608] binder: 8768:8786 got transaction to invalid handle [ 275.994617] binder: 8768:8786 transaction failed 29201/-22, size 72-24 line 3118 [ 275.995388] binder: 8768:8786 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 275.995403] binder: 8768:8786 ioctl c0306201 20000100 returned -14 [ 275.995591] binder: 8768:8786 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 275.995847] binder: 8768:8786 got reply transaction with no transaction stack [ 275.995854] binder: 8768:8786 transaction failed 29201/-71, size 24-24 line 3026 [ 276.060781] binder: undelivered death notification, 0000000000000000 17:26:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000000000000000e6ffff0600"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400000000000000000"], 0x0, 0xfffffdfd, 0x0}) [ 276.069374] binder: undelivered death notification, 0000000000000000 17:26:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000180)=r3) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x0, 0x1) [ 276.114983] binder: 8793:8796 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 0006ffffe6000000 [ 276.131358] binder: 8793:8796 ioctl c0306201 20000100 returned -14 [ 276.143855] binder: 8793:8796 tried to acquire reference to desc 0, got 1 instead [ 276.153780] binder: 8793:8800 unknown command 536872576 17:26:30 executing program 0: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x9, 0x2e8f}) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 276.153789] binder: 8793:8800 ioctl c0306201 20008fd0 returned -22 17:26:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024102, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) 17:26:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='vmnet1\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 276.257466] binder: 8805:8817 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 276.271008] binder: 8805:8817 ioctl c0306201 20000100 returned -14 [ 276.278580] binder: 8805:8817 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 276.997253] binder: 8805:8824 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 277.005699] binder: 8805:8824 ioctl c0306201 20000100 returned -14 [ 277.012495] binder: 8805:8817 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:33 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0xfffffffffffffec4, &(0x7f0000000400)={0x0, 0x0}}, 0x66) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r3, 0x1, 0x10}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, [@call={0x85, 0x0, 0x0, 0x34}, @ldst={0x3, 0x3, 0x0, 0xb, 0x3, 0x22, 0xfffffffffffffffc}, @jmp={0x5, 0xff, 0x7, 0xf, 0x1, 0xfffffffffffffffc}, @map={0x18, 0x0, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x36}, @alu={0x7, 0x1, 0xf, 0x8, 0x5, 0x50, 0x1c}, @map={0x18, 0x8, 0x1, 0x0, r2}, @ldst={0x3, 0x3, 0x2, 0x7, 0xf, 0x0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xa7, &(0x7f00000004c0)=""/167, 0x41f00, 0x1, [], r4, 0x2}, 0x48) 17:26:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) syncfs(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)="4e2d985b3beea3efd141f9106515bc1bd764e9211eb7958a319e4255d324be604f90e75e904622619467796c6022a063851b00683ba834f055565a8de2e75fd006c5f55653d0f38b70731aa22a71444053c54135c0e16227e275ea4f556a23ebd7ad47e0d6aedd2e18ccff77091414899b53a10e354c9ac6a095", 0x7a) 17:26:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r8, 0x2}], &(0x7f0000000180)=[0x48, 0x48, 0x38]}, 0x100000000}}], 0x71, 0x0, &(0x7f0000000280)="95bb15a5510e58c55f9214200b679c2ead232e815ea2290de9c52a840236d72e1d0c132aa49cc3845d2b51fb641f585fd73983c27e43f5b67b8a091b76813f4886c93b6ec96cdd21907fa643a8c082f2854a3347d56aaecde8589c5b3d8b2179ee892771b6f99daac64c46807ea2157c0a"}) 17:26:33 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3ff, 0x28, 0x1, 0xffffffffffffffff}) fadvise64(r0, 0x0, 0x3, 0x5) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) getdents64(r3, &(0x7f0000000200)=""/252, 0xfc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3, 0x3}], 0x0, 0xfffffdfd, 0x0}) 17:26:33 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x5a1102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000040)=0x100, 0x4) 17:26:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x800e00, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x400080000801, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x2000000200800, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) openat$cgroup_subtree(r2, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000005700)=0xe8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0xb21, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = geteuid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4, 0x2, 0xff, 0x4, 0x7fffffff, 0x400}, &(0x7f00000003c0)=0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005740)={{{@in6=@empty, @in=@multicast2, 0x4e23, 0x0, 0x4e22, 0x74, 0x2, 0x20, 0xbcd5ccfa567519a0, 0x21, r4, r6}, {0x9, 0x5, 0x81, 0x80000001, 0x10000, 0x2b35, 0x4, 0x3}, {0x3f, 0x2, 0x3, 0x5}, 0x100, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in6=@rand_addr="9ea720ddd47d6406b1ece6cbd5e9d776", 0x3506, 0x1, 0x0, 0x7, 0x4, 0x3, 0x8}}, 0xe8) [ 278.944371] binder: 8833:8841 unknown command 8 [ 278.949927] binder: 8833:8841 ioctl c0306201 20008fd0 returned -22 [ 278.956537] binder: 8834:8839 unknown command 0 [ 278.956545] binder: 8834:8839 ioctl c0306201 20008fd0 returned -22 17:26:33 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="7fcff73ee6f6324ac2546d2df795dc6fa864035bf1b383a6ad5f00bcd7f8bdb885c09ed1ae588bfc25f734ae4371b2dfd32850ec34924948ca13f8ecd7b8d1b7e064beaee7db0a0c9bbbb80f22e9aae36523dca1db8346535518e2e71f7dced2c6d6902f4322855f89cffa0b10894867bcd77e406ba9e095880f22051f710a5a8a2c5517934d0070c6c8580e36a12b71a25f66ad52aee2f9f9555dc358560f04c0303ba6afb15f1ff7d9510e56ce8c74e627c13df75f6e9b38ef2cc941f72973624302a01b068dc7b0bf17785771eff321a60966b4b7806b42640c5b1c", 0xdd, 0xfffffffffffffffe) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0)={r4, 0x1000, 0x74d}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'wp256\x00'}}, &(0x7f0000000380)="3d1cf4a58093653628befc44198e5ac48273d9d4640921ed3ee32fe62ae41e5bb0c30f58d81bbaa29609984f6f26aa3af9517ec3e5e1d47e7b8ecd4dd46e4cd575c9c277d78f64c8f3050380bac69e44a0f108a196f20f066e44000bc70ce018bf54e053fbc2e7f16914de485d2682cd7f82e0f14719d42d9acfe6a41e27ef4a06467abab1fc3f49d8f50c12", &(0x7f0000000440)=""/84) pipe(&(0x7f0000000080)) [ 279.010019] binder_alloc: binder_alloc_mmap_handler: 8834 20ffb000-20ffd000 already mapped failed -16 [ 279.030564] binder: 8834:8857 got transaction to invalid handle [ 279.036953] binder: 8834:8857 transaction failed 29201/-22, size 72-24 line 3118 [ 279.044769] binder: 8833:8858 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:26:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20004000, 0x0, 0x0, 0x0, 0x0) [ 279.044798] binder: 8833:8858 ioctl c0306201 20000100 returned -14 [ 279.053319] binder: 8833:8858 ioctl 40042409 0 returned -22 [ 279.053431] binder: 8833:8858 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 279.082664] binder: 8834:8863 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 279.092806] binder: 8834:8863 ioctl c0306201 20000100 returned -14 [ 279.116208] binder: 8834:8857 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 279.125813] binder: 8834:8857 got reply transaction with no transaction stack [ 279.135265] binder: 8834:8857 transaction failed 29201/-71, size 24-24 line 3026 17:26:34 executing program 5: clone(0x100100, 0x0, 0x0, 0x0, 0x0) eventfd(0x170) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80001, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sendto$inet(r0, &(0x7f0000000140)="e625fe228c63c47a0285367c3b7bbbb8524bb612a1511151359aa01012fe1720e8f41a0536b3b6b489ee6fe0ccb8feadcde3af7c2ce7ef35d88e4947cdda12408be681ec", 0x44, 0x4080, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80, 0x80000) unshare(0x42000400) r2 = fcntl$dupfd(r1, 0x406, r0) shutdown(r2, 0x1) 17:26:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r8, 0x2}], &(0x7f0000000180)=[0x48, 0x48, 0x38]}, 0x100000000}}], 0x71, 0x0, &(0x7f0000000280)="95bb15a5510e58c55f9214200b679c2ead232e815ea2290de9c52a840236d72e1d0c132aa49cc3845d2b51fb641f585fd73983c27e43f5b67b8a091b76813f4886c93b6ec96cdd21907fa643a8c082f2854a3347d56aaecde8589c5b3d8b2179ee892771b6f99daac64c46807ea2157c0a"}) [ 279.741620] binder: 8833:8858 unknown command 536872576 [ 279.748984] binder: 8833:8858 ioctl c0306201 20008fd0 returned -22 [ 279.762100] binder: 8833:8881 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 279.762126] binder: 8833:8881 ioctl c0306201 20000100 returned -14 [ 279.762240] binder: 8833:8881 ioctl 40042409 0 returned -22 [ 279.811846] binder: 8882:8885 unknown command 0 [ 279.819599] binder: 8882:8885 ioctl c0306201 20008fd0 returned -22 [ 279.890821] binder_alloc: binder_alloc_mmap_handler: 8882 20ffb000-20ffd000 already mapped failed -16 [ 279.914222] binder: 8882:8888 got transaction to invalid handle [ 279.929276] binder: 8882:8888 transaction failed 29201/-22, size 72-24 line 3118 [ 279.944548] binder: 8882:8888 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 279.952948] binder: 8882:8888 ioctl c0306201 20000100 returned -14 [ 279.963784] binder: 8882:8888 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 279.978450] binder: 8882:8888 got reply transaction with no transaction stack [ 279.985861] binder: 8882:8888 transaction failed 29201/-71, size 24-24 line 3026 17:26:36 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x119) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x105103, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000280)=""/219, 0xdb}], 0x2, &(0x7f00000003c0)=""/93, 0x5d}, 0x100000001}, {{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/82, 0x52}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/151, 0x97}], 0x5, &(0x7f0000001040)=""/4096, 0x1000}, 0x946}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/144, 0x90}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/70, 0x46}, {&(0x7f0000000b00)=""/192, 0xc0}], 0x5, &(0x7f0000000c40)=""/248, 0xf8}, 0x10001}, {{&(0x7f0000000d40)=@nfc, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)=""/19, 0x13}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/131, 0x83}, {&(0x7f0000000f40)=""/95, 0x5f}], 0x4, &(0x7f0000002040)=""/244, 0xf4}, 0xfff}], 0x4, 0x40000001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r1) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:36 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000780)='./file0\x00', 0x3b) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @multicast2}, &(0x7f0000000940)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000980)='\x00'}, 0x30) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a00)=0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001cc0)={0x0, @empty, @broadcast}, &(0x7f0000001d00)=0xc) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000080)={0x3, 0x1, {0x51, 0x81, 0xff, {0x2, 0x7}, {0x46, 0x7747}, @ramp={0x6, 0x0, {0x1, 0x5, 0x7}}}, {0x56, 0x8ff4, 0x3f, {0x8000, 0x7}, {0x100, 0x6}, @rumble={0x7, 0x10000}}}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/zero\x00', 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/zero\x00', 0x8800, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000001e80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000001f00)=0x80) sendmsg$nl_route(r0, &(0x7f0000002140)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f0000001f40)=@newlink={0x1a8, 0x10, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x8004}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_MAP={0x24, 0xe, {0x3, 0x7, 0xfffffffffffffff8, 0x6, 0x20, 0x7}}, @IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x2}, {0x4, 0x1e}]}, @IFLA_MAP={0x24, 0xe, {0x8001, 0x0, 0x3ff, 0x177234e8, 0x2, 0x9}}, @IFLA_BROADCAST={0xc, 0x2, @remote}, @IFLA_CARRIER={0x8, 0x21, 0x1}, @IFLA_XDP={0x100, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x4c, 0x1, {0x14, 0x1, &(0x7f0000000a80)=@raw=[@generic={0x7f04eb6d, 0x3, 0x80, 0x76, 0x1}], &(0x7f0000000ac0)='syzkaller\x00', 0xffff, 0x1000, &(0x7f0000000b00)=""/4096, 0x41f00, 0x1, [], r5, 0xf}}, @IFLA_XDP_FD={0x4c, 0x1, {0x15, 0x5, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xed5a}]}, &(0x7f0000001c80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, [], r6}}, @IFLA_XDP_FD={0x4c, 0x1, {0x1f, 0x9, &(0x7f0000001dc0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, @map={0x18, 0xf, 0x1, 0x0, r7}, @map={0x18, 0x9, 0x1, 0x0, r8}, @alu={0x7, 0x7, 0xb, 0xf, 0x7, 0x0, 0x4}], &(0x7f0000001e40)='syzkaller\x00', 0xf8f, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xd}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x7}]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x40) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0xb58, 0x9, 0x401, 0xffffffffffffffe0}, {0x3, 0x3b, 0x3e50, 0x1}, {0x0, 0x1, 0xba67, 0x1ff}, {0x80a, 0x81, 0x8, 0x7}, {0x2, 0x3, 0x7f, 0x30}, {0x8, 0xc9b2, 0x58c, 0x8}, {0x20d5, 0x5, 0xffffffff, 0x5a9}, {0x100, 0x3, 0x7, 0x3f}]}) r11 = fcntl$getown(0xffffffffffffffff, 0x9) write$FUSE_LK(r10, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0x2, {{0xffffffff, 0x9, 0x1, r11}}}, 0x28) 17:26:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getparam(r2, &(0x7f00000000c0)) prctl$PR_SET_ENDIAN(0x14, 0x0) 17:26:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r8, 0x2}], &(0x7f0000000180)=[0x48, 0x48, 0x38]}, 0x100000000}}], 0x71, 0x0, &(0x7f0000000280)="95bb15a5510e58c55f9214200b679c2ead232e815ea2290de9c52a840236d72e1d0c132aa49cc3845d2b51fb641f585fd73983c27e43f5b67b8a091b76813f4886c93b6ec96cdd21907fa643a8c082f2854a3347d56aaecde8589c5b3d8b2179ee892771b6f99daac64c46807ea2157c0a"}) 17:26:36 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 281.950462] binder: 8893:8898 ioctl 40047451 20000040 returned -22 [ 281.970366] binder: 8893:8898 ioctl c0306201 20000100 returned -14 [ 281.982295] binder: 8901:8906 unknown command 0 17:26:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1b}, 0x24, r2}) [ 281.982304] binder: 8901:8906 ioctl c0306201 20008fd0 returned -22 [ 282.014926] binder: 8893:8911 ioctl 40047451 20000040 returned -22 [ 282.025878] binder: 8893:8898 ioctl c0306201 20000100 returned -14 [ 282.034821] binder: undelivered death notification, 0000000000000000 17:26:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xf1, 0x0, &(0x7f0000000140)=[@register_looper], 0x179, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 17:26:36 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x121000, 0x100) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x100000000, 0x0, 0x6}, 0xfffffffffffffff9, 0x8, 'id1\x00', 'timer0\x00', 0x0, 0xc23, 0x4, 0x20, 0x9}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) ioctl$TCXONC(r1, 0x540a, 0x5) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x0, 0x6c9b1ead, 0x3, 0x5}, 0x8, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x10001, 0xffffffffffffff00, 0x100000000}) clone(0x24048100, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/205, 0xcd}, {&(0x7f0000001580)=""/173, 0xad}], 0x5}, 0x12041) 17:26:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x4000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) [ 282.043135] binder_alloc: binder_alloc_mmap_handler: 8901 20ffb000-20ffd000 already mapped failed -16 [ 282.043505] binder: 8901:8915 got transaction to invalid handle [ 282.043514] binder: 8901:8915 transaction failed 29201/-22, size 72-24 line 3118 17:26:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x4}, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000140)=[@fda={0x66646185, 0xa, 0x1, 0x40}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @flat={0x73622a85, 0xa, r2}], &(0x7f0000000200)=[0x38]}}, @increfs_done={0x40106308, r3, 0x4}, @increfs={0x40046304, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r5, 0x2}], 0x80, 0x0, &(0x7f0000000380)="22ad790b11548c0d974a3c2d7aed9f7930cf206e9c9813b15c0a014f7867c258c9840782558143cb1f9e9178b2c803bfbe906e6043b10a3c235f46c553775a90f64b4bf512fdfd7420024ec258f8c62b8c7264be7ae2ae18010c16d11b7422e5f96acd853dd9f42e423becb27575e6c0aed32dab1a533bbc9d08b5158d39d751"}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 282.043963] binder: 8901:8915 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 282.043979] binder: 8901:8915 ioctl c0306201 20000100 returned -14 [ 282.044147] binder: 8901:8915 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 282.044332] binder: 8901:8915 got reply transaction with no transaction stack [ 282.044340] binder: 8901:8915 transaction failed 29201/-71, size 24-24 line 3026 [ 282.116638] binder: 8917:8926 ERROR: BC_REGISTER_LOOPER called without request [ 282.116644] binder: 8917:8926 unknown command 0 [ 282.116653] binder: 8917:8926 ioctl c0306201 20000040 returned -22 [ 282.116958] binder: 8917:8926 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 282.117328] binder: 8917:8926 ioctl c0306201 20000100 returned -14 [ 282.117404] binder: 8917:8926 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 282.117868] binder: BINDER_SET_CONTEXT_MGR already set [ 282.117876] binder: 8917:8926 ioctl 40046207 0 returned -16 [ 282.118937] binder: 8917:8926 ERROR: BC_REGISTER_LOOPER called without request [ 282.118943] binder: 8917:8926 unknown command 0 [ 282.118951] binder: 8917:8926 ioctl c0306201 20000040 returned -22 [ 282.154631] binder: BINDER_SET_CONTEXT_MGR already set [ 282.154652] binder: 8931:8935 ioctl 40046207 0 returned -16 [ 282.159952] binder: 8931:8935 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 282.159961] binder: 8931:8935 got transaction to invalid handle [ 282.159972] binder: 8931:8935 transaction failed 29201/-22, size 80-8 line 3118 [ 282.223938] binder: 8931:8937 ioctl c0306201 20000100 returned -14 [ 282.224073] binder: 8931:8935 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 282.224367] binder: BINDER_SET_CONTEXT_MGR already set [ 282.224375] binder: 8931:8935 ioctl 40046207 0 returned -16 [ 282.237805] binder: 8931:8937 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 282.237815] binder: 8931:8937 got transaction to invalid handle [ 282.237825] binder: 8931:8937 transaction failed 29201/-22, size 80-8 line 3118 [ 282.246876] binder: 8931:8937 ioctl c0306201 20000100 returned -14 [ 282.251337] binder: 8931:8939 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 282.383308] binder: undelivered death notification, 0000000000000000 17:26:39 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r1 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f00000001c0)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r4, 0x2}, {r3, 0x1000}, {r4, 0x40}, {r4, 0x1}, {r4}, {r4, 0x4000}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={0x5c}, 0x8) clone(0x2, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 5: r0 = memfd_create(&(0x7f00000000c0)=']selinux^posix_acl_access\x00', 0x2) r1 = dup(r0) ioctl$TIOCNXCL(r1, 0x540d) flistxattr(r1, &(0x7f0000000040)=""/81, 0x51) clone(0x12000, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 17:26:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000340)={@broadcast, @broadcast, r3}, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="01630c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x0, 0x5, &(0x7f00000000c0)='bdev\x00'}, 0x30) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x2, 0x3, 0x9, 0x6, r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f510000000000000000224e000000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400000000000000000"], 0x0, 0xfffffdfd, 0x0}) 17:26:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100000, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) 17:26:39 executing program 5: clone(0x20004, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 17:26:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000240)=""/4096) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/123) r3 = accept(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000180)=0x80) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) [ 284.971540] binder: 8947:8955 unknown command 1074553601 [ 284.979142] binder: 8946:8956 unknown command 0 [ 284.979669] binder: 8946:8956 ioctl c0306201 20008fd0 returned -22 [ 285.003461] binder: 8947:8955 ioctl c0306201 20008fd0 returned -22 17:26:39 executing program 2: socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x26f5b57b7a53fa86, 0x0, 0x0, 0x0, 0x0) [ 285.020937] binder: 8947:8967 unknown command 20751 17:26:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r1, 0x4001}, {r0, 0x400}, {r1, 0x521}, {r1}, {r0, 0x6310}, {r0, 0x2000}, {r1, 0x400}, {r1, 0x8000}], 0x8, &(0x7f0000000140), &(0x7f00000001c0)={0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000240)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000340)=0x1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r5 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x83, 0x6, 0x2, 0x7, 0x0, 0x0, 0x2010, 0x2, 0x0, 0x0, 0x101, 0x0, 0x5, 0xb2ac, 0x6, 0xc7e, 0x0, 0x3, 0x2, 0x4, 0x1, 0x1, 0x101, 0x4, 0x1f, 0xbb9, 0x1, 0x10001, 0x0, 0x8, 0x80, 0x6, 0x1, 0x9b50, 0x8000, 0x1b, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0x3, 0x2, 0x4, 0x7fffffff, 0x0, 0x100000000}, r4, 0xe, 0xffffffffffffffff, 0x2) r6 = fcntl$dupfd(r0, 0x402, r5) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000280)={0x0, 0x0, {0x57, 0x5, 0x3, {0x7fffffff, 0x8}, {0x5, 0x3}, @cond=[{0xd6a, 0x7fffffff, 0x9, 0x9, 0x2, 0x7}, {0x8, 0x8ee, 0x7, 0x6cf0, 0x2, 0x101}]}, {0x0, 0x4, 0x2, {0x1, 0xfffffffffffffc01}, {0x1, 0x42c3c4b8}, @cond=[{0x10000, 0xdc50000000, 0x7, 0x800, 0x9, 0x7}, {0x9, 0x7ff, 0x80, 0x1000, 0xca, 0xd5ea}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x5) clone(0x9180441d, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x80000001, 0x2, 0x7, 0xfc6, 0x15, 0xd48d54d, 0xff, 0x8, 0x3113, 0x5cc}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) r2 = getpgid(0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="260000f5619202ffffffffff0000000000", @ANYRES32=r2, @ANYBLOB='\b\x00vboxnet0'], 0x26) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) write$P9_RSTATu(r0, &(0x7f00000003c0)={0x8d, 0x7d, 0x2, {{0x0, 0x67, 0x10000, 0x9, {0x40, 0x3, 0x7}, 0x2040000, 0x3fd, 0x0, 0x36a, 0x11, '/dev/vga_arbiter\x00', 0x11, '/dev/vga_arbiter\x00', 0x1, '\xbe', 0xfffffe9f, '/dev/vga_arbiter\x00'}, 0x11, '/dev/vga_arbiter\x00', r3, r4, r5}}, 0x8d) [ 285.020947] binder: 8947:8967 ioctl c0306201 20000100 returned -22 [ 285.021019] binder: 8947:8967 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 285.033266] binder_alloc: binder_alloc_mmap_handler: 8946 20ffb000-20ffd000 already mapped failed -16 [ 285.033443] binder: 8946:8971 got transaction to invalid handle [ 285.033453] binder: 8946:8971 transaction failed 29201/-22, size 72-24 line 3118 [ 285.033547] binder: 8946:8971 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 285.033562] binder: 8946:8971 ioctl c0306201 20000100 returned -14 [ 285.033635] binder: 8946:8971 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 285.148804] binder: 8947:8955 tried to acquire reference to desc 0, got 1 instead [ 285.148984] binder: 8947:8967 unknown command 536872576 [ 285.148993] binder: 8947:8967 ioctl c0306201 20008fd0 returned -22 [ 285.164093] binder: 8947:8988 unknown command 20751 [ 285.164101] binder: 8947:8988 ioctl c0306201 20000100 returned -22 17:26:42 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) accept4(r0, &(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000500)=0x80, 0x80800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @empty}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/32, 0x20}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x3}, 0xf800000000000000}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001bc0)=""/168, 0xa8}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/13, 0xd}, {&(0x7f0000002cc0)=""/165, 0xa5}, {&(0x7f0000002d80)=""/136, 0x88}, {&(0x7f0000002e40)=""/219, 0xdb}, {&(0x7f0000002f40)=""/188, 0xbc}, {&(0x7f0000003000)}], 0x8}, 0x80}, {{&(0x7f00000030c0)=@alg, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/199, 0xc7}, {&(0x7f0000003240)=""/112, 0x70}], 0x2, &(0x7f0000003300)=""/34, 0x22}, 0x5}, {{&(0x7f0000003340)=@rc, 0x80, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/239, 0xef}, {&(0x7f00000034c0)=""/241, 0xf1}], 0x2, &(0x7f0000003600)=""/9, 0x9}, 0x1}, {{&(0x7f0000003640)=@hci, 0x80, &(0x7f0000004a00)=[{&(0x7f00000036c0)=""/147, 0x93}, {&(0x7f0000003780)=""/196, 0xc4}, {&(0x7f0000003880)=""/28, 0x1c}, {&(0x7f00000038c0)=""/52, 0x34}, {&(0x7f0000003900)=""/92, 0x5c}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/6, 0x6}, {&(0x7f00000049c0)=""/22, 0x16}], 0x8, &(0x7f0000004a80)=""/26, 0x1a}, 0x2}, {{&(0x7f0000004ac0)=@nfc_llcp, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004b40)=""/146, 0x92}, {&(0x7f0000004c00)=""/17, 0x11}, {&(0x7f0000004c40)=""/19, 0x13}, {&(0x7f0000004c80)=""/232, 0xe8}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004dc0)=""/20, 0x14}, {&(0x7f0000004e00)=""/167, 0xa7}, {&(0x7f0000004ec0)=""/75, 0x4b}, {&(0x7f0000004f40)=""/18, 0x12}, {&(0x7f0000004f80)=""/2, 0x2}], 0x5}, 0x8}, {{&(0x7f0000005040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000050c0)=""/219, 0xdb}, {&(0x7f00000051c0)=""/30, 0x1e}, {&(0x7f0000005200)=""/234, 0xea}, {&(0x7f0000005300)=""/133, 0x85}], 0x4, &(0x7f0000005400)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006400)=@generic, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006480)=""/173, 0xad}, {&(0x7f0000006540)=""/208, 0xd0}, {&(0x7f0000006640)=""/101, 0x65}, {&(0x7f00000066c0)=""/220, 0xdc}], 0x4, &(0x7f0000006800)=""/238, 0xee}, 0x80000001}], 0xa, 0x40000000, &(0x7f0000006b80)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f0000006bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006c00)=0x14, 0x800) accept$packet(0xffffffffffffff9c, &(0x7f0000006e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006ec0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006f40)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000007040)={@initdev, 0x0}, &(0x7f0000007080)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000070c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000071c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007200)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000007300)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007340)={'bpq0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000007380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000073c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000007400)={@multicast1, @remote, 0x0}, &(0x7f0000007440)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24040000}, 0xc, &(0x7f0000007ac0)={&(0x7f0000007480)={0x63c, r2, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x260, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x10001, 0x8, 0x5}, {0x2, 0x2, 0xffff, 0x1}, {0x5, 0x6b77, 0x5, 0xe804}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x48000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1b80000000000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x12c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:26:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0xff, 0x4, 0x1000, 0x6, 0x18, 0x20, 0x2, 0x9, 0xfffffffffffffff9, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100c68d88801710ab544d121"], 0x0, 0xfffffdfd, 0x0}) 17:26:42 executing program 5: clone(0x80208000, 0x0, 0x0, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x88000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000280)=@v2={0x7, 0x3, 0x7, 0x1, 0x24, "a7b3981092f19823d06f7d5ac55494e9356a1060279c49607d6e4f0f484743c9d437ae4b"}, 0x2e, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xd04, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e24, 0x7, @empty, 0x6}, {0xa, 0x4e20, 0x9, @rand_addr="e6edeeb9d20a566813409ccf64085f5d", 0x2e}, 0x9, [0x1, 0x2, 0x5, 0x3, 0x40000000000000, 0x10000, 0x3ff, 0x5]}, 0x5c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) r3 = getgid() write$FUSE_ENTRY(r0, &(0x7f00000002c0)={0x90, 0x0, 0x1, {0x6, 0xa, 0xfff, 0x1, 0x7fff, 0x0, {0x6, 0x401, 0x101, 0x7ff, 0x1e43, 0xff, 0x9, 0x8, 0xffffffffffff1569, 0x1bb, 0x1, r2, r3, 0x2, 0x100000001}}}, 0x90) write$FUSE_CREATE_OPEN(r0, &(0x7f00000001c0)={0xa0, 0x0, 0x8, {{0x3, 0x1, 0x4, 0xa9, 0xff, 0x80, {0x6, 0x5, 0x8000, 0x1, 0xc0, 0x100000001, 0xee9, 0x3ff, 0x200000002000000, 0x2, 0x0, r2, r3, 0x9, 0x4}}, {0x0, 0x3}}}, 0xa0) 17:26:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="978689276512b5da15206b6810e1a7c2f172e66e4e7690d061da43f2117c0ec5e7c8b74a6bdf835cbd4e1ef540bc4aa6129838bab81152cda47962580b9d1a8cea4cf04a888e3ee2f01d4c9f89bc002cee970d818f7baca1cf442c5467a78534334dc4f1df87df338466009322e7a219fa49c2fd5a17f3335bb44908c268cf4ee95a605882317d6f97d373eae7f878c81aca6f315f6b502721d4ace4ff6c502987805dca6d2dd3863191d7334f345e26a42854da142741fd2517ac0f59ab75202bb79d862f82983c94f60ae1c32c1e257d73b200a23cc71168a320d66f1c0cdbd9182005fc0079a6e846d0a651dd0ffbf29a0f7f63ada79c276f4d87ed396d832beaee793ca7709a0369b319aab080ec9518042c3ce11c1c150fa205758a9b3aa7a99aa98bdc574ab6b8a217b09a5c78ba7951318b4e1a7b3612a18d097fd65dd7d73404b5946706f2e472e69b24f5b7cb470e1a9a9e8ca0e07f04b6808033243adecb36ee7908d263b5e299b8dfe9a57e0fda514bb23daca1f1daf6ba8eefb60bc519e46919d4293ecbcb09cac1a05c450a40892602d50b4d09ea18e20cfe7d303c4d0afc8c520866ab8c7d1b343eb29784c06f24695e366c30644b2a65a5ad640842f85966fe8f7d4b843eb40338df7bc8587094004a7ed6055ccc48971e82580ff39e22304e7b5576ec60a82036c191e3bedc43c71c662c0c3d3fa5e46e1643641208133da43dea949fec12493a9f1e7a4342f46c283c0048695adaa4dcf83a7662e11b14c6fdbea8890897c55a98e52a66519d69882e51f02d5e962be6b2df785a0d52dc4342f352520c12340d650ec5f26286c6705f0211f0789f3b738d3e546e732d4f79a2c04be7159827422596204c1aad7f496aada7a7f415c6a4d06d35594530cf0ffbfbbfe61bb30435014e4380d2f6bce778a2a124d6a6e44d8ba93555c91865e4c6299aa974d5e239ec153dbddc85a92e214d9200f324a06871ff5b76a0f7049ce29c6cc48732cd7ea0f626069c0f4d995944c75346a784522239db21dba2116fe15149f044c5c160384dc841520a7258704f025aebcdf84abd41eeae2b0a174e4ef804408d73040a133f973e272f553bc95596a3f997886a6557bb0073c58ca9bc330b2a2d87f8c95a6bec76041de3252fa1de7ff925a3a034b0062f6251160f707422967e3ba527d84ceff8bebbfa796ab241d93f4580b83950fc3f2e0af76073c9b52b9a29202709a54380aa544a6c8eb163515d9f3362e9cf31cad8f705c900224fbf588e713f5e4abf66e4944b4a450d9c4df09b89610dd9834835665dc2da5d1587bffa9b9c19d2b750ef67a405c5452e5029f4080773cae174ac568e7b91d72f2bb8d20d46e680d9adc25335b13ed477637e1521848965100b70b6e477d8250fd01d0747e1972d7a6547dd771dbdea3c62d351c33e90749ad23ddf5c7abf1cdc7f761f0baae142025ed294684dba7f5c4f6bf218b26f1b818f988d2ee4b914d9d557fdd067e52eaf2b95740f0b80c18fd773c5a57a226a5f8b98356c5e7ba58d3f28195b6531186ee3732a6e7d3c7db2613c63aabc6a3c5ef80cfb5f3863fe522dec897f20d6b3943e339b323461bc3310053f0618617f07249cbe1b482a373a6be823f9cb4714358267417f331bf050ad558474241ed7a5cdb9c1d78d3e975fa96025a9ef6fd2cbe5cffcd7bcc5eb4d8d27fa6e28db6d412a7d3fe046c6102d43e850372e9d9317fc212ba0f828397e23407f76deb31cda1fde926230acfdbb9316824a23d3cde6e3012c9e5d1a7a49e6770255d38acc83437eadc23d475793b138b68aaf54ce317758e60d7ec7511dcfa317887daa3db9a355d7314be92743e3813871b8a896211e9fe52787298068207cdc4ff2a1c14f8bcda7e4f05dcab2d49c3426ddc8ebabb2950b8eddae7d00790c206419a620c699ed8a79bd7540be3fd5416ebdfb027a85276137298dfaa24cc574f4e57792b40803c045ee676ce76097fd0860844ef60c4280e44aea09b734908cc32d7b4e4498d47e51f0a83d87cee9fbab4c700dcf6388b33a424080719fefe1dde2406c12faefc75c4b857b17e8b7482277ce1eeeeb7fc7ab6ff829628ae21cb321fdce5eeff327f4a01b78f8d7b2b2bed5297383beb329dda83d484aab2ea0e458fc56161c4a5eef78ba2f0209e1129f6ea6421d72aa23b2878375a8bda641bdfd7a3542ddcde6629f55f77cd5a2b15d6ffd84ea7bf68a886f1f618ac1f9a3bcfa1eb9a192d5845cffad38508627c4bde7201b26976945c4a1db9a2d86255f72b65262bee891f1854dfa8afc779918cb455ba97e982e56d8343dd28f2932eef3ddd97d9213135646f03e67cffa4995dcda1427be4a7c13cbc5b0f7435a263c782bcbe3d98f42afde60f07849df4eecf1f545ea31b7c343fb8d6e5b9fc43193b81689cf06dc5fe8ec9e4193ae5d296f01b496d5aa459521fcbe07b88b1c27bd6084f6d5438aaa9a10d5a633954baddce7fa353251c531725a10916b254e5b27d6ddaccf403c808bb71c409df2abd0d78f542ac73be518211bb46407bc29044f3b7adbe76d9ab28b6a7998b0b9910ddd6f5b91923164096ddf8bd8d41bbd541990118bd8a3c80d59bb346ddaf4a04444c690c8059ca2be73e1777af71ec7887d9848b3a35fa4442b820cf96e4b653caf0fc78584d916cf9f6f4d9e175aa08e21957682144cd47060a1c25b80b61162a3a79b73fa9c32f93ade6f70a6884cd698887d9b63b38bf16003299063cce08e4c1a401776956e9ad08c8dddf1f15600b20598150b841e423c0171cd2c9b75059f50b41804552e3e96117a98e3df73d21d5479474bddae06da0f642aef192319301de4d2ede1860b8fe5fadf5d6726d8710a63487acb26438263034e183a0f4a067447eb7c32c9f0bbcdf89cb13de18caeb9d0c03dc12aad756ca12f7bf0737126c60998cad3ed625dfb62a3fb3b9cadc0ff6c29ef81248bfd0efb03d1abcd7013eeb9850e9757f2ea01f87db8852241289cc3e6de21e601adec9ba67c00ffda27eb3e8ad1160ac8f7b30682a22bf1a7f9ac8afcc761a7fd313ec5441becfd52ec9093fa6d90425ef9d0c123e642afb41f9ec655158c71b6563a8ba8c12daf11937fa899c2fb1cd1b601dfc3bde9f14001036ca3d55f2760201e8618da688a6ecbf7614194a4b3751a703e435d56cd64f87d2931ab176884848650e168dd2809aef768a1059559c1d2a0c05c6e493f5f925ce8c8ab7c2435eaefd572283cb513c9674f4d7a318e6a3f0fd15feedd6ba2021cfd16f15892b1dd590e8b4b0f66508d624fa56b83574ba933745aba971831d2aabddfdc557e887233a1953946e97895bb359f7bb4b297e60e9f66291f06f446f09b88c54b17e2aa064196706356fad17cc78b21c339071d6150a363a6044e16a2c726f86bc89532704cb73b3439cf16543d1c2e2c6b14ddbc16995fd94116e2fd1c6b9e369e9b192e3d9b178786f47baf66cbf1b84be598cdb482c789b52da9db334bf8673f4854c2fb4e0f2325a04fc888f07dec2ec6d06dbd9d737bf6ac04427a768d68151316dcccbff96fb9710b94f124cddd10a262f4f7f669b5b3c1912b93cc549086b9c5fb3023284fd88b7ad3735f5d1a17f4c177cdc7647e3c6718627d5bd29973ca6cb0ddfefa63e20bf3b735016b1f9628c257f2f16abfe183a407a99a831989325b0d5e6373deb1484eb77caac162600d6d6d12fffc5f1e5b82f804af6aa2f735fbea5cb8a038690d688ddb17bb8e3cd2afa2a3f3d351ef04b3a13d044d4b70ae74be91cb93d7182b15203b91f9e5ce2590941447f2d8e2face837e2c9d53b86923d8bfe7442d4955059c822b03f528899c12acf5213ac8af903f9544edd8b9f9d133733083c663dd18e8660461022f37fb5a459e7a01ca1e4ddac5505224ea600495b2d98a70cee33d983ce706d0c70ee3d7ffb201a924d80fd2e906b13f9466ddee9db82319c647403ac555c771623cbba5bfee0c198fda8ee67649bf857a37134890a82fefed085f7aa31100850e8d3baaf33b54c7c7db891de8e019d3a31baf13395bcf92c8907b0da9ae30dcdb5bd21b69ccadb33e44a5377f2827e5984afc43df3b3cb272e8c2d2467fe0f80d3644cc494a950cdb6c2966a4cc704d40192cbd2dee0239a17d670347a887a4961ae2e8184c63ac08ead5d2ff17e6776d415832294d8ddc5077b60322fae150ea9f77c23fe9074a229045a02548761ad7d28fdea91c587834992c58cab70826e0d65b21d7d6d688157a7fdf0e5e70299861a8471180d2b3d0e1738af6f47cbd39c71c1b2e11b2cc86b1e05904db1ea46be13c21731739889d9f88769edbbefd242c3392716441d94670227485bdbd07b9b6ffb6f3ce1131b9dfa217d7f435ed4b4ba4d0e60323269bf24bdaf031791599256a0769edaa0d39d36f7a42b6be2a760610a60aa21082535abb0fd9fd3fb696a157033e911c853fb8171897dd433eda5ac1ca0a44ba79198b4a3f2e191854c379e722ca43ae7718cf235f680feb077603701eaf97ade4bd4684109ecac211d7f227404b8c2a15f457a1527dc07a4685daae6b3226acab37d370bbb28c9cd985e689d47ae02171588b1e21b8e1d7b3ed867533d17c6d477ce83b695c170279d55495eced6badeeb32a9abb7108433e4f29f6bc8e0459b4ae9f64f1b7944735265c9fdc03723ffc218b4e638407d0462d08f4e816955102382edf1ebb8bb378f6f560a7c2f42aa5b75f588979e7c0ec3eb41044546dd0dc5006b9686729191f4d50e056a97173f109d88b88c2f70141247dfd69b96b97cee648a65981f4f6539054f4ad5f2dbcd7ca94958165a16fa1f3514617f14aabab5fce9f8d615662be76eda252723a33a8817905ee502e9f26e2fe24db5d1f0b7653a1ed0c4081e38f222516aa7a7e2a767439542dbfcea79d6da90d910df8406859998f217ba4a61291811e8ea76ed81f94faa6b73a9385aa0fcab2d31e10ecfddd81f1c3ed282f17cd1944a222d3b60fc5e3eb8211e4bc9993b73cad385017b6d988fd9ad25780b180a85c20091ce0aa2c65a386ec98e432d49e1fdfc50abd628d662c73acfb21a719bde69d046f0d859b6486a9d5c3b2944f5117377d997c401f373f67e7ea11594ee6fc22c52721a0bdc391af5ce4e652e76a6b0e685c3df9a3ea328f63e09c6d22609e7180f3f4356e6fbf443440f11a7fc4e66511a0070348ec091b3f22a82858f2083ae6037b648a02e576829744ae091bbe89559560ce9bcc53f620ca44384b4c058ec8082c4549c21b2fc3ffab5a9533cc204c8b017ed030482e2bff853d3fc4ad4b23297e7f2070b226febee3806c534c28d261e7f2abde3ad4d052e74823f7ed7d17cc8805cc01e15ad2d92fa51b3d38f33acfb7735649f48a4dd3f6938bbbf8883a63650c0d7bdb7a5a4d9e058c2e138e46b6c8187d9c20551389716a185d729abfe77c15edac88e45583af0e2e8ef1b71972b7896ed7cde3c1d83d88e8e43e04a22b882f6bbaf2b0702b29608344a28b261edccf4022b54943a3190daf87476f81a8595e85f14db7973327ca751748b506d2f52c634d8e7acfe8b8e810e06ba95a3c46bf62a1768302000ee7dd68375da7b6e0cc6b446b4d9f9bb791fee97267fac8876aa7265515ed210c68b549b6bff960d6138def1c9c24b9523cae89e12b4e0962cb1365b1adcf9ba1788e86db9e96ced5dd4dc0fe147c617c596d0fa5be62050a696cb1cc8b036f79ca4747d24a9c2343dba6b90e22dcb5"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2020c0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)={0xe, 0x1, 0x2, 0x800, 0xb3, "d7e1cf613d7cbabad50024236d35e80413ee80fdd6cc02218648921ca5323c8fa4c81526ea2599c60487a1eb6f41d4ca7f189403dafef64650bcc4457f83ebf110b500efd91abbf63e4c5ed5e5bfd0b7ff2d99d200616ac4973b3a0772322ecad369ea5d73518cf8232ccaaf279fa7eac6172f08a4455f6ee17f0ee2021b0e2b9c52f54a7780ec4cd1339ac007a55edf5366f83348833d1a3463bf984dfb26129a3c6930ca50b5956dad8723f0bb8ceb6427f0"}, 0xbf) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e010040010f7300008f61211a82e21cbc1da05bec0f585eb0828f5e559958e62fac52dcf31500263dca6e5db73964b73c9950d49b5c8342071175973eb3c069916eb7a673833d36d533d8dde3ad73997fb9490b9506d0d6797151bce8010be9841c99f95d9b6c307a3283bd4a2fe214675e627f47674546785dcbdba6089ebbf86179e9e6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) r4 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x9, 0x3, 0x2, 0x6702, 0x1}) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x1, 0xa2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 288.007517] binder: 9005:9008 unknown command 0 [ 288.015257] binder: 9009:9014 ioctl c0306201 20000100 returned -14 [ 288.015324] binder: 9009:9014 ioctl 5408 20000040 returned -22 [ 288.015396] binder: 9009:9014 unknown command -664269808 17:26:42 executing program 5: clone(0x401, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) [ 288.015404] binder: 9009:9014 ioctl c0306201 200005c0 returned -22 [ 288.023234] binder: 9009:9014 tried to acquire reference to desc 0, got 1 instead 17:26:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000022c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002340)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000032c0)="c8aeb64199e2e16ee7daf04ae9873682", 0x10) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffff9c) preadv(r2, &(0x7f0000003240)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/39, 0x27}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/50, 0x32}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x8, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) close(r0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000002240), &(0x7f0000002280)=0x8) lseek(r2, 0x0, 0x3) [ 288.024087] binder: 9009:9014 unknown command 536872576 [ 288.024096] binder: 9009:9014 ioctl c0306201 20008fd0 returned -22 [ 288.024217] binder: 9009:9015 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 288.024230] binder: 9009:9015 ioctl c0306201 20000100 returned -14 [ 288.024299] binder: 9009:9014 ioctl 5408 20000040 returned -22 [ 288.024324] binder: 9009:9015 unknown command -664269808 [ 288.024332] binder: 9009:9015 ioctl c0306201 200005c0 returned -22 [ 288.024540] binder: undelivered death notification, 0000000000000000 [ 288.067017] binder_alloc: binder_alloc_mmap_handler: 9005 20ffb000-20ffd000 already mapped failed -16 [ 288.067218] binder: 9005:9022 got transaction to invalid handle [ 288.067228] binder: 9005:9022 transaction failed 29201/-22, size 72-24 line 3118 [ 288.067326] binder: 9005:9022 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 288.067344] binder: 9005:9022 ioctl c0306201 20000100 returned -14 [ 288.067434] binder: 9005:9022 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) [ 288.104337] binder: 9023:9026 unknown command 1073742094 [ 288.104346] binder: 9023:9026 ioctl c0306201 20008fd0 returned -22 [ 288.163295] binder: 9023:9036 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 288.163313] binder: 9023:9036 ioctl c0306201 20000100 returned -14 [ 288.163608] binder: 9023:9036 ioctl 401070c9 20000040 returned -22 [ 288.164181] binder: 9023:9036 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 288.311073] binder: 9005:9008 ioctl c0306201 20008fd0 returned -22 [ 288.358525] binder: 9049:9050 unknown command 0 [ 288.364069] binder: 9049:9050 ioctl c0306201 20008fd0 returned -22 17:26:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x80000000) [ 288.421105] binder_alloc: binder_alloc_mmap_handler: 9049 20ffb000-20ffd000 already mapped failed -16 [ 288.431612] binder: 9049:9052 got transaction to invalid handle [ 288.437904] binder: 9049:9052 transaction failed 29201/-22, size 72-24 line 3118 [ 288.446898] binder: 9049:9052 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 288.458491] binder: 9049:9052 ioctl c0306201 20000100 returned -14 17:26:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x5, 0x0, 0x8}, 0x2}}, 0x18) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x141000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000080)={0xffffffffffffff81, 0x77, 0x1, 0x401}, 0xb) [ 288.868527] binder: 9023:9036 tried to acquire reference to desc 0, got 1 instead [ 288.876933] binder: 9023:9036 unknown command 1073742094 [ 288.883045] binder: 9023:9036 ioctl c0306201 20008fd0 returned -22 [ 288.889947] binder: 9023:9073 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 288.897245] binder: 9023:9036 ioctl 401070c9 20000040 returned -22 17:26:45 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4027ffd, 0x0, 0x0, 0x0, 0x0) 17:26:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000000000000000000008d1bcc978fcc15f9098b46f15e0dccb70b30b9c66326606e4dfc3ec0a05874ad8c92709ca9047ca236e6cfc07d2f34eccd22e853a5c61f9a3564529beb0fdfd683c70245faf5074d8fa9dcf9595d1710"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x708, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c400100000002000000000000000b63000001634040000000000000000001000000000000000000000001000000000000000000000038000000000000001000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000000400000000000000852a6873b89dd9f7", @ANYRES64=r3, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="78000000000020000010000000000000"], @ANYBLOB="1063084004000000000000000b6300000e630c4002000000040000000000000004630440040000000e630c40060000000300000000000000"], 0x1000, 0x0, &(0x7f0000001040)="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"}) 17:26:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xac, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)=[@flat={0x776a2a85, 0xa, r3, 0x4}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @flat={0x77682a85, 0x100, r4, 0x1}], &(0x7f0000000400)=[0x20, 0x30, 0x40]}}, @increfs, @exit_looper, @free_buffer={0x40086303, r5}, @dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000480)=[@flat={0x77622a85, 0x100, r6, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x14}, @flat={0x776a2a85, 0xa, r7, 0x2}], &(0x7f0000000500)=[0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) 17:26:45 executing program 5: clone(0x7ffffd, 0x0, 0x0, 0x0, 0x0) 17:26:45 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0xfd9b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 291.015287] binder: 9088:9092 unknown command 0 17:26:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x100000000, 0x1}, {0xe5, 0x8}]}, 0x14, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 291.021401] binder: 9087:9094 ioctl c0306201 20000100 returned -14 [ 291.064618] binder: 9087:9094 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 291.064626] binder: 9087:9094 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 17:26:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000200)={0x7fff, 0x9, 0xbc, 0x4, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000000000"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x7, &(0x7f0000000040)={0x6, 0xbe}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) fchdir(r2) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 291.064634] binder: 9087:9094 got reply transaction with no transaction stack [ 291.064643] binder: 9087:9094 transaction failed 29201/-71, size 56-16 line 3026 17:26:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x109480, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@empty, @broadcast}, &(0x7f0000000100)=0xc) [ 291.068292] binder_alloc: binder_alloc_mmap_handler: 9088 20ffb000-20ffd000 already mapped failed -16 [ 291.069704] binder: 9088:9106 got transaction to invalid handle [ 291.069912] binder: 9088:9106 transaction failed 29201/-22, size 72-24 line 3118 [ 291.076799] binder: 9087:9094 tried to acquire reference to desc 0, got 1 instead [ 291.085361] binder: 9087:9094 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 291.093178] binder: 9087:9107 ioctl c0306201 20000100 returned -14 [ 291.101690] binder: 9087:9107 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 291.101710] binder: 9087:9107 ERROR: BC_REGISTER_LOOPER called without request [ 291.101720] binder: 9087:9107 got reply transaction with no transaction stack [ 291.101730] binder: 9087:9107 transaction failed 29201/-71, size 56-16 line 3026 [ 291.101969] binder: undelivered death notification, 0000000000000000 [ 291.141167] binder: 9113:9115 unknown command 262144 [ 291.141176] binder: 9113:9115 ioctl c0306201 20008fd0 returned -22 [ 291.141877] binder: 9113:9115 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 291.141892] binder: 9113:9115 ioctl c0306201 20000100 returned -14 [ 291.141963] binder: 9113:9115 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 291.149142] binder: 9113:9115 tried to acquire reference to desc 0, got 1 instead [ 291.150292] binder: 9113:9115 unknown command 262144 [ 291.150301] binder: 9113:9115 ioctl c0306201 20008fd0 returned -22 [ 291.150501] binder: 9113:9116 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 291.150516] binder: 9113:9116 ioctl c0306201 20000100 returned -14 [ 291.200043] binder: 9118:9121 ioctl 80086601 20000040 returned -22 [ 291.200621] binder: 9118:9121 unknown command 0 [ 291.200628] binder: 9118:9121 ioctl c0306201 2000dfd0 returned -22 [ 291.201946] binder: 9118:9121 ioctl c0306201 20000100 returned -14 [ 291.202028] binder: 9118:9121 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 291.211439] binder: 9118:9121 tried to acquire reference to desc 0, got 1 instead [ 291.213628] binder: 9118:9122 ioctl 80086601 20000040 returned -22 [ 291.213952] binder: 9118:9122 unknown command 0 [ 291.213960] binder: 9118:9122 ioctl c0306201 2000dfd0 returned -22 [ 291.214082] binder: 9118:9121 unknown command 536872576 [ 291.214090] binder: 9118:9121 ioctl c0306201 20008fd0 returned -22 [ 291.219427] binder: 9118:9121 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 291.219445] binder: 9118:9121 ioctl c0306201 20000100 returned -14 [ 291.222855] binder: 9118:9122 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 291.223328] binder: undelivered death notification, 0000000000000000 [ 291.451802] binder: 9088:9092 ioctl c0306201 20008fd0 returned -22 17:26:48 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000040)='bond_slave_0\x00'}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x6851cc59, 0x9, 0x2, 0x0, 0x3, 0x2100, 0xd, 0x400, 0x9, 0x400, 0x6, 0x9, 0x0, 0xd8e, 0xffffffff, 0x3, 0x100, 0x0, 0x8, 0x6, 0x5, 0x80000001, 0xb, 0x7, 0x6, 0x66d1, 0x0, 0x1, 0xa9a, 0x2, 0xfffffffffffffffc, 0x6, 0x400, 0x4876, 0x7, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x7000000000000, 0x1, 0xe, 0x80000000, 0x1ff, 0xfffffffffffffc01}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:48 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0x8, 0x442, 0x4, 0x240}, {0x294, 0x0, 0x80000001}, {0x8, 0x5, 0x4, 0xffffffffffffffff}, {0x8, 0x3, 0xffffffffffffffff, 0x4}, {0x9, 0x1ff, 0x1, 0x8000}]}, 0x10) clone(0x10000700240ff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x3, r2}) 17:26:48 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x50000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 17:26:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:26:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffd) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 294.044962] binder: 9141:9143 unknown command 0 [ 294.058242] binder: 9141:9143 ioctl c0306201 20008fd0 returned -22 17:26:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 294.086650] binder: 9135:9147 tried to acquire reference to desc 0, got 1 instead [ 294.096970] binder: 9135:9155 unknown command 536872576 [ 294.096979] binder: 9135:9155 ioctl c0306201 20008fd0 returned -22 17:26:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='trusted{\\keyring@cpuset\x00') 17:26:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 294.146657] binder_alloc: binder_alloc_mmap_handler: 9141 20ffb000-20ffd000 already mapped failed -16 [ 294.156961] binder: 9160:9161 ioctl c0306201 20000100 returned -14 [ 294.169004] binder: 9160:9161 tried to acquire reference to desc 0, got 1 instead [ 294.171463] binder: 9160:9164 ioctl c0306201 20000100 returned -14 [ 294.171808] binder: undelivered death notification, 0000000000000000 [ 294.171844] binder: undelivered death notification, 0000000000000000 [ 294.211211] binder: BINDER_SET_CONTEXT_MGR already set [ 294.211220] binder: 9167:9168 ioctl 40046207 0 returned -16 [ 294.211631] binder: 9167:9168 unknown command 0 [ 294.211636] binder: 9167:9168 ioctl c0306201 20012000 returned -22 17:26:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 17:26:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024107, 0x0, 0x0, 0x0, 0x0) [ 294.211958] binder: 9167:9168 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 294.264625] binder: 9167:9173 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 294.272247] binder: 9167:9173 ioctl c0306201 20000100 returned -14 [ 294.281162] binder: 9167:9173 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 295.005367] binder: BINDER_SET_CONTEXT_MGR already set [ 295.011136] binder: 9167:9173 ioctl 40046207 0 returned -16 [ 295.013754] binder: 9167:9187 unknown command 0 [ 295.013764] binder: 9167:9187 ioctl c0306201 20012000 returned -22 [ 295.014334] binder: 9167:9188 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 295.014664] binder: 9167:9188 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 295.014680] binder: 9167:9188 ioctl c0306201 20000100 returned -14 [ 295.014984] binder: 9167:9189 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:26:51 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:51 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x1, "9fceca4b"}, 0x6, 0x1) 17:26:51 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x88240, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x14, 0x100000001, 0x6, 0xffffffffffffff81, 0x2, r0, 0x9}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x700240fc, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:26:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x3) 17:26:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 297.068347] binder: BINDER_SET_CONTEXT_MGR already set 17:26:51 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) sendfile(r2, r3, &(0x7f0000000200), 0x91) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x8, 0x8]) 17:26:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c400000000000000000809be4cb"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 297.089512] binder: 9193:9202 ioctl 40046207 0 returned -16 [ 297.094517] binder: 9195:9198 tried to acquire reference to desc 0, got 1 instead [ 297.094776] binder: 9195:9198 unknown command 536872576 [ 297.094784] binder: 9195:9198 ioctl c0306201 20008fd0 returned -22 [ 297.128259] binder: 9214:9217 ioctl c0306201 20000100 returned -14 17:26:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:26:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') clone(0x22040000, 0x0, 0x0, 0x0, 0x0) [ 297.128463] binder: 9214:9217 got transaction to invalid handle [ 297.128472] binder: 9214:9217 transaction failed 29201/-22, size 0-0 line 3118 [ 297.128490] binder: 9214:9217 ioctl c0306201 200005c0 returned -14 [ 297.128567] binder: 9214:9217 ioctl 40084504 20000040 returned -22 17:26:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/dev/binder#\x00', 0xfffffffffffffffa) keyctl$revoke(0x3, r2) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 297.138776] binder: 9214:9219 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 297.138793] binder: 9214:9219 ioctl c0306201 20000100 returned -14 [ 297.138975] binder: 9214:9220 got transaction to invalid handle [ 297.138986] binder: 9214:9220 transaction failed 29201/-22, size 0-0 line 3118 [ 297.139011] binder: 9214:9220 ioctl c0306201 200005c0 returned -14 [ 297.140204] binder: undelivered death notification, 0000000000000000 [ 297.174059] binder: 9223:9224 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != cbe49b8000000000 [ 297.174075] binder: 9223:9224 ioctl c0306201 20000100 returned -14 [ 297.187601] binder: 9223:9226 unknown command 536872576 [ 297.187609] binder: 9223:9226 ioctl c0306201 20008fd0 returned -22 [ 297.263852] binder: 9229:9231 ioctl c0306201 20000100 returned -14 [ 297.277366] binder: 9229:9234 tried to acquire reference to desc 0, got 1 instead [ 297.285847] binder: 9229:9231 ioctl c0306201 20000100 returned -14 [ 297.292037] binder: 9229:9234 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.292362] binder: undelivered death notification, 0000000000000000 [ 297.324269] binder: 9236:9238 unknown command 0 [ 297.324477] binder: 9236:9238 ioctl c0306201 20008fd0 returned -22 [ 297.392687] binder: 9236:9243 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:26:52 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x7) 17:26:52 executing program 2: socketpair$unix(0x1, 0x800003, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20000, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x70, 0x67, 0x40, 0x0, 0x8, 0x0, 0x3, 0x1020, 0x4, 0x1f, 0x2, 0x0, 0x9, 0x2, 0x5, 0xd44, 0x7, 0xfffffffffffffffe, 0x7, 0x1, 0x3f, 0x81, 0x8, 0x1, 0xffff, 0x0, 0x40, 0x100000001, 0xa7, 0x96ef, 0x0, 0x1, 0xffffffff, 0x8, 0x8, 0x2, 0xffff, 0x0, 0x5, 0x4, @perf_config_ext={0x101}, 0x20, 0x3, 0xff, 0x1, 0x7, 0x6, 0x2}, 0xffffffffffffff9c, 0xe, 0xffffffffffffff9c, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400000000000fbb0) r2 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast1, @rand_addr="1786ded05f9b9b8e01a4c8be970c512b", @ipv4={[], [], @multicast2}, 0x3, 0x100, 0x100, 0x500, 0x2, 0x1000120, r3}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 297.392721] binder: 9236:9243 ioctl c0306201 20000100 returned -14 [ 297.392993] binder: 9236:9243 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 297.490408] binder: 9248:9253 unknown command 0 [ 297.496074] binder: 9248:9253 ioctl c0306201 20008fd0 returned -22 17:26:52 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) write$P9_RFSYNC(r3, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) getpeername$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) 17:26:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 297.560514] binder_alloc: binder_alloc_mmap_handler: 9248 20ffb000-20ffd000 already mapped failed -16 17:26:52 executing program 5: clone(0x10000004, 0x0, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x2) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 298.119797] binder: 9236:9243 tried to acquire reference to desc 0, got 1 instead [ 298.127996] binder: 9236:9243 unknown command 536872576 [ 298.134310] binder: 9236:9243 ioctl c0306201 20008fd0 returned -22 [ 298.134992] binder: 9236:9277 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 298.135010] binder: 9236:9277 ioctl c0306201 20000100 returned -14 17:26:54 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:54 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)="7b68e2fe01695c34e8516c58807041ededb2c9f924836a6b7955e71e23d94ac9df4974a967283c67d10a7ebeda3a56a4c69258cac5eb165dc5ca157f618cb5c20fc23fc85a51ce2c29ef72256458") clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000007c0)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpgid(0xffffffffffffffff) r1 = getpgrp(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) init_module(&(0x7f0000000340)='\x00', 0x1, &(0x7f0000000380)='\x00') mlockall(0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x2, &(0x7f0000000500)=@raw=[@ldst={0x1, 0x0, 0x7, 0x9, 0xa, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x60}], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x84, &(0x7f0000000580)=""/132, 0x40f00, 0x1, [], r2, 0xf}, 0x48) r4 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r3, 0x20}, {r4, 0xc0}], 0x2, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f0000000780)={0x6e}, 0x8) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) recvfrom(r7, &(0x7f0000000180)=""/72, 0x48, 0x10000, &(0x7f0000000440)=@xdp={0x2c, 0x1, r2, 0x31}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000004c0)={0x3, 0x1, 0x1}) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0xa8, 0xfffffffffffffff9, 0x7, 0x4, 0x0, 0xd2, 0x30, 0xb, 0x1, 0x8, 0x6, 0x305, 0x1, 0xbf48aeb, 0x2, 0x284a, 0x7fffffff, 0x1, 0x3, 0x9, 0x9c0a, 0x81, 0xd3b3, 0x9d, 0x265, 0x9, 0x7, 0xeb, 0x400, 0x80, 0x2, 0x4, 0x8, 0x7, 0x5, 0x78688d3e, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x1010, 0x40, 0x7, 0x7, 0x5a, 0x9, 0x7}, r1, 0x7, r8, 0x1) setsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000000)=0x4, 0x4) 17:26:54 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20804, 0x0) 17:26:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) sendfile(r2, r3, &(0x7f0000000200), 0x91) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x8, 0x8]) 17:26:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:26:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x5, 0x7fffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x440, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x3f) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='/dev/full\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000080)=0x10001, 0x4) clone(0x40000003, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x4) [ 300.135119] binder: 9290:9293 ioctl c0306201 20000100 returned -14 [ 300.138758] binder: 9285:9296 unknown command 0 [ 300.138767] binder: 9285:9296 ioctl c0306201 20008fd0 returned -22 [ 300.164388] binder: 9290:9293 got transaction to invalid handle [ 300.171171] binder: 9290:9293 transaction failed 29201/-22, size 0-0 line 3118 17:26:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) sendfile(r2, r3, &(0x7f0000000200), 0x91) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x8, 0x8]) [ 300.180522] binder: 9290:9293 ioctl c0306201 200005c0 returned -14 [ 300.191737] binder_alloc: binder_alloc_mmap_handler: 9285 20ffb000-20ffd000 already mapped failed -16 [ 300.194047] binder: 9290:9293 ioctl 40084504 20000040 returned -22 [ 300.194253] binder: undelivered death notification, 0000000000000000 17:26:54 executing program 5: clone(0x210000, 0x0, 0x0, 0x0, 0x0) gettid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x2, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x200) r1 = memfd_create(&(0x7f0000000180)='\'wlan1bdev.\x00', 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8002020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = dup2(r0, r1) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 300.240906] binder: 9302:9304 ioctl c0306201 20000100 returned -14 [ 300.250929] binder: 9302:9304 got transaction to invalid handle [ 300.257655] binder: 9302:9304 transaction failed 29201/-22, size 0-0 line 3118 [ 300.266150] binder: 9302:9304 ioctl c0306201 200005c0 returned -14 [ 300.279585] binder: 9302:9304 ioctl 40084504 20000040 returned -22 17:26:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) sendfile(r2, r3, &(0x7f0000000200), 0x91) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x8, 0x8]) [ 300.291102] binder: undelivered death notification, 0000000000000000 [ 300.320188] binder: 9308:9309 ioctl c0306201 20000100 returned -14 [ 300.328427] binder: 9308:9309 got transaction to invalid handle 17:26:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) sendfile(r2, r3, &(0x7f0000000200), 0x91) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 300.334980] binder: 9308:9309 transaction failed 29201/-22, size 0-0 line 3118 [ 300.342520] binder: 9308:9309 ioctl c0306201 200005c0 returned -14 [ 300.354388] binder: 9308:9309 ioctl 40084504 20000040 returned -22 [ 300.363050] binder: undelivered death notification, 0000000000000000 [ 300.383285] binder: 9312:9314 ioctl c0306201 20000100 returned -14 17:26:55 executing program 5: clone(0x802000, 0x0, 0x0, 0x0, 0x0) 17:26:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) pipe2(&(0x7f0000000180), 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 300.402831] binder: 9312:9314 got transaction to invalid handle [ 300.408947] binder: 9312:9314 transaction failed 29201/-22, size 0-0 line 3118 [ 300.418672] binder: 9312:9314 ioctl c0306201 200005c0 returned -14 [ 300.435866] binder: undelivered death notification, 0000000000000000 [ 300.472278] binder: 9322:9324 ioctl c0306201 20000100 returned -14 [ 300.484343] binder: 9322:9324 got transaction to invalid handle [ 300.496169] binder: 9322:9324 transaction failed 29201/-22, size 0-0 line 3118 [ 300.504422] binder: 9322:9324 ioctl c0306201 200005c0 returned -14 [ 300.512658] binder: undelivered death notification, 0000000000000000 17:26:57 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:26:57 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e21, @broadcast}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCCONS(r1, 0x541d) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:26:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:26:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 17:26:57 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='syzkaller1\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000040), 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f00000001c0)=""/114, 0x72}], 0x2, &(0x7f0000000280)=""/163, 0xa3}, 0x40010040) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) 17:26:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:26:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:26:57 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x9, 0xf078, 0x400, 0x0, 0x3, 0x84, 0x3, 0xffffffff, 0x74, 0x0, 0x1f, 0x4, 0x4, 0x0, 0xdf9, 0x3, 0x7ff, 0x8, 0xffffffff, 0x4, 0xb0b1, 0x21, 0x2, 0xae, 0xa, 0x4, 0x3c, 0x7, 0xfffffffffffffffa, 0x401, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffe, 0x48000, 0x6, 0x0, 0xe7dd, 0x0, @perf_config_ext={0x5, 0x5}, 0x1100, 0x7ff, 0x2, 0x4, 0x6, 0xb1e, 0x3}) [ 303.137614] binder: 9334:9340 ioctl c0306201 20000100 returned -14 [ 303.148478] binder: 9337:9338 unknown command 0 17:26:57 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 303.148487] binder: 9337:9338 ioctl c0306201 20008fd0 returned -22 [ 303.186198] binder: 9334:9353 got transaction to invalid handle [ 303.186209] binder: 9334:9353 transaction failed 29201/-22, size 0-0 line 3118 [ 303.186236] binder: 9334:9353 ioctl c0306201 200005c0 returned -14 17:26:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:26:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xa) r4 = dup(r0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x98ea) fcntl$getown(r1, 0x9) fcntl$addseals(r2, 0x409, 0xd) fsetxattr$security_selinux(r4, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0xfffffffffffffeb5, 0x3) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000200)={0x0, 0xa7, 0x43de, 0x6, 0x200, 0x8}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4002001}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x100000000, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 303.203491] binder_alloc: binder_alloc_mmap_handler: 9337 20ffb000-20ffd000 already mapped failed -16 [ 303.261149] binder: undelivered death notification, 0000000000000000 17:26:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 303.307912] binder: 9365:9367 got transaction to invalid handle [ 303.320645] binder: 9365:9367 transaction failed 29201/-22, size 0-0 line 3118 [ 303.329158] binder: 9365:9367 ioctl c0306201 200005c0 returned -14 17:27:00 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) clone(0x780240ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 5: clone(0x2200, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$void(r0, 0xc0045c79) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x18081, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x0, 'io'}, {0x2f, 'io'}, {0x2d, 'cpu'}, {0x2f, 'rdma'}]}, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@-'}, {0x20, '*em1}system-posix_acl_access!'}, {0x20, 'bdevuser'}, {0x20, '^]&'}, {}, {0x20, '&'}, {0x20, '\x00'}, {0x20, '{md5sum'}], 0xa, "34f3fa639e6ee2de97b5a17e34b62ee1a80a08bc9ec326e333eba326262ee712f5b7346807220a9614c3ab2ea56d7060612a07e0879fd8"}, 0x7d) 17:27:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:00 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x82440, 0x21) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0xc00, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r4 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80, 0x80000) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x7, 0x66ac, 0xfff, 0x7ff, 0x1000, 0x8, 0x30, 0x8, 0x80}}, 0x43) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x80, 0x0) r7 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000003280)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/85, 0x55}, {&(0x7f0000001680)=""/220, 0xdc}], 0x6, &(0x7f0000001800)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000002800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/219, 0xdb}, {&(0x7f0000002980)=""/162, 0xa2}], 0x2, &(0x7f0000002a80)=""/189, 0xbd}, 0x101}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002bc0)=""/1, 0x1}, {&(0x7f0000002c00)=""/8, 0x8}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/97, 0x61}, {&(0x7f0000002d00)=""/172, 0xac}, {&(0x7f0000002dc0)=""/13, 0xd}, {&(0x7f0000002e00)=""/199, 0xc7}], 0x7, &(0x7f0000002f80)=""/139, 0x8b}, 0x3ab}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003040)=""/120, 0x78}, {&(0x7f00000030c0)=""/52, 0x34}, {&(0x7f0000003100)=""/115, 0x73}], 0x3, &(0x7f00000031c0)=""/184, 0xb8}, 0x200}], 0x4, 0x0, &(0x7f0000003380)={0x77359400}) r10 = openat(0xffffffffffffffff, &(0x7f00000033c0)='./file0\x00', 0x1, 0x1) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000003440)='/dev/full\x00', 0x2d0c02, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000200)) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000003580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000003540)={&(0x7f0000003480)={0xbc, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4080}, 0xc855) [ 306.192247] binder: 9389:9393 unknown command 0 17:27:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 306.217272] binder: 9389:9393 ioctl c0306201 20008fd0 returned -22 17:27:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 306.262185] binder: 9409:9411 got transaction to invalid handle [ 306.269552] binder: 9409:9411 transaction failed 29201/-22, size 0-0 line 3118 [ 306.277792] binder: 9409:9411 ioctl c0306201 200005c0 returned -14 [ 306.290219] binder_alloc: binder_alloc_mmap_handler: 9389 20ffb000-20ffd000 already mapped failed -16 17:27:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, 0x3, {0x9, 0x4, 0x3, 0x8}}, 0x20) [ 306.336466] binder: 9416:9419 got transaction to invalid handle [ 306.344850] binder: 9416:9419 transaction failed 29201/-22, size 0-0 line 3118 [ 306.353526] binder: 9416:9419 ioctl c0306201 200005c0 returned -14 17:27:03 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) 17:27:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x58, 0x100, 0x400, 0x21, 0xffffffffffffffff, 0x8}, 0x2c) write(r0, &(0x7f0000000080)="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", 0xfd) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x3, 0x1ff, 0x8001, 0x6, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:03 executing program 5: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f00000012c0)=0x78) sync_file_range(r0, 0x3f, 0x3, 0x1) clone(0x4000000, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x24) [ 309.197391] binder: 9434:9442 got transaction to invalid handle [ 309.205213] binder: 9433:9443 unknown command 0 [ 309.212170] binder: 9433:9443 ioctl c0306201 20008fd0 returned -22 [ 309.219117] binder: 9434:9442 transaction failed 29201/-22, size 0-0 line 3118 [ 309.219152] binder: 9434:9442 ioctl c0306201 200005c0 returned -14 17:27:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 309.255584] binder: 9449:9450 got transaction to invalid handle [ 309.262058] binder: 9449:9450 transaction failed 29201/-22, size 0-0 line 3118 [ 309.270289] binder: 9449:9450 ioctl c0306201 200005c0 returned -14 17:27:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x5e, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="be8c2a", 0x3, 0x6}], 0x0, &(0x7f0000000140)={[{@extent_cache='extent_cache'}, {@disable_ext_identify='disable_ext_identify'}], [{@obj_user={'obj_user', 0x3d, '\\'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}]}) [ 309.300243] binder_alloc: binder_alloc_mmap_handler: 9433 20ffb000-20ffd000 already mapped failed -16 [ 309.315301] binder: 9457:9459 got transaction to invalid handle [ 309.315312] binder: 9457:9459 transaction failed 29201/-22, size 0-0 line 3118 17:27:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 309.315336] binder: 9457:9459 ioctl c0306201 200005c0 returned -14 [ 309.363162] binder: 9461:9462 got transaction to invalid handle [ 309.363175] binder: 9461:9462 transaction failed 29201/-22, size 0-0 line 3118 [ 309.363198] binder: 9461:9462 ioctl c0306201 200005c0 returned -14 [ 309.401887] binder: 9466:9467 got transaction to invalid handle [ 309.401897] binder: 9466:9467 transaction failed 29201/-22, size 0-0 line 3118 [ 309.401923] binder: 9466:9467 ioctl c0306201 200005c0 returned -14 17:27:06 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:06 executing program 0: dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:06 executing program 2: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) finit_module(r0, &(0x7f0000000080)='vmnet1@GPLbdev{\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:06 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/194) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff) 17:27:06 executing program 3: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_getparam(r0, &(0x7f0000000040)) recvmmsg(0xffffffffffffff9c, &(0x7f00000049c0)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/7, 0x7}, {&(0x7f00000008c0)=""/101, 0x65}], 0xa, &(0x7f0000000a00)=""/71, 0x47}}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/113, 0x71}], 0x1}, 0x8001}, {{&(0x7f0000000bc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/117, 0x75}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/248, 0xf8}, {&(0x7f0000000f40)=""/158, 0x9e}], 0x6, &(0x7f0000001080)=""/51, 0x33}, 0x6}, {{&(0x7f00000010c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001140)=""/21, 0x15}, {&(0x7f0000001180)=""/111, 0x6f}, {&(0x7f0000001200)=""/106, 0x6a}], 0x3}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000012c0)=""/110, 0x6e}, {&(0x7f0000001340)=""/135, 0x87}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)=""/76, 0x4c}, {&(0x7f0000001500)=""/163, 0xa3}, {&(0x7f00000015c0)=""/215, 0xd7}], 0x6, &(0x7f0000001740)=""/83, 0x53}, 0xe4b0}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/182, 0xb6}], 0x1, &(0x7f0000001940)=""/240, 0xf0}, 0xde5f}, {{&(0x7f0000001a40)=@xdp, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001ac0)=""/137, 0x89}, {&(0x7f0000001b80)=""/140, 0x8c}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/193, 0xc1}, {&(0x7f0000002d80)=""/155, 0x9b}], 0x6, &(0x7f0000002ec0)=""/200, 0xc8}, 0x7fff}, {{&(0x7f0000002fc0)=@vsock, 0x80, &(0x7f0000003100)=[{&(0x7f0000003040)=""/171, 0xab}], 0x1}, 0x81}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004840)=[{&(0x7f00000031c0)=""/251, 0xfb}, {&(0x7f00000032c0)=""/107, 0x6b}, {&(0x7f0000003340)=""/240, 0xf0}, {&(0x7f0000003440)=""/154, 0x9a}, {&(0x7f0000003500)=""/140, 0x8c}, {&(0x7f00000035c0)=""/89, 0x59}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/208, 0xd0}, {&(0x7f00000047c0)=""/83, 0x53}], 0xa, &(0x7f0000004900)=""/155, 0x9b}}], 0x9, 0x40010000, &(0x7f0000004c00)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:06 executing program 0: dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:06 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 312.207689] binder: 9480:9482 unknown command 0 [ 312.226833] binder: 9480:9482 ioctl c0306201 20008fd0 returned -22 17:27:06 executing program 0: dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:06 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 312.263860] binder_alloc: binder_alloc_mmap_handler: 9480 20ffb000-20ffd000 already mapped failed -16 17:27:07 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x121000, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000140)={0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$selinux_user(r2, &(0x7f0000000080)={'system_u:object_r:usb_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x2b) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x9, 0x4) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') 17:27:07 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:07 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 312.383241] binder: 9506:9514 unknown command 0 [ 312.390261] binder: 9506:9514 ioctl c0306201 20008fd0 returned -22 17:27:07 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 17:27:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'rose0\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:07 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) 17:27:07 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:07 executing program 5: clone(0x40000, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffff9c, 0x0, 0xfffffffffffffe3e, 0xcd, &(0x7f0000000000)="f271ca5b47cb9df7c9b8cf5a7314eea7582d5562d8156f2ee37ceb44cfd34f7f9159ae2486a4526d8fe39f23570d8beaffda411b8466f03e43697ddcec49a00a38e81f81908c7980da68ad1ee5bd96d8efe97cc65072ccc8dd8a8caee3cb19e0f622f9aec8a18bdec672ad0a1da6ba310e40a15b1869bd74f1e3d6dab51e46399b9265395e57e7d24b03547d80a31136abb64686f3c2ef7c53fc161535000a8fdd112b2bc0692d13a4feab9ef46e21256d8aa22046bccfc4b85a8f81265cd4db2264d7a872e6c79e39dc7b8b7360", &(0x7f0000000100)=""/205, 0xaa02}, 0x28) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) 17:27:07 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:07 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:07 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstatfs(r1, &(0x7f0000000080)=""/200) clone(0x402, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 17:27:07 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:07 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 313.212147] binder: 9569:9574 unknown command 0 [ 313.217053] binder: 9569:9574 ioctl c0306201 20008fd0 returned -22 17:27:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '\x00'}) 17:27:08 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 17:27:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000040)={@dev, @loopback, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', r1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:08 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:08 executing program 5: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x3, {{0xda, 0x2bc, 0x95d, 0x1c0000000, 0x100000001, 0x8001, 0x2, 0x6}}}, 0x60) 17:27:08 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:08 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 17:27:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:27:08 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='clear_refs\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 17:27:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:27:08 executing program 2: socketpair$unix(0x1, 0x100000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=@hat={'permhat ', 0x1, 0x5e, ['vboxnet1\x00', '}.selfuser-procem0self/\\\x00', '\\self}\'wlan0&+%\xa3\x00', 'vboxnet0\x00', '#cpuset.lo\x00', '(^\x00', '(system\x00']}, 0x6d) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0x3, 0x8, 0x3, 0x1, 0x0, 0x7fff}) [ 314.031834] binder: 9610:9615 ioctl c0306201 0 returned -14 [ 314.038912] binder: 9613:9616 unknown command 0 [ 314.038920] binder: 9613:9616 ioctl c0306201 20008fd0 returned -22 [ 314.074994] binder: 9621:9623 ioctl c0306201 0 returned -14 17:27:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '%eth1eth1q.-loselinux}\'\x00'}, 0x1d) 17:27:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:27:09 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @random="82be2a5f5287"}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x100000000, @local, 0x7751}, {0xa, 0x4e23, 0xffff, @rand_addr="68fa6d7421583c9e9703da079a1de0fc", 0xffff}, 0x7fff, [0x2, 0x8, 0x8, 0x4, 0x2, 0x5, 0x7, 0xfff]}, 0x5c) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 314.462170] binder: 9634:9643 ioctl c0306201 0 returned -14 17:27:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:09 executing program 2: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 17:27:09 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:09 executing program 2: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) [ 314.876387] binder: 9652:9660 unknown command 0 [ 314.883085] binder: 9652:9660 ioctl c0306201 20008fd0 returned -22 [ 314.945997] binder_alloc: binder_alloc_mmap_handler: 9652 20ffb000-20ffd000 already mapped failed -16 17:27:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$unix(r1, &(0x7f0000000040)="2f1a26d3eb275788c30ed1bb30b5626218417f2b89b8c837d3fe46e88586149b60d3d35d9320ea2c1870a8a2c846ac599eb525252ac390d8f391b7a985eb6e8c99ebde1c7726508ba8a5bdb0615fbd28704f55322f2e0521425dbc198bb618c32725fdeecace37121cd0f9dd69bae1211a5f58315e9dfb1bacffd65d327c90edeb2612f9d4de737577710defad2159b4c7517c4be02c0d04c70a8ffa", 0x9c, 0x40, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 17:27:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x58, 0x100, 0x400, 0x21, 0xffffffffffffffff, 0x8}, 0x2c) write(r0, &(0x7f0000000080)="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", 0xfd) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x3, 0x1ff, 0x8001, 0x6, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:09 executing program 2: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 17:27:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffdfd, 0x0}) 17:27:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffdfd, 0x0}) 17:27:10 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffdfd, 0x0}) 17:27:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 315.687531] binder: 9696:9699 unknown command 0 [ 315.700082] binder: 9696:9699 ioctl c0306201 20008fd0 returned -22 [ 315.740927] binder_alloc: binder_alloc_mmap_handler: 9696 20ffb000-20ffd000 already mapped failed -16 17:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 17:27:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) 17:27:11 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:11 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8001, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 316.381071] binder: 9720:9724 transaction failed 29189/-22, size 0-0 line 3118 [ 316.392600] binder_alloc: binder_alloc_mmap_handler: 9723 20ffb000-20ffd000 already mapped failed -16 17:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:11 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x2, 0x8}], &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x3d, 0xfffffdfd, 0x0}) [ 316.437092] binder: 9720:9724 ioctl c0306201 200005c0 returned -14 [ 316.451306] binder_alloc: binder_alloc_mmap_handler: 9734 20ffb000-20ffd000 already mapped failed -16 [ 316.511071] binder_alloc: binder_alloc_mmap_handler: 9740 20ffb000-20ffd000 already mapped failed -16 [ 316.526279] binder_alloc: 9740: binder_alloc_buf, no vma [ 316.526299] binder: 9746:9748 transaction failed 29189/-3, size 0-0 line 3255 [ 316.527141] binder: 9746:9748 ioctl c0306201 200005c0 returned -14 17:27:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/22) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) 17:27:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 17:27:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:11 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17:27:12 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 317.288406] binder: 9761:9765 transaction failed 29189/-22, size 0-32 line 3118 17:27:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:12 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17:27:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) [ 317.298779] binder_alloc: binder_alloc_mmap_handler: 9763 20ffb000-20ffd000 already mapped failed -16 [ 317.360581] binder: undelivered TRANSACTION_ERROR: 29189 [ 317.426580] binder: 9786:9791 transaction failed 29189/-22, size 0-32 line 3118 [ 317.450261] binder: undelivered TRANSACTION_ERROR: 29189 17:27:13 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pause() r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x240, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000000)='-\x00'}, 0x30) waitid(0x2, r1, 0x0, 0x8000000e, &(0x7f0000000080)) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001580)=[@sack_perm, @timestamp, @sack_perm], 0x3) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000580)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'L-', 0x400}, 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'wlan1'}, {0x20, '/dev/binder#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "ca3090aaace45a97df6f750c849b7c287231138bd0817c6d5a5adec87e71d14025927655bae261b86854c508f0dda909e065aca707"}, 0x6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17:27:13 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 17:27:13 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:13 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x0, 0x1bd}) 17:27:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) [ 318.596355] binder: 9802:9806 transaction failed 29189/-22, size 0-32 line 3118 [ 318.628612] binder: undelivered TRANSACTION_ERROR: 29189 17:27:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 17:27:13 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 318.650154] binder: 9817:9818 transaction failed 29189/-22, size 0-0 line 3118 [ 318.662081] binder: undelivered TRANSACTION_ERROR: 29189 [ 318.689652] binder: 9826:9829 transaction failed 29189/-22, size 0-0 line 3118 [ 318.701899] binder: undelivered TRANSACTION_ERROR: 29189 [ 318.707465] binder_alloc: binder_alloc_mmap_handler: 9815 20ffb000-20ffd000 already mapped failed -16 17:27:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x80000) 17:27:14 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 17:27:14 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000017, &(0x7f0000d06000), 0xffbc) 17:27:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:14 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:27:14 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 319.518937] binder: 9846:9849 transaction failed 29189/-22, size 0-0 line 3118 17:27:14 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68]}}], 0x0, 0xfffffdfd, 0x0}) [ 319.572982] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.596827] EXT4-fs (loop5): inodes count not valid: 655488 vs 128 17:27:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68]}}], 0x0, 0xfffffdfd, 0x0}) [ 319.610308] binder: 9868:9870 transaction failed 29189/-22, size 0-24 line 3118 [ 319.610832] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.677881] binder: 9877:9878 transaction failed 29189/-22, size 0-24 line 3118 [ 319.678385] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.777194] EXT4-fs (loop5): inodes count not valid: 655488 vs 128 17:27:15 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={0x0, 0x5, 0x4}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613232342d61726d36340000000000000000007fff00000000000000000000000000b358000000000000000000000000000000000000000000000000d7ba72df0a316f1d6954302b7b4e3a"], &(0x7f0000000300)="f4fa856a14cca094200e3a221530d2235614c264c8e74d95f408cf1b9e045dc24204a18cb7f112db1a408faff7212f548d2469130d3197f8fd8a820d42719b0d08abd475aabbc4c19635d9bb52e992b211c493b237c2ad285fb31aaacbc41d2dcc6dddb04ac1dd7fa5fe712dec6997ebdec4876d91dde78f6d337ef9e70149d6c8ba13539f85dbe1b3564987e158dc68dafd3c7db327715bba21aa4ddd2d9e184d707b1c25ce74ff2428297241821535672f786a066253f77de1ee81bdf6ba5ec71aa4b379d3d5cee0d8247fdecf944002bad73068bc5b185d1df7dd2cb2721ebbf31e46c1d136faad843a0aac39ca1002c7bd2339b6c2", &(0x7f0000000400)=""/90) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) sched_getattr(r0, &(0x7f0000000200), 0x30, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000019c0), &(0x7f0000001a00)=0x8) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x4, 0x44e, 0xb37, 0x100000001, 0x0, 0x5, 0x1, 0xd, 0x7, 0x40171e09, 0x1ff, 0x0, 0x101, 0x80, 0x8, 0x8001, 0x4, 0x50c, 0x8000, 0x1000, 0x4, 0x15a8000, 0x1, 0x0, 0x7f, 0x7, 0x5, 0x5, 0x3, 0x1f, 0xff, 0x48f, 0x1f, 0x74, 0x6700000, 0x401, 0x0, 0x8, 0x3, @perf_config_ext={0x6, 0x9de}, 0xc000, 0xfff, 0x5, 0x6, 0x1, 0x26, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x218100, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000002c0)=0x6, 0x4) write(r2, &(0x7f0000000000)="9e196d49b0567273f94c0e5a665b535423f12ae867a6", 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000006c0)="0884336e2e1cce98c579cd398a87dd5874682f61c1f316cd046be792dc90dde8126887beb18c1509fa357152cd1b5876a38c374a8679eb4e83e721ecfc5059492df46fab6d013c6ea5c697bacfb1495b11719b8cd15792093c2a26beb85c448d653753e1cd179c06f42b4a586784fed9e715", 0xfffffffffffffec2, r5) keyctl$update(0x2, r6, 0x0, 0x0) clone(0x800, 0x0, 0x0, 0x0, 0x0) 17:27:15 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:27:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x0]}}], 0x0, 0xfffffdfd, 0x0}) [ 320.990244] binder: 9886:9890 transaction failed 29189/-22, size 0-24 line 3118 [ 321.003224] binder: undelivered TRANSACTION_ERROR: 29189 17:27:15 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200081, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfshat={'smackfshat', 0x3d, '#^-'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname={'fsname'}}, {@subj_role={'subj_role', 0x3d, ',^'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 321.030719] EXT4-fs (loop5): inodes count not valid: 655488 vs 128 17:27:15 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 321.057368] binder: 9899:9903 transaction failed 29189/-22, size 0-32 line 3118 [ 321.061443] binder: undelivered TRANSACTION_ERROR: 29189 17:27:17 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x0]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:27:17 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:17 executing program 3: socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x6, 0x1, 0x3ffc00000000000, 0x2, 0xfff, 0x20000000000, 0x8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:17 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x0]}}], 0x0, 0xfffffdfd, 0x0}) [ 322.609419] binder: 9920:9924 transaction failed 29189/-22, size 0-32 line 3118 [ 322.630500] binder: undelivered TRANSACTION_ERROR: 29189 17:27:17 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 322.663452] EXT4-fs (loop5): inodes count not valid: 655488 vs 128 [ 322.681496] binder: 9936:9939 transaction failed 29189/-22, size 0-32 line 3118 [ 322.681865] binder: undelivered TRANSACTION_ERROR: 29189 17:27:17 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 322.694936] binder_alloc: binder_alloc_mmap_handler: 9934 20ffb000-20ffd000 already mapped failed -16 [ 322.748030] binder_alloc: binder_alloc_mmap_handler: 9942 20ffb000-20ffd000 already mapped failed -16 [ 322.752436] binder: 9946:9948 transaction failed 29189/-22, size 0-24 line 3118 [ 322.752619] binder: undelivered TRANSACTION_ERROR: 29189 17:27:20 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty=[0x2], [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:20 executing program 3: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x1, 0x4000000000}}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0xffffffffffffff6e, &(0x7f0000000500)={&(0x7f00000002c0)=""/179, 0xb3, 0xffffffffffffffff}}, 0x10) sendmsg$key(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x9, 0xf, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x5, 0x10, 0x14}, @sadb_lifetime={0x4, 0x0, 0x101, 0x2, 0x80, 0x83bd}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d5, 0x16f0, 0x7, 0x40, 0x1, 0x20000000}]}, 0x78}}, 0x20008805) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x10, &(0x7f0000000400)={&(0x7f0000000200)=""/131, 0x83, r3}}, 0x10) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x8, "a45a435e6702669e57ce0268e3b8"}, 0x10, 0x3) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 17:27:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:20 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 325.648271] binder: 9961:9970 transaction failed 29189/-22, size 0-24 line 3118 [ 325.672036] binder: undelivered TRANSACTION_ERROR: 29189 [ 325.691243] EXT4-fs (loop5): inodes count not valid: 655488 vs 128 17:27:20 executing program 2: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r1 = dup(r0) utime(0x0, 0x0) write$P9_RWRITE(r1, 0x0, 0x0) 17:27:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cpuset\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 17:27:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 325.781665] binder: 9980:9987 transaction failed 29189/-22, size 0-24 line 3118 17:27:20 executing program 2: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) prctl$PR_GET_SECCOMP(0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) r1 = gettid() write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0xffffffffffffff9a) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 17:27:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x0, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) [ 325.835783] binder: undelivered TRANSACTION_ERROR: 29189 17:27:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 325.904750] binder: 10007:10010 transaction failed 29189/-22, size 0-32 line 3118 [ 325.918952] binder: undelivered TRANSACTION_ERROR: 29189 17:27:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x12) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x0, 0x0, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x0, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') pipe2$9p(0x0, 0x0) close(r0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) stat(0x0, 0x0) setregid(0x0, 0x0) sched_yield() write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 326.011815] binder: 10017:10019 transaction failed 29189/-22, size 0-32 line 3118 [ 326.028847] binder: undelivered TRANSACTION_ERROR: 29189 17:27:23 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:23 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 17:27:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x301, 0x4) sendto$inet(r0, &(0x7f0000000040)="99", 0x1, 0x0, 0x0, 0x0) 17:27:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x0, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:23 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 17:27:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) accept(r1, &(0x7f0000000640)=@ethernet, 0x0) write$binfmt_elf32(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x286) 17:27:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) [ 328.775857] binder: 10034:10038 transaction failed 29189/-22, size 0-32 line 3118 [ 328.797601] binder: undelivered TRANSACTION_ERROR: 29189 17:27:23 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 17:27:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 328.824307] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 328.853335] binder: 10049:10054 transaction failed 29189/-22, size 0-24 line 3118 17:27:23 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 328.895349] binder: undelivered TRANSACTION_ERROR: 29189 17:27:26 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:26 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17:27:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0xc4c1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:26 executing program 2: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 17:27:26 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17:27:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x30, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200081, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfshat={'smackfshat', 0x3d, '#^-'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname={'fsname'}}, {@subj_role={'subj_role', 0x3d, ',^'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 331.811822] binder: 10077:10090 transaction failed 29189/-22, size 0-24 line 3118 [ 331.837167] binder: undelivered TRANSACTION_ERROR: 29189 17:27:26 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000000000000000000008d1bcc978fcc15f9098b46f15e0dccb70b30b9c66326606e4dfc3ec0a05874ad8c92709ca9047ca236e6cfc07d2f34eccd22e853a5c61f9a3564529beb0fdfd683c70245faf5074d8fa9dcf9595d1710"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x708, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c400100000002000000000000000b63000001634040000000000000000001000000000000000000000001000000000000000000000038000000000000001000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000000400000000000000852a6873b89dd9f7", @ANYRES64=r3, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="78000000000020000010000000000000"], @ANYBLOB="1063084004000000000000000b6300000e630c4002000000040000000000000004630440040000000e630c40060000000300000000000000"], 0x1000, 0x0, &(0x7f0000001040)="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"}) [ 331.931282] binder: 10099:10104 transaction failed 29189/-22, size 0-24 line 3118 [ 331.936340] binder_alloc: binder_alloc_mmap_handler: 10103 20ffb000-20ffd000 already mapped failed -16 [ 331.958090] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.052056] binder: 10114:10115 ioctl c0306201 20000100 returned -14 [ 332.078805] binder: 10114:10115 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 332.086643] binder: 10114:10115 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 332.095500] binder: 10114:10115 got reply transaction with no transaction stack [ 332.103420] binder: 10114:10115 transaction failed 29201/-71, size 56-16 line 3026 17:27:29 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x0, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200081, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfshat={'smackfshat', 0x3d, '#^-'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname={'fsname'}}, {@subj_role={'subj_role', 0x3d, ',^'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', 0x0, 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000000000000000000008d1bcc978fcc15f9098b46f15e0dccb70b30b9c66326606e4dfc3ec0a05874ad8c92709ca9047ca236e6cfc07d2f34eccd22e853a5c61f9a3564529beb0fdfd683c70245faf5074d8fa9dcf9595d1710"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x708, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c400100000002000000000000000b63000001634040000000000000000001000000000000000000000001000000000000000000000038000000000000001000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000000400000000000000852a6873b89dd9f7", @ANYRES64=r3, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="78000000000020000010000000000000"], @ANYBLOB="1063084004000000000000000b6300000e630c4002000000040000000000000004630440040000000e630c40060000000300000000000000"], 0x1000, 0x0, &(0x7f0000001040)="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"}) 17:27:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28001, 0x40) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200081, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfshat={'smackfshat', 0x3d, '#^-'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname={'fsname'}}, {@subj_role={'subj_role', 0x3d, ',^'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x0, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000000000000000000008d1bcc978fcc15f9098b46f15e0dccb70b30b9c66326606e4dfc3ec0a05874ad8c92709ca9047ca236e6cfc07d2f34eccd22e853a5c61f9a3564529beb0fdfd683c70245faf5074d8fa9dcf9595d1710"], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x708, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c400100000002000000000000000b63000001634040000000000000000001000000000000000000000001000000000000000000000038000000000000001000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000000400000000000000852a6873b89dd9f7", @ANYRES64=r3, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="78000000000020000010000000000000"], @ANYBLOB="1063084004000000000000000b6300000e630c4002000000040000000000000004630440040000000e630c40060000000300000000000000"], 0x1000, 0x0, &(0x7f0000001040)="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"}) 17:27:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0xc4c1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 334.803359] binder: 10124:10130 ioctl c0306201 20000100 returned -14 [ 334.815859] binder: 10121:10132 transaction failed 29189/-22, size 0-32 line 3118 [ 334.825419] binder: undelivered TRANSACTION_ERROR: 29189 [ 334.830844] binder: 10124:10130 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 17:27:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x0, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) [ 334.830848] binder: 10124:10130 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 334.830853] binder: 10124:10130 got reply transaction with no transaction stack [ 334.830859] binder: 10124:10130 transaction failed 29201/-71, size 56-16 line 3026 [ 334.879703] binder_alloc: 10142: binder_alloc_buf, no vma [ 334.879719] binder: 10140:10144 transaction failed 29189/-3, size 0-32 line 3255 [ 334.908079] binder_alloc: 10142: binder_alloc_buf, no vma [ 334.908094] binder: 10149:10150 transaction failed 29189/-3, size 0-32 line 3255 [ 334.923311] binder: 10142:10154 ioctl c0306201 20000100 returned -14 [ 334.923479] binder: 10142:10145 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 334.945758] binder: 10142:10145 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 334.945763] binder: 10142:10145 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 334.945768] binder: 10142:10145 got reply transaction with no transaction stack [ 334.945773] binder: 10142:10145 transaction failed 29201/-71, size 56-16 line 3026 [ 334.947515] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 334.998769] binder: undelivered TRANSACTION_ERROR: 29189 [ 335.004475] binder: undelivered TRANSACTION_ERROR: 29189 17:27:32 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0xc4c1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000022c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002340)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000032c0)="c8aeb64199e2e16ee7daf04ae9873682", 0x10) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffff9c) preadv(r2, &(0x7f0000003240)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/39, 0x27}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/50, 0x32}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x8, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) close(r0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000002240), &(0x7f0000002280)=0x8) lseek(r2, 0x0, 0x3) 17:27:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 17:27:32 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0xc4c1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)={0xe, 0x1, 0x2, 0x800, 0xb3, "d7e1cf613d7cbabad50024236d35e80413ee80fdd6cc02218648921ca5323c8fa4c81526ea2599c60487a1eb6f41d4ca7f189403dafef64650bcc4457f83ebf110b500efd91abbf63e4c5ed5e5bfd0b7ff2d99d200616ac4973b3a0772322ecad369ea5d73518cf8232ccaaf279fa7eac6172f08a4455f6ee17f0ee2021b0e2b9c52f54a7780ec4cd1339ac007a55edf5366f83348833d1a3463bf984dfb26129a3c6930ca50b5956dad8723f0bb8ceb6427f0"}, 0xbf) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e010040010f7300008f61211a82e21cbc1da05bec0f585eb0828f5e559958e62fac52dcf31500263dca6e5db73964b73c9950d49b5c8342071175973eb3c069916eb7a673833d36d533d8dde3ad73997fb9490b9506d0d6797151bce8010be9841c99f95d9b6c307a3283bd4a2fe214675e627f47674546785dcbdba6089ebbf86179e9e6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) r4 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x9, 0x3, 0x2, 0x6702, 0x1}) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x1, 0xa2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 337.806888] binder: 10164:10169 transaction failed 29189/-22, size 0-24 line 3118 [ 337.825938] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.841727] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 17:27:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)={0xe, 0x1, 0x2, 0x800, 0xb3, "d7e1cf613d7cbabad50024236d35e80413ee80fdd6cc02218648921ca5323c8fa4c81526ea2599c60487a1eb6f41d4ca7f189403dafef64650bcc4457f83ebf110b500efd91abbf63e4c5ed5e5bfd0b7ff2d99d200616ac4973b3a0772322ecad369ea5d73518cf8232ccaaf279fa7eac6172f08a4455f6ee17f0ee2021b0e2b9c52f54a7780ec4cd1339ac007a55edf5366f83348833d1a3463bf984dfb26129a3c6930ca50b5956dad8723f0bb8ceb6427f0"}, 0xbf) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e010040010f7300008f61211a82e21cbc1da05bec0f585eb0828f5e559958e62fac52dcf31500263dca6e5db73964b73c9950d49b5c8342071175973eb3c069916eb7a673833d36d533d8dde3ad73997fb9490b9506d0d6797151bce8010be9841c99f95d9b6c307a3283bd4a2fe214675e627f47674546785dcbdba6089ebbf86179e9e6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) r4 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x9, 0x3, 0x2, 0x6702, 0x1}) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x1, 0xa2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)=[0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 337.863310] binder: 10181:10184 transaction failed 29189/-22, size 0-24 line 3118 [ 337.873434] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.893210] binder: 10189:10190 transaction failed 29189/-22, size 0-24 line 3118 [ 337.902628] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.930555] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 17:27:35 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)={0xe, 0x1, 0x2, 0x800, 0xb3, "d7e1cf613d7cbabad50024236d35e80413ee80fdd6cc02218648921ca5323c8fa4c81526ea2599c60487a1eb6f41d4ca7f189403dafef64650bcc4457f83ebf110b500efd91abbf63e4c5ed5e5bfd0b7ff2d99d200616ac4973b3a0772322ecad369ea5d73518cf8232ccaaf279fa7eac6172f08a4455f6ee17f0ee2021b0e2b9c52f54a7780ec4cd1339ac007a55edf5366f83348833d1a3463bf984dfb26129a3c6930ca50b5956dad8723f0bb8ceb6427f0"}, 0xbf) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e010040010f7300008f61211a82e21cbc1da05bec0f585eb0828f5e559958e62fac52dcf31500263dca6e5db73964b73c9950d49b5c8342071175973eb3c069916eb7a673833d36d533d8dde3ad73997fb9490b9506d0d6797151bce8010be9841c99f95d9b6c307a3283bd4a2fe214675e627f47674546785dcbdba6089ebbf86179e9e6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) r4 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x9, 0x3, 0x2, 0x6702, 0x1}) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x1, 0xa2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x0, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) 17:27:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:27:35 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) r2 = getpgid(0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="260000f5619202ffffffffff0000000000", @ANYRES32=r2, @ANYBLOB='\b\x00vboxnet0'], 0x26) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) write$P9_RSTATu(r0, &(0x7f00000003c0)={0x8d, 0x7d, 0x2, {{0x0, 0x67, 0x10000, 0x9, {0x40, 0x3, 0x7}, 0x2040000, 0x3fd, 0x0, 0x36a, 0x11, '/dev/vga_arbiter\x00', 0x11, '/dev/vga_arbiter\x00', 0x1, '\xbe', 0xfffffe9f, '/dev/vga_arbiter\x00'}, 0x11, '/dev/vga_arbiter\x00', r3, r4, r5}}, 0x8d) 17:27:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x800, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 17:27:35 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000080)="627a74f69489bb20f3d4d3e775320f49dae15f44a230daf6857e", 0x1a}, {&(0x7f0000000380)="b0569c2ecbdf151ecdca5a88a1f3e39b316baede8b6a2101193fd0c547e0747996a3bfda9634fe77e974b5218414dc2ef6b5ed8d2772208093009420aafd0b6bebb8b7213f2c661b0161b9b91693c51e52fa049143d3da811047a5188e4202d1d729026ec54b9176171166ae9df093e50eb83d5eb30c920c624af98ae919befc08100c960f4cc2675b86f3ecdad7766e894c9ff2148d45e74bd7e544f47e8e65236ca03a682e5dec1f7cdbdd1c96f16df1b9791e9e25d4d591793c7821b73b038b", 0xc1}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000500)="f47caa96ef95deac8d2a529bae52515f847977dd7603c861acb01355bc57add9cdb88530ddff491b86924143197a710124c6641063cc71302ab0693079448d94b5897fbb207d9a83f6d2d67bab634a4bba3fd1bcd0e8b83907ea9eeec0bf18211f12175a0a19c7b75e5c733ed9d96364e47b5b587675d889ec88103fd280b6e3aa70a475582acf1d", 0x88}, {&(0x7f0000000140)="04a206ce8fdef98ba75fa1f1bc2ba5e22463", 0x12}, {&(0x7f0000003040)="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", 0x1000}], 0x8, &(0x7f00000007c0)=[{0x38, 0x108, 0xffffffffffffffb4, "8739981fb007463bed2239cc48d135dbdcab8061e89646d464e9fa21dec948f1aac3b3"}, {0x48, 0x10f, 0x8, "ca7441570a919f80f5c78338390a1d14b6117b0ea7cb770c1c64bb6107c059fb248b6832254c15f5c42f4e75e57510de5bf08d7c6c750a1e"}, {0xe0, 0x1, 0x8, "2d1a4b5959ffd7863dccfe77116f95ca3af4474167b65d5864d831c33336273e91662d51537184bec5a7e685fe79cdac4ab7f50ff0e80f926ff9c00b84babcec33d942b1b751c8ba9d8c788f0b186f5f8aaa35c2da3fbfcf0ce6d1077476941fd587ad70db98a1d73339f72cd27bfec7db3fbb2094e822324b00cc3516e5867d11cd2bc73d13445ee49974a2224c9fa95db2c2d4505d09f13e2d7b55a8141368dee503fe24c515fcb38783822f6c7c7acc830bdeed565958892714898e5b4d2d44c58d639d3f3342a262a812fe4a"}, {0x40, 0x105, 0x6, "7d1288340c565c6beaf9e666ac08c98c0692c7e2923da016f4e0212fb2e7ce07ccc86a0ff2c8e14cab4326df83"}], 0x1a0}, 0x4040080) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000000100"], 0x0, 0x0, 0x0}) close(r2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x7fff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x0) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioperm(0x0, 0x2, 0x10000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 340.824487] binder: 10205:10211 transaction failed 29189/-22, size 0-32 line 3118 17:27:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x0, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:35 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000080)="627a74f69489bb20f3d4d3e775320f49dae15f44a230daf6857e", 0x1a}, {&(0x7f0000000380)="b0569c2ecbdf151ecdca5a88a1f3e39b316baede8b6a2101193fd0c547e0747996a3bfda9634fe77e974b5218414dc2ef6b5ed8d2772208093009420aafd0b6bebb8b7213f2c661b0161b9b91693c51e52fa049143d3da811047a5188e4202d1d729026ec54b9176171166ae9df093e50eb83d5eb30c920c624af98ae919befc08100c960f4cc2675b86f3ecdad7766e894c9ff2148d45e74bd7e544f47e8e65236ca03a682e5dec1f7cdbdd1c96f16df1b9791e9e25d4d591793c7821b73b038b", 0xc1}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000500)="f47caa96ef95deac8d2a529bae52515f847977dd7603c861acb01355bc57add9cdb88530ddff491b86924143197a710124c6641063cc71302ab0693079448d94b5897fbb207d9a83f6d2d67bab634a4bba3fd1bcd0e8b83907ea9eeec0bf18211f12175a0a19c7b75e5c733ed9d96364e47b5b587675d889ec88103fd280b6e3aa70a475582acf1d", 0x88}, {&(0x7f0000000140)="04a206ce8fdef98ba75fa1f1bc2ba5e22463", 0x12}, {&(0x7f0000003040)="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", 0x1000}], 0x8, &(0x7f00000007c0)=[{0x38, 0x108, 0xffffffffffffffb4, "8739981fb007463bed2239cc48d135dbdcab8061e89646d464e9fa21dec948f1aac3b3"}, {0x48, 0x10f, 0x8, "ca7441570a919f80f5c78338390a1d14b6117b0ea7cb770c1c64bb6107c059fb248b6832254c15f5c42f4e75e57510de5bf08d7c6c750a1e"}, {0xe0, 0x1, 0x8, "2d1a4b5959ffd7863dccfe77116f95ca3af4474167b65d5864d831c33336273e91662d51537184bec5a7e685fe79cdac4ab7f50ff0e80f926ff9c00b84babcec33d942b1b751c8ba9d8c788f0b186f5f8aaa35c2da3fbfcf0ce6d1077476941fd587ad70db98a1d73339f72cd27bfec7db3fbb2094e822324b00cc3516e5867d11cd2bc73d13445ee49974a2224c9fa95db2c2d4505d09f13e2d7b55a8141368dee503fe24c515fcb38783822f6c7c7acc830bdeed565958892714898e5b4d2d44c58d639d3f3342a262a812fe4a"}, {0x40, 0x105, 0x6, "7d1288340c565c6beaf9e666ac08c98c0692c7e2923da016f4e0212fb2e7ce07ccc86a0ff2c8e14cab4326df83"}], 0x1a0}, 0x4040080) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000000100"], 0x0, 0x0, 0x0}) close(r2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x7fff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x0) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioperm(0x0, 0x2, 0x10000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 340.866954] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 340.885300] binder: undelivered TRANSACTION_ERROR: 29189 17:27:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) 17:27:35 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000080)="627a74f69489bb20f3d4d3e775320f49dae15f44a230daf6857e", 0x1a}, {&(0x7f0000000380)="b0569c2ecbdf151ecdca5a88a1f3e39b316baede8b6a2101193fd0c547e0747996a3bfda9634fe77e974b5218414dc2ef6b5ed8d2772208093009420aafd0b6bebb8b7213f2c661b0161b9b91693c51e52fa049143d3da811047a5188e4202d1d729026ec54b9176171166ae9df093e50eb83d5eb30c920c624af98ae919befc08100c960f4cc2675b86f3ecdad7766e894c9ff2148d45e74bd7e544f47e8e65236ca03a682e5dec1f7cdbdd1c96f16df1b9791e9e25d4d591793c7821b73b038b", 0xc1}, {&(0x7f0000002040)="fdf1517dde54b9b5e8b62ac98cec7d3f0915809b5ccaf06117a72c931a6f6ccdce869ad31cbfeafaa7b4a78a5c05d527b2c85b64884f8b2da24d0f55d2c660b34146ac0ad344c92689580afafeacdff5f437f8dda5003246cb1b1631ead13639c78c6a7ab46d4896a7c20f5e73cd1249a8f0df800a6e03456aa8e019874273905af88116ab7fd48631bb73d369040b9a96c87fa9749ce12bd85b7c13a97101dc500aba9017ee270f7b033d4d7364cd081a5fa314d558e8b8d4e0029fca1bf2bf0a7d838fbc8fef6f70f4fc2590d8d2362c19e41b6432b274d4a3d7c6ab595c8a879774a32c3c4676afd7f971b7f57c84b8f075ce6e7220cdc89c950ca0608c5810e88c8bba99f839ab82991052153201e97fa9f4cb442b077daf3a5ee6633b1ca27361e20a05230e530c14f9e7e3c2d6e71e22c4d606d855d021b876f1e7a1a3204a7382343cc6fd94605557b61c4e6ff266e6e582c8d0552be987c574062e0ebc49f81867155d7fac94f7ead86c6fa396904c95f27622757a6389dee88e308dbd9f84683b2a61d718521d1229d01c55f09e9bb1f1a1045382c67c242a0633d679abe74d74cf25831fbcf7ae7f584f8c46720cd4d0e7b36ef0f07cd4f0323e633d19d78d888a7a6cccb00ff954b7a81a312bfe179050b09a6d7b5fe8dd47f912629334e57c1debc80899c129c0b0eba05e611984ead154d5b9b1a9d09bb96441cf4a668ddfd420bebd5b81a4c5ddbf3f65a2f5efd5b324e2526a7ea2215fab414eace7057abf3006def41dc4ab85564faae85bacbaf049188ce2723765881d2b04450b4140b1e3f4ebc28ea92f6a053fc9f52005fb71b5e7b5d063e018a3c04c6044e3c53a3b7db80b56b313b1f14537243de555e358777426d827125a44393d2931636954dc71ca2921eee5e3bdb6e35619040db7c658032528a7f0d989835e9b9ca86ff5bbc88dab8dc17bd009fb270e72898d4ea716f09e36ede17fb5921618b1edc141197e5b31ff4ff0a1037be7541c99e1fb8cd0e514adca963cc8480213b241aa9764d7e155e14fc9ede9e28fdbe23da8815e49c42484ac6a9ac28c3bab18f1317212e1d0d8f7fe1c3569c27fa1735f3ce5c88df49ec0fb4cbfb89cc9bde932b17fc52394d74f8f0e7af496d85a32c84b372c3304a9b6bac91d0710dde71e8b87e80066f9f08654292de20cd61b791379b3617eab9081cf2f0abcc315285681da9ef4aa61694ee1b5f64aa5aacb0a38af0a6542fb6846b49977ed0ee8aa851ff05a0667ca813ad20ff51d1a215c4bf5396f2c3141ebe298dfcd8561d72ec99b38497ec4ed637a7f5e0c28f976c482822b37c510f47733523581ff18b871078af0a2ab26c2849521c54eee5828a66546df37648ef8bebadd377ed2903987d985d50c5c64e93731c0f367581d38a1ae63324b9bb759a8d20579cf20c05b3bc230b278a7e168801b322cc3ea4fd2aeb8edc2182581d1c055cbee4f74cc00987801e7c660345aa5aeb9500368d2cef4bc01c2022f5f911037376d557406f96c8f18456923f53b9e6adf7b7908a86e3e01a376593dd61faa9956efe39224dc218206f24dd41f3c071225940cc9fc29b71d45568dc3d6fdcbe8f10215a28cf356b20fb26f3a6b21f0860a5f1fcd3cb8d00632dae0a41ff3acf472389713481f66678d36eb53211d04798cc849d3c42acc4ece97a9fe6679bdc75b9701cc745abaa848bd66b57e1c4a2b470426c6363df6575c6e4919204d9baca77b09872c825a0ace9bbca82eb81aaca0c1f535b5e7528be63d9b64608911df22997cebb7b8d54a1e59ed142962e6694dd683ca48cfcdc44f7e598f97809f6dfdb2e1550068849c792fdb9780b2d00f456df2cb5c211d325afc74964549076f44f6184c6be58035669826d910b4725f0024563704e1dbaa379aa3b2e719c04bd57a3d054453872f3215883a0dae16a9b58c59a611c55080beecbadbc9befd025ee54da993b913eacfc41cb158ad4c5af66cf6ab7be7261ffe47dea23f15d8ab4f28672fab24d75c8d1bdb469d0f7a001ea01aa4ea649879e141976affb29ed3a996850de8ec804e286d8b5460d0c89e7d52e2a6763f64f3585222a9b1e763fec4bef135aee1c21547b775b0e4a2886ebb9d9924a989ce4f443ec8edea199ab38b6d46570ce4b0edc32fbc6051c303903d2ec176617b3a5875551ffe08a096399fcfd69b83b9d758b4f22a80521c16c0334ba13a7ea7cdcb7bb1946a8f3f6cae47c43f8304e3faa2076759d8807c7bc763ab4f35850d94e468b134de33b88678d9cf4517933fa40c5cb041851b6734f37799648cd8f30b74f24b3b090bcd04e198050026a6a93e5168854cef356e6cb753624d2077877514acd2f47b4268e584c74be0fda4e7763e64676ad3dedd7fb726c830109de9257ad2e759b16648a9d1f001323e800be79f6c2f15b6a606c5c468b6608137a00ac6a4b63062512bb8b9a192f46f9acdf274a5c78d8ecba16d6d5ee48c2eed7fe8f5f0275c94a49096faa653b1e2430ff15b852f91ea0bef93267bd5410b82d9327f846d2e22d90f8b5f283efb35d01b248315dc0a9e1a52cbdd3ec6960cd8791133c6fe0c4acdedc9be3c3dd3cebdd8b29c663859c222aaec0d6f3df9f56a566ee0dfa3ccb961915c9d61e09706ed5a57b23d55c65d411a22d44f5c998de66103f38ab63fd905bbd532a658ef65f45d8f84a4cde2bcbbdcdd4a4e8ad05c47c3dc984ddc1c92383cdeb0ad6bafb906f8bddbadd3ac0430b5c8e5a81e83e5df8091aed9071a51ed9f29553264ce7563241958905b21665f7df15f5d49a84304d18ba68c270adf74a40923aab55ff33a4a8ad98bc06888109d85ae25983d6f57c0ecf1bb846acca3a34cbc96c5133752c5db7511cb6efaa41e90b49ac0f79b47dc88d29d1c99909caac23dbd00e329f803275bec10c18ef3a2ae08b10be57175340e7cd53786bb857d50909c30fb45ee9b8f58eb3baef0ec555b855cd5617c578b28f6da2f2544dcbd5d787bb69405d91a43320f9b031d7d652299cc2256f88228b2cd085d54cefed754c1a325f71d47bdbab8e5b43792f61c7b087d47936d0dc2280b35383872fb288a250e8e0dd4404165e300a6b59c0fb304415cfca034c69add258de1b1dfbdb62da1b4ed351725838cee5f1a8d36b92292a0ee97f1a7686f990ba3cc652d34645f8a645d6f4eed4222f42bd9163f4ee05c5c86f7d5d77bb05f36ac7f3caaf1f5224dfa0696e257ceff5058255848aa235b7385c7d5b1217840ae5d6a7cd5434def81b6cdff78a62e7cf501b3d34096616e2bf31d821aca03c9cc121d7312b9ab5b509aa67b7f3e68a8b44462c6515df2ebaf74295ee9c4d6917f8048d05280835002d80db8a58b48e7ae266b19313470e4d94dbcc217df0c9ac8a03ebedd2d08c54bd8c7582614a6acc7a912fb6e20cab592883a31d09658f180b6f2ff047fbfdab74551155046bf5e8f438ffb5a1ce735fa620884772baf214586cc60162e6b516521f4028e8e1d4d1b7b533ff3fae08b7cfd4e7b1c78287717a49ff492f18f5438f9ddfde504f8f43dd98588210912aeae1435bab611c9da70d0486b4f7c2c910ac736b0dbd0388c0c0a58836c5fb9dbcb6b7eeb7562e97dd958737745e8d4788ed7543c39d63ad0d10a7ed1dc5235ad4cca5e10034932d5081c0b9247e5a08518e05311bc6555dc548d7aa683b03f5a81e8d816d2402b596438ae2f69f5aaae81748861b1aea04ca24aee4275701137ebc3d0a8ff81141b84cbbffbb6dbf7ada1da31e6bb1a066886d961ccb17fdb107756bd38ce5b232381ff30ce80ec715a51c2837f206b25b0ddbc64e2ec5adb44368da7cd6ddc6fb538be69d4d8187a5fb1b1f70e5e926fe131e18aeadd7c50041d8878ec85b741eb5578cf223ecb4ea22fa1f56bc2d932e15dccdb31eaaf6d97d2808d4b0aa82c032a7611f7834a9437bd3c2109faf777addb1785e57a03816eee06686a7776ae5e19eebc3741238d5a8fb8a19510f9eed7ddf4e5a931677b746625c8fba5a96f46739d6fac0540b1bf11aa3aadfe456c2601e1334be02841fd0c10b62b8c6dc48c88d4c9259779d28c55877eba6ea1407bb28991f7da8c501d34484a39822aef4ea90dc6c485c36092eeb8c2494e2efd0a1c379e0092184922a1bf5c4cb0bee3d27ba44c74865ddb2cab1dd23d773703d767e4c5812c72d820cf7a206c43f6fca431258db7636fabde1d43454c59b6c31ddca4d89a0948fc53ad6d740eed6a2c37826f9f6817e5419cdce4e19e002b63089568743e420880e02a69d3c5011acbb3984fcbe0b1a98925dd2396dd91c906bb47ba716c136b7f8f9ac5c09934a919bc34a7779c13e554e790e209f6f994c4c9da6d2eaf3121ae0958de34bd0e3971057c7ce8789bc0bcb36e4322aeff9d9dad1ff92591b517ef5fd34664f0bec820dcf6494d82c70dba4bc542c192fcc5f9d196e158368551549ef8d472f41c571e19d32501d6dfae04dff58885840fbcfac05927dea316ba70ac5d4dc9c6938103062627cae6e6339d6202f4d119b1059b3860f54ad025c6b85c148334a57da291681015142f76d621599557dbd21be4429fef2068022774a696a1edec45cd6ed147e89c9f8f7500f69e2edf532f28f4d3b311e43c51e7f3f5b8f29a1db0f9234fe407c537f42bb363d1a2aee9f33127cba870fd31b73b8deec0b284f003b9017f3f7ab08f49848ecb314092d31e2ba38b4a9dbe91541864ea716f08cf8ead3a801a42aa8f6c7a7fc3deab4e49f697411bced258aed22708588e34fb8e2d562ca1c82331f0a9db4a4fac9cf5505fe83675fbf47c2fc885487ca9522dad3809aa2413bf5218995912ace456996983ee0b2ffb0db9cf333e5a236b04be832a2d7f036e5dc9d4e3e4c87a815797fac80cffa705e75972aa0f2730aa73b9205e867591240c291be24af8530ee3933da246be1e43f1a10defbbc7f455a2e0915efc0a32ecacb6e4edc58707954e64363a73cb78ed7f869c32a7bf22985e8a2b04ee0cc64e575d58c3afc31fa0d6c4d794e8fdfab6c9cd46646603d4324cc31a2cea2ecbfccefdb49426e66b0b04f8d049ba7d1e5be3534a989281e1789eb4a1c08958db0eba3d26a9395900c75651a7cfba10431583b6e8d274fa60ee487e134b1162f5b31e9d395f7cb12d35b1cad920f65de8e882949e04145bd9ea725d8e850901f2a9a36b1942add92f0c8c5c24a6cdcd74ff81ee014abb081c04c28b5678bd5f11ac78f6316af3fa0e92ae276d83c8cb2d2268835a8afbd3274dc8bb88b9902ddc9e4e35dc3ab8c973f5ed354b1c237f462805645fa0339f964be256885af965d7f268f378ec9dc0a6eade2864a01bf7cb8c148b59faa8353465e2182bc9bb77d19e15496c82654522258c2fa3dc0989452744a22e7e89681f34240a6a553779650bccdefcbd3b885d698a289636112dcdbb1d3600dc09cd7d0cf9f03d9db88bc506f883e2c098881f1057f1e4cab45d0bedf2f68f0e9c2f12f3617302a0f309f54bdabbab1386d7cc039c31714572dd0b65b04f5574ed6a71e0b9a2ce9321769c629812de2393df8c1a7c457bba29944c906834bf31a6984b9f155bead1e14ee8b7a9115a7cca7ee6c7520c81edb9d82ee30426c858734b88428d3d54c4b069935054592c35d44b80c443181b71ef0629d01a7efd61833473c6239a6d55c64893067a1efeb9b3df83ede54bda76652961e5ab3826b647c12baba9615292201e662955e86e3dc222b78bfddde037c9637c", 0x1000}, {&(0x7f0000000500)="f47caa96ef95deac8d2a529bae52515f847977dd7603c861acb01355bc57add9cdb88530ddff491b86924143197a710124c6641063cc71302ab0693079448d94b5897fbb207d9a83f6d2d67bab634a4bba3fd1bcd0e8b83907ea9eeec0bf18211f12175a0a19c7b75e5c733ed9d96364e47b5b587675d889ec88103fd280b6e3aa70a475582acf1d", 0x88}, {&(0x7f0000000140)="04a206ce8fdef98ba75fa1f1bc2ba5e22463", 0x12}, {&(0x7f0000003040)="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", 0x1000}], 0x8, &(0x7f00000007c0)=[{0x38, 0x108, 0xffffffffffffffb4, "8739981fb007463bed2239cc48d135dbdcab8061e89646d464e9fa21dec948f1aac3b3"}, {0x48, 0x10f, 0x8, "ca7441570a919f80f5c78338390a1d14b6117b0ea7cb770c1c64bb6107c059fb248b6832254c15f5c42f4e75e57510de5bf08d7c6c750a1e"}, {0xe0, 0x1, 0x8, "2d1a4b5959ffd7863dccfe77116f95ca3af4474167b65d5864d831c33336273e91662d51537184bec5a7e685fe79cdac4ab7f50ff0e80f926ff9c00b84babcec33d942b1b751c8ba9d8c788f0b186f5f8aaa35c2da3fbfcf0ce6d1077476941fd587ad70db98a1d73339f72cd27bfec7db3fbb2094e822324b00cc3516e5867d11cd2bc73d13445ee49974a2224c9fa95db2c2d4505d09f13e2d7b55a8141368dee503fe24c515fcb38783822f6c7c7acc830bdeed565958892714898e5b4d2d44c58d639d3f3342a262a812fe4a"}, {0x40, 0x105, 0x6, "7d1288340c565c6beaf9e666ac08c98c0692c7e2923da016f4e0212fb2e7ce07ccc86a0ff2c8e14cab4326df83"}], 0x1a0}, 0x4040080) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000000100"], 0x0, 0x0, 0x0}) close(r2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x7fff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x0) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioperm(0x0, 0x2, 0x10000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 340.955838] binder: 10228:10231 transaction failed 29189/-22, size 0-32 line 3118 [ 340.977023] binder: undelivered TRANSACTION_ERROR: 29189 [ 340.999926] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:38 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x0, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) 17:27:38 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) clone(0x1017ffe, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) 17:27:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) 17:27:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 343.853413] binder: 10244:10251 transaction failed 29189/-22, size 0-32 line 3118 17:27:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x40, 0xb20000000000000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000b65904ec53e527d8906af8cfafdecf02f43323894f882317c784c1bfa2e6fce1a7bfe2511a2f5aaaa7d671363f3eda5511f8c32006631f1b600b234f4c3ec5df67ab46ce929a8665e58eca6aa868b2c32a6e4dd15df26b2d45ea0cc065ef3bcba4bd323538c43b2bfca47996736b73bfe2547707ae8302f3b0ccae8a66567518d21196c001292f"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 343.887057] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 343.895109] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 343.926331] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.008956] binder: 10274:10275 ioctl c0306201 20000100 returned -14 [ 344.030388] binder: undelivered death notification, 0000000000000000 17:27:41 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:27:41 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 17:27:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000004e00000000000000000000000000000000000000000000000000000000000000000020001000000000000000000000000800", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000"]], 0x0, 0xfffffdfd, 0x0}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000000)=""/119) 17:27:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="e2fc0c684ca200129f9c8b40e1a6c198893451e2e35022e30ffd4d19fc127944f0b0c08b81a64aa66337cc555e837cfffced557313c224b9b6f75054e7475335eeda3619ec9ecb947408bae519c8ce35467441b7177bebd06a0a76a530f42418f4ee005ffe98ab284c300f3b8f5c24b99469dc09c815cfa067278154c02c4a97808d561a43d0a8d2decaeef29765451ea1e8b1689e3d827798a16661b6eba380c46c35a2cd8061cebb8e0ed7dd410d781271c055b640a1f2680ea75c66317e02b8a612032a3728d9d7d5ede01494") mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xd0a6, 0x2, 0xf4, 0x7110000000000000, 0x400, 0x3, 0x6, 0x81, 0x54, 0x38, 0x129, 0x7ff, 0x5, 0x20, 0x8, 0x5, 0x4, 0x3}, [{0x4, 0x7fffffff, 0x6d6, 0xefca, 0xdaa, 0xb9, 0xff, 0x9}], "639f0d25366e3e554e3bb2ad76ffd4e6954995aba05f63babeb4e0f1861a6ca0905a6c3e71eab6076756ba1785733209e6cd00a0daf6", [[], [], [], []]}, 0x48e) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/252) 17:27:41 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e20, @rand_addr=0x3}}) keyctl$set_timeout(0xf, r1, 0x800) [ 346.879568] binder: 10289:10293 ioctl c0306201 20008fd0 returned -14 [ 346.897399] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 346.904288] binder: 10302:10305 transaction failed 29189/-22, size 0-1048608 line 3118 17:27:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 346.908409] binder: 10302:10307 transaction failed 29189/-22, size 0-1048608 line 3118 [ 346.908600] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.908615] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.945412] binder: 10289:10311 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 55c1cdd333063edf != 0000000000000000 [ 346.945433] binder: 10289:10311 ioctl c0306201 20000100 returned -14 [ 346.950981] binder: 10289:10311 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 346.993398] binder: 10318:10319 transaction failed 29189/-22, size 0-32 line 3118 [ 346.997449] binder: 10318:10323 transaction failed 29189/-22, size 0-32 line 3118 [ 346.997641] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.997657] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.007523] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:44 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:44 executing program 0: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"]], 0x0, 0xfffffdfd, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r2 = getpgid(0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) 17:27:44 executing program 2: sync() syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40ec6f4cc24f13e7, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:27:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r2, 0x9, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4400fffc, 0x0, 0x0, 0x0, 0x0) 17:27:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 349.901833] binder: 10335:10346 transaction failed 29189/-22, size 0-32 line 3118 [ 349.914687] binder: 10340:10348 ioctl c0306201 20008fd0 returned -14 [ 349.915173] binder: 10340:10348 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 55c1cdd333063edf != 0000000000000000 17:27:44 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair(0x5, 0x4, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0xffffffffffffffdd) 17:27:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x400}], 0x0, 0x0) [ 349.915181] binder: 10340:10348 ioctl c0306201 20000100 returned -14 [ 349.915295] binder: 10340:10348 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 349.933436] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 349.981326] binder: 10335:10352 transaction failed 29189/-22, size 0-32 line 3118 [ 349.996192] binder: undelivered TRANSACTION_ERROR: 29189 17:27:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}, @enter_looper], 0x36, 0x0, &(0x7f0000000040)="bed36e0fda8296f3f91c83942c5cbe6281c4e0d0afe6b4893049f888ce99f6de1fe80e11b4d3345657bcb81d6a8681278ce61bb22987"}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 350.002286] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.018928] binder: 10358:10362 ioctl c0306201 20008fd0 returned -14 [ 350.028835] binder: 10363:10365 Acquire 1 refcount change on invalid ref 2 ret -22 17:27:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000386a31ef6b62bd56ee0631dec9f79913fd54a38eb3d360093605f952d77e7642721053653ee30d81d2c4872ffe7784a889306c556945cd00ed2289e6e8d41fff66bb77bea131c4e0ba6038cebe3e9e9496", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000380000070000000068f0ffffffffffff170000000000000081ce49d33795cec443a2321d2a2a06a9bf7c2fa0abdc903d36f172bccd54e2d45ddc5b8d73c98ff5a2ce1ccb4d5820676851196e265e911987a172e45ab76eeef2ba2bde042940172030707d8186253fac3167162603df3b425b342d008dad51e8b7e4a20eb34aac16f53c052ae86d258c5dbd83cd4770e996ff9d92dd3eafd8610dfd6b2be271e383e8fa3552285fa0c9f68efe5b854b3e74bb2e"]], 0x0, 0xfffffdfd, 0x0}) [ 350.028949] binder: 10363:10365 transaction failed 29189/-22, size 0-32 line 3118 [ 350.029269] binder: 10363:10365 Acquire 1 refcount change on invalid ref 2 ret -22 [ 350.029470] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.044896] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 350.055982] binder: 10368:10371 ioctl 8040552c 20000080 returned -22 [ 350.056290] binder: 10368:10371 transaction failed 29189/-22, size 0-32 line 3118 [ 350.056683] binder: 10368:10371 ioctl 8040552c 20000080 returned -22 [ 350.065733] binder: 10368:10371 transaction failed 29189/-22, size 0-32 line 3118 [ 350.066238] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.066255] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.076934] binder: 10358:10375 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 55c1cdd333063edf != 0000000000000000 [ 350.076948] binder: 10358:10375 ioctl c0306201 20000100 returned -14 [ 350.077535] binder: 10358:10375 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 350.127785] binder: 10378:10380 transaction failed 29189/-22, size 0-32 line 3118 [ 350.138643] binder: 10378:10380 transaction failed 29189/-22, size 0-32 line 3118 [ 350.138846] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.138909] binder: undelivered TRANSACTION_ERROR: 29189 17:27:47 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 17:27:47 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000640)={0x1, 0xfc, "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"}) r3 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x10000, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}], [{@uid_lt={'uid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@obj_role={'obj_role', 0x3d, 'cpuset-%proc'}}, {@uid_lt={'uid<', r5}}, {@obj_type={'obj_type', 0x3d, 'selinux-@'}}, {@measure='measure'}, {@fowner_lt={'fowner<', r6}}, {@obj_user={'obj_user', 0x3d, 'vmnet1&(&,:.\x99G-vmnet0,'}}]}}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 17:27:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffeffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_adj\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000380)={0x3, 0x70, 0x8, 0x1, 0x4, 0x0, 0x0, 0x1, 0x200, 0xb, 0xecd, 0xa4af, 0x5, 0x7fffffff, 0x7, 0x8, 0x4, 0x9, 0x53, 0x1, 0x3ff, 0x8, 0x9, 0x8, 0x9, 0x7, 0x8, 0x2, 0x7, 0x3, 0x5, 0x0, 0x80, 0xffff, 0x401, 0x3, 0x9, 0x5, 0x0, 0x1, 0x1, @perf_config_ext={0x8001, 0x1000}, 0x0, 0x13, 0x3, 0x2, 0x8, 0x80, 0x9}) setregid(r2, r3) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x6) fchmod(r0, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x10800, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x20}, 0x60, r6}) 17:27:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x80) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0xba}, 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 352.889437] binder: 10390:10393 transaction failed 29189/-22, size 0-32 line 3118 [ 352.896986] binder: 10389:10396 ioctl c0306201 20008fd0 returned -14 [ 352.897146] binder: 10389:10396 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 352.901703] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 17:27:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:47 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) [ 352.955603] binder: 10390:10393 transaction failed 29189/-22, size 0-32 line 3118 [ 352.962790] binder: undelivered TRANSACTION_ERROR: 29189 [ 352.978346] binder: 10408:10413 ioctl c0306201 20008fd0 returned -14 [ 353.006499] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 353.019752] binder: 10418:10422 ioctl c0306201 20008fd0 returned -14 [ 353.058503] binder: undelivered TRANSACTION_ERROR: 29189 17:27:50 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = dup(r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2d, 0x0, @thr={&(0x7f0000000080)="1fea1e7fe0a21717e64c21ff4da4776586d8e94f6cc5767c5ce95a1093", &(0x7f00000000c0)="34daaa67ed5ada870b5e237bfaf92feb9a4acda18dfcecd6bed5ed63550bd3c68ca7a462d296a49e88a3a05d"}}, &(0x7f00000001c0)=0x0) timer_gettime(r3, &(0x7f0000000180)) r4 = accept4$inet6(r2, 0x0, &(0x7f0000000000), 0x80800) accept4$inet6(r4, 0x0, &(0x7f0000000200), 0x80800) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)) 17:27:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file1\x00', 0x2b4, 0x3) ioctl(r1, 0x3, &(0x7f0000000000)="2fe6aa16ea0cfd33f64c9093589f593d9b0a0449e016e4fb88906034ba1486561c4342e2566cf6b7daed323ffc35c32b857aa441bb77a05e9fb454796afea917103e21d7f4aa410704b621fa46440b2051c6726f26567028a6ee46b81d6276a4e50fb192b2ca7cf084df8b8e98cbca5df37b6ef343ca1d33367005cb289c45dd609f9a7f36935e4fe8d98128f719642a63fe69aa5c5666ed77") clone(0x70024100, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x3, "509a641365f4c116"}) 17:27:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = dup(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x6, 0xfffffffffffffffc, 0xffff, 0x0, 0x8000, 0x80, 0x4, 0x974f, 0x401, 0x1, 0x0, 0x1, 0x0, 0x400, 0x100, 0x4, 0x3, 0x0, 0x0, 0x1, 0x93, 0x7, 0x775d, 0x2, 0x3, 0x7, 0x4, 0x4, 0x34, 0xa4, 0x80, 0x6, 0x6a4, 0xffffffff80000001, 0x1, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x8c00, 0x7, 0x200, 0x7, 0x9, 0xce78, 0x7}, r2, 0xe, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, 0x0) 17:27:50 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x4, [0x543, 0xa53, 0x1cb, 0xd86]}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x40) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x1, 0x0, 0xd80, 0x0, 0x8, 0x5f, 0x9}, 0x0) 17:27:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) write$cgroup_int(r1, &(0x7f0000000040), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x2, 0xd2c, 0x8, 0x5}) 17:27:50 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:50 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000340)=0x8) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x60000, 0x100) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000200)) init_module(&(0x7f0000000280)='eth0vmnet0GPLmd5sum\x00', 0x14, &(0x7f00000002c0)='/dev/binder#\x00') syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000)="15283b6e9ecb44fdf62dcda5ce1e734bf0178be0291ab5aab3e1ba86ad9a5afb19ef70e82bcbb2b0caf110e37205cdf15e8776d3bd0647ea80d3104f5cce26b62b63fd2b0aceaac1396592676884741dad3fcdb4a6931774662ee27fafb36661d08382173df59ee9250c1f3d80a75289a55f1e3acc74bb09c6f7fe2e986ee156901ede54f0bcdbd7bd7f181a54347a9223a6651f1f44e659337436da498fef748e18b06ac5869c3c569dea6661dae384e81ddc3f73b99cc8e0237afd5525", &(0x7f00000000c0)="2dd3e6ceb59afd52f9d6e64d57c2d39806d4336dcc506c8db3e9580c823b8a932d875333b69a24ff0843f49c67bd7f7ae264f9eb74f9a3e59e26202a481e6d2fb265f1c33317f351e2e0ab22842cbbd3120695cac2e1fe8a1df2a8034dbdc98f95c2dab345ab84cdf174e8b0a4fcb49251ab9be6deafa5209e1be4d5a3b5dcd406a4c4ccee312d3e7f2219f2f9191d3aafe668400cb52511be032cac16a38ec14014ed8c40ebcb78", 0x2}, 0x20) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x20) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000240)=0x6) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r3 = request_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='\x00', 0xfffffffffffffff8) request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='@GPL\x00', r3) [ 355.917008] binder: 10432:10437 ioctl c0306201 20008fd0 returned -14 [ 355.922277] binder: 10435:10440 transaction failed 29189/-22, size 0-32 line 3118 [ 355.923539] binder: 10435:10442 transaction failed 29189/-22, size 0-32 line 3118 [ 355.923699] binder: undelivered TRANSACTION_ERROR: 29189 17:27:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="306f000000000000380000000000000068000000000000001800000000000000b8d4c2c57c93f6a80f190f463a9d3c94f035f27b8863d79284ca7938c770515c32ffd3eb82cf731b47f355c0b9d9a216998e67fe8e168ac218d2dfe54cbc889689a7ac72c2230b112b228b553b363401ea1b1aef919b0e00002d8ce5ace907fa4da78c224dea66674ff500000100000000008184441cf77c24d72db74d74e1437d3bad4b23e7d606ca6354975887387803000000896a4244d5c7976fd03ab7772c9bc96a30de646bd8542272c2b96d5de7c5354d090a411b9ce1691828df033f7cde6219c0355b46e81105958bec4481544c2eae9ebfe15932d2cce1bab4f7226893c53c887258267b16f5cd99b52ec85f7a36e801dfff33ae93915086a8585068508d0f16f1f2868ce1fe91efbecdebf21b01d6c57d60f134c77cfbb341e5b9a624545e"]], 0x0, 0xfffffdfd, 0x0}) 17:27:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r3) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001080)) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) r6 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0xcc, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r6, 0x3}, @free_buffer={0x40086303, r6}, @register_looper, @enter_looper, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x4, 0x4, 0x1e}, @fda={0x66646185, 0x6, 0x0, 0x1c}], &(0x7f0000000080)=[0x48, 0x78]}}, @decrefs={0x40046307, 0x4}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @flat={0x77622a85, 0x1, r2, 0x4}], &(0x7f0000000100)=[0x28, 0x0, 0x38, 0x0, 0x40]}, 0xffffffff}}, @exit_looper], 0xef, 0x0, &(0x7f0000000240)="27a3458d333a092f9572f10096f9c2cc0421b08a17b258ad3d87648d51902b8d8e068bb97aac1b9902ee278db90e0cd69497d31726c13e0de03cf479fb17601ed2a0cea0db590f6120664db8208489727e4aca4687e1b97af9ca4d8a414c0be847158394c94587682007e9f0286827d482b3c6b88f211b86c70c7bed711833835c87ab7902d4e0e5d836e8a184663b286a97ac7215d00ba22c58fd3022255a3c35cb8dd14d7905f3cd4f2de555a4fddbb8b5f1cae244043debe5e64a45f4500f87a33d104ec9387855ff7fe8e881c13b9b5058dc2f821110642c2830c1606b6c7684d43f4828da167e9f8adf6b1cf1"}) timer_create(0x5, &(0x7f0000000380)={0x0, 0x22, 0x7, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_gettime(r7, &(0x7f0000000400)) [ 355.923714] binder: undelivered TRANSACTION_ERROR: 29189 [ 355.958001] binder: 10450:10452 transaction failed 29189/-22, size 0-32 line 3118 [ 355.958157] binder: 10450:10452 ioctl c028660f 20000000 returned -22 [ 355.967677] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 355.979431] binder: 10450:10453 transaction failed 29189/-22, size 0-32 line 3118 [ 355.979521] binder: 10450:10453 ioctl c028660f 20000000 returned -22 [ 355.979728] binder: undelivered TRANSACTION_ERROR: 29189 [ 355.979744] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.066541] binder: 10465:10467 transaction failed 29189/-22, size 0-32 line 3118 17:27:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, 0x0) 17:27:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 17:27:50 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) [ 356.080183] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.109777] binder: 10476:10481 ioctl c0306201 20008fd0 returned -14 [ 356.120790] binder: 10478:10482 transaction failed 29189/-22, size 0-32 line 3118 [ 356.121048] binder: 10476:10481 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 356.138041] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:50 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/105) 17:27:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000e31fcbf35c96ee3da9aaca21722d1618c860c2b9b4c9c601cee2853744bf4622808fdabdad3f27bf97844bfdd60bc2c97630d5936d7f5c1c9adc2a19df169c4482f96c39be56fd0b4bc1521c959e4343ea3df16864c4497ae94630ce1c"]], 0x0, 0xfffffdfd, 0x0}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) [ 356.154470] binder: 10478:10488 transaction failed 29189/-22, size 0-32 line 3118 [ 356.163413] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.169593] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.216751] binder: 10494:10496 transaction failed 29189/-22, size 0-32 line 3118 [ 356.223067] binder: 10492:10498 ioctl c0306201 20008fd0 returned -14 [ 356.223172] binder: 10492:10498 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 356.258419] binder: 10494:10503 transaction failed 29189/-22, size 0-32 line 3118 [ 356.267074] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.273236] binder: undelivered TRANSACTION_ERROR: 29189 17:27:53 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, 0x0) 17:27:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) fcntl$getown(r0, 0x9) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:53 executing program 3: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='aio\x00', 0x801000, &(0x7f00000000c0)='(+(ppp1ppp1\x00') clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r1, 0x10001, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:27:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) [ 358.992237] binder: 10510:10513 transaction failed 29189/-22, size 0-32 line 3118 [ 359.007229] binder: 10508:10519 ioctl c0306201 20008fd0 returned -14 [ 359.007462] binder: 10508:10519 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:27:53 executing program 2: socketpair(0x9, 0xb, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x9) socket(0x4, 0x80800, 0x8000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x501d, r2, 0x0) 17:27:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001", 0x1d, 0x400}], 0x0, 0x0) [ 359.038209] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 359.053745] binder: 10523:10526 ioctl c0306201 20008fd0 returned -14 [ 359.054130] binder: 10523:10526 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:27:53 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000200)='threaded\x00', 0x9, 0x1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000140)='./file1\x00', 0x0) clone(0x200000100010a, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x1fffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:sysfs_t:s0\x00', 0x1d, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) [ 359.128144] binder: 10510:10536 transaction failed 29189/-22, size 0-32 line 3118 [ 359.156972] binder: undelivered TRANSACTION_ERROR: 29189 [ 359.168392] binder: undelivered TRANSACTION_ERROR: 29189 [ 359.177126] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 359.189139] binder: 10533:10545 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:27:56 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7065726d70726f66696c6520736563757269747973797374656d6e6f64655c00b414b20c339c1a8030c9a5e1edfd0d7199599e55cce3290cb1a5075440f93a13184fd3d888c822276375d4cafa860e222f5d84b50f1bd896fb360ce5a33b4d40b6a431320d4c5a23cb56e2efff6ec210c9fe"], 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001", 0x1d, 0x400}], 0x0, 0x0) 17:27:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) 17:27:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="3000000200000000000000000000680000000000000018000000000000001d464b6d27ca2ca4524b0000"]], 0x0, 0xfffffdfd, 0x0}) [ 362.035821] binder: 10557:10564 transaction failed 29189/-22, size 0-32 line 3118 [ 362.048901] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.067278] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) [ 362.076391] binder: 10558:10572 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 362.097309] binder: 10573:10575 transaction failed 29189/-22, size 0-32 line 3118 [ 362.114298] binder: 10573:10575 transaction failed 29189/-22, size 0-32 line 3118 [ 362.114895] binder: undelivered TRANSACTION_ERROR: 29189 17:27:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 362.114920] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.158579] binder: 10577:10578 transaction failed 29189/-22, size 0-32 line 3118 [ 362.169771] binder: 10577:10580 transaction failed 29189/-22, size 0-32 line 3118 17:27:56 executing program 0: eventfd2(0x5, 0x80000) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)=[@enter_looper, @clear_death={0x400c630f, 0x2}], 0xb3, 0x0, &(0x7f0000000100)="34da5c96fc6eb64b06e146c982b34994ce895f64201ba3bf6dfc3bb679dd3f0961cf523493036030c247c9a0e4d0bfcf6d3968da5e51d9468bbc78a39857909bc51b69ea0cd8de6e4cc62e4b9a0e1380940e023c28920bed2159af02ee74cc17d8a043f58efd9849a264a55eeac97b4fae096106c388c872003e31344a336f0c0d5d7732bf2789f5f4650a030c8711e92d219e2ad0b6366adf1b2e95d8afe05a2ab02320592c4ebe2e00f4ecfb2c67ce9740a9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 362.176238] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.176264] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.218783] binder: 10581:10583 transaction failed 29189/-22, size 0-32 line 3118 17:27:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d6300000663044000000000096310408fb358079ebb697a3d8bc6159ad75ed8de82e5bc85f82b12f11c57de9a00528dd20f5f029cb55bffabf0a909171737a9a19119f6c68018cec4a80339b98461bcd9ed0bcfb87860526662d67dd4cc75c44e8f320c147325ce9b751e8a6ed9c88d3f6a", @ANYRES64=r2, @ANYBLOB="02000000000000000563044001000000"], 0x1ab, 0xfffffdfd, 0x0}) fstat(r0, &(0x7f0000000480)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x50, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000440)=0xe8) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xc644, 0x100000000, 0x1000, 0x3, 0x3, 0x7}) r4 = getegid() mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x800800, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, ')'}}]}}) 17:27:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r1}], &(0x7f0000000040)=[0x30, 0x20, 0x0, 0x38]}}], 0x1000, 0x0, &(0x7f0000001040)="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"}) 17:27:57 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) fchmod(r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 362.223169] binder: 10581:10585 transaction failed 29189/-22, size 0-32 line 3118 [ 362.223522] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.223547] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.360260] binder: 10595:10597 transaction failed 29189/-22, size 0-32 line 3118 [ 362.369130] binder: 10595:10600 transaction failed 29189/-22, size 0-32 line 3118 [ 362.378285] binder: undelivered TRANSACTION_ERROR: 29189 17:27:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000180)=""/106) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'vlan0\x00', 0xffff}) 17:27:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x7fff, 0x3}, {0x3, 0x3a}]}, 0x14, 0x3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:27:59 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:27:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001", 0x1d, 0x400}], 0x0, 0x0) 17:27:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x3, 0xfffffffffffffffb, 0x80000001, 0x0, 0x2, 0x0, 0xe, 0x2, 0x4, 0xfff, 0x2, 0x7a31, 0x8, 0x1, 0x7, 0x80, 0xa1a, 0x7fff, 0x0, 0x4, 0x9, 0x9, 0x2, 0x5, 0x3, 0xffffffffffffae1e, 0x5d, 0x7, 0x30000000, 0x800000000007, 0x2, 0x6, 0x78, 0x7, 0x1d82, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x1, 0x10000, 0x8, 0x80000001, 0x7, 0x401}, r2, 0x3, r3, 0x8) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 17:27:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:27:59 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0xfffffffffffffffa, [{{0x10, 0x0, 0x6}, 0x6, 0x63, 0x7, './file1'}]}}, 0x2a) [ 365.058051] binder: 10607:10613 transaction failed 29189/-22, size 0-32 line 3118 [ 365.086562] binder: 10607:10625 transaction failed 29189/-22, size 0-32 line 3118 [ 365.098591] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:27:59 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x3, 0x0, "b7b158a51a02d2e16ff3046671a7bb2c869a1d49c4e882a939c4760d204426607fd95e308cdd3426936442386ddb645456201af12535c41e02cae2bb622c993d8e27870b421674b58142214adb62cac2"}, 0xd8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 17:27:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) arch_prctl$ARCH_GET_CPUID(0x1011) 17:27:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, 0x0) 17:27:59 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x50) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x60, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/96}, &(0x7f0000000180)=0x78) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 365.107109] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.113448] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.125008] binder: 10610:10628 BC_DEAD_BINDER_DONE 0000000000000000 not found 17:27:59 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000280)={0x36f}, 0xffffffffffffffc0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0xff, @loopback, 0x4e21, 0x3, 'sh\x00', 0x2, 0x1000, 0x61}, 0x2c) getpeername(r2, &(0x7f0000000080)=@pppol2tp, &(0x7f0000000100)=0x80) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000180)={0x0, 0x84c2, 0x100000000, 0x4, 0x3, 0x8c}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ptrace$pokeuser(0x6, r4, 0x9, 0x7) [ 365.193087] binder: 10632:10633 transaction failed 29189/-22, size 0-32 line 3118 [ 365.224016] binder: 10632:10641 transaction failed 29189/-22, size 0-32 line 3118 17:27:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x3f, &(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f'}, 0x30) syz_open_procfs(r2, &(0x7f0000000180)='oom_adj\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 17:27:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, 0x0) [ 365.236054] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 365.257996] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.271266] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.377767] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:28:02 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:28:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x5, {{0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, [], 0x15}, 0x2}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xfffffffffffffffc, @empty, 0x200}}, {{0xa, 0x4e20, 0x1000, @empty, 0x8}}, {{0xa, 0x4e21, 0xfffffffffffff5ef, @mcast2, 0x8000}}]}, 0x210) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:28:02 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:28:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001", 0x1d, 0x400}], 0x0, 0x0) 17:28:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, 0x0) 17:28:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:28:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xf) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x10, 0x100) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x9) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) [ 368.089454] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 368.101550] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 368.104845] binder: 10664:10666 ioctl c0306201 20008fd0 returned -14 17:28:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, 0x0) [ 368.125996] binder_alloc: 10664: binder_alloc_buf, no vma 17:28:02 executing program 0: dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000080000000000000000000000000000000000000000000000000065eb597a00002000000000000066784f37542c861f5d842f000000002000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000"]], 0x0, 0xfffffdfd, 0x0}) 17:28:02 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:28:02 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 368.126018] binder: 10663:10679 transaction failed 29189/-3, size 0-32 line 3255 [ 368.161300] binder: undelivered TRANSACTION_ERROR: 29189 17:28:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) 17:28:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9995, 0x40000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/78) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x10000000000000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) [ 368.195556] binder: 10664:10686 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 368.231173] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 368.247397] binder_alloc: 10664: binder_alloc_buf, no vma [ 368.253911] binder: 10702:10703 transaction failed 29189/-3, size 0-32 line 3255 17:28:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, 0x0) 17:28:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000e8ff000000000000000000000a2c00000000000000000000000000000000000000000000002000000000000c000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000"]], 0x0, 0xfffffdfd, 0x0}) [ 368.264066] binder: undelivered TRANSACTION_ERROR: 29189 17:28:03 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:28:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r3, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 368.346594] binder: 10709:10712 got transaction to invalid handle [ 368.355499] binder: 10709:10712 transaction failed 29201/-22, size 0-3377699720527904 line 3118 [ 368.379485] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.386123] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 368.419120] binder: BINDER_SET_CONTEXT_MGR already set [ 368.425411] binder: 10719:10722 ioctl 40046207 0 returned -16 [ 368.437557] binder_alloc: 10664: binder_alloc_buf, no vma [ 368.444017] binder: 10719:10722 transaction failed 29189/-3, size 0-0 line 3255 [ 368.452996] binder: 10719:10722 BC_FREE_BUFFER u0000000000000000 no match [ 368.468769] binder: undelivered TRANSACTION_ERROR: 29189 17:28:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:28:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, 0x0) 17:28:03 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt(r1, 0x1, 0x6fab, &(0x7f0000000000)="bd7c78ffb7269593872f544df351fa44e0b340e92ec46e1228d9fb753b25754eaa7b9d6ccc4526f0e45b566ecb51fdb264201af8bfa70cfe3906d77fd4839caa6922dfc7479ee5b8ba968b69f569e191c22a6a752df15e683c663382f008f26e5f4878655fbee5abc5d61334f19725eee134134767ba68d619c396aafa7d61c56e5ae611821d8f594b7452dca267d4920239817fc9a8791ea83408d24cc29c03079b9d489b84753bae4f72a6286df1c43f9f9323220506a02404fd9d2cedeb4214d6cfb7b7b8f2477ff6aef8c64dbc", 0xcf) 17:28:03 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x1a) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r1 = dup(r0) set_thread_area(&(0x7f0000000040)={0xa, 0x100000, 0x1000, 0xa2, 0x1f, 0x401, 0x0, 0x8001, 0x40, 0x3ff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000e778c77c72f458f25f66b56eb3d531ab288167da26a8e53b02f8c3fb7339dae16164b6a041e9521d21c0969f22ac90357c501a32d8a1fdb4b186c6fce05c20863d7920", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000"]], 0x0, 0xfffffdfd, 0x0}) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 368.902476] binder: 10730:10734 ioctl c0306201 20008fd0 returned -14 [ 368.916447] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 368.926525] binder_alloc: 10730: binder_alloc_buf, no vma [ 368.951218] binder: 10727:10737 transaction failed 29189/-3, size 0-32 line 3255 [ 368.971667] binder: 10730:10740 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 368.980389] binder_alloc: 10730: binder_alloc_buf, no vma [ 368.992719] binder: 10727:10739 transaction failed 29189/-3, size 0-32 line 3255 [ 369.012377] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.021580] binder: undelivered TRANSACTION_ERROR: 29189 17:28:05 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:28:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0xd, "9e"}, 0x3, 0x2b9004fb04939ca6) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000840"], 0x0, 0x0, 0x0}) 17:28:05 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 17:28:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x0, 0x0) 17:28:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000aa77837f3e7cca27827e843d6623384cb949fee58984386f260e26c8ef986ec2907b4933597a931c8a51038bfeb8cb8286fe1107dce53c1ee342293253d4b04cac7725b4bec657e7f395e8344e72c3ff0316b4cd839f1bed2d60b9fabacd34cdce261ccbbc23b57088773024ab58fe146b63e359626b08e09c12e943f92c00020000fd690ba37f3d96d11f3c47cc3dea54c501c0027e7f09efb6839b20ba409e000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000380000000000000068000000000000001800000000000000"]], 0x0, 0xfffffdfd, 0x0}) 17:28:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4000000000df3e0633d3cdc155f1c5e5aa4081ffe2ab545e48d1577c1a4cf707"], 0x34b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 17:28:05 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)='FILE_MMAP', 0x9, 0x1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723d2a2c736d61636b6673666c6f6f723d6367726f7570282c66756e633d46494c455f4d4d41502c6673636f6e746578743d73797374656d5f752c617070978462ef914eca16090f72616973652c6673636f6e746578743d"]) 17:28:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) fgetxattr(r1, &(0x7f0000000000)=@random={'user.', '/dev/binder#\x00'}, &(0x7f0000000040)=""/30, 0x1e) chroot(&(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f00000002c0)=[0x30, 0x38, 0x68, 0x18]}}], 0x0, 0xfffffdfd, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000b40)='security.capability\x00', &(0x7f0000000b80)=@v1={0x1000000, [{0x44dc7eed, 0x3ecc0592}]}, 0xc, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x4}, [{0x2, 0x7, r2}, {0x2, 0x7, r3}, {0x2, 0x5, r4}, {0x2, 0x2, r5}, {0x2, 0x5, r6}, {0x2, 0x2, r7}, {0x2, 0x7, r8}, {0x2, 0x1, r9}, {0x2, 0x1, r10}], {0x4, 0x5}, [{0x8, 0x6}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'user.'}, {0x20, '}'}, {0x20, 'user.'}, {0x20, '/dev/binder#\x00'}, {0x20, 'user.'}], 0xa, "dd8d4dd3c310cfa58468b14f3df0acd3bdfb58c3545bc493dbfee611c8cf76ba79d7174cc7248757a28c8a0f6dec12a9dcd89c8355064729911935c81d01c9277391823a6d4fcd3cc985e9004e5397bf536c43c8815d7d453f6ac1cdf1649668b3d97b9a60908cd4e06708af9d5f3dd558d054e112a090a1a0"}, 0xa6) [ 371.237191] binder: 10743:10749 unknown command 1074266118 [ 371.244912] binder: 10743:10749 ioctl c0306201 20000380 returned -22 [ 371.264283] binder: 10744:10755 got transaction with invalid offsets ptr 17:28:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_exec_t:s0\x00', 0x22, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) set_robust_list(&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0xb51d, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x1fb) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) fcntl$setflags(r0, 0x2, 0x1) 17:28:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x0, 0x0) [ 371.264317] binder: 10744:10755 transaction failed 29201/-14, size 0-32 line 3301 [ 371.265182] binder: BINDER_SET_CONTEXT_MGR already set [ 371.265191] binder: 10746:10756 ioctl 40046207 0 returned -16 [ 371.265614] binder: 10746:10756 ioctl c0306201 20008fd0 returned -14 [ 371.265910] binder: undelivered TRANSACTION_ERROR: 29201 [ 371.274932] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 371.316861] binder: 10746:10764 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 371.361294] ------------[ cut here ]------------ [ 371.361301] kernel BUG at drivers/android/binder_alloc.c:1105! [ 371.361317] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 371.361324] Modules linked in: [ 371.361335] CPU: 0 PID: 10770 Comm: syz-executor.0 Not tainted 4.9.165+ #29 [ 371.361343] task: ffff8801961baf80 task.stack: ffff880196228000 [ 371.361367] RIP: 0010:[] [] binder_alloc_do_buffer_copy+0xcb/0x500 [ 371.361372] RSP: 0018:ffff88019622f518 EFLAGS: 00010212 [ 371.361378] RAX: 0000000000040000 RBX: 0000000020001008 RCX: ffffc9000092f000 [ 371.361383] RDX: 0000000000000239 RSI: ffffffff8221c34b RDI: ffff8801d488b9d8 [ 371.361390] RBP: ffff88019622f598 R08: ffff88019622f870 R09: 0000000000000028 [ 371.361396] R10: ffffed0032c45efe R11: ffff88019622f7f7 R12: 0000000000000020 [ 371.361402] R13: ffff8801c5567898 R14: 0000000000000028 R15: ffff88019622f870 [ 371.361411] FS: 00007f63b207f700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 371.361417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.361424] CR2: 0000001b30421000 CR3: 00000001cd9d6000 CR4: 00000000001606b0 [ 371.361435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.361441] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 371.361443] Stack: [ 371.361460] ffff88019622f7f0 ffff88019622f548 ffffffff814f79e6 0000000000000008 [ 371.361474] dffffc0000000000 ffff8801ca342a58 00ff88019622f5d8 ffff8801ca342a00 [ 371.361488] ffff8801961bc1e0 ffff8801c5567800 0000000000000030 ffff88019622f870 [ 371.361491] Call Trace: [ 371.361502] [] ? memcpy+0x46/0x50 [ 371.361515] [] binder_alloc_copy_from_buffer+0x37/0x42 [ 371.361526] [] binder_get_object+0xa2/0x1a0 [ 371.361538] [] binder_transaction+0x1fdf/0x5840 [ 371.361548] [] ? binder_transaction+0x1141/0x5840 [ 371.361559] [] ? set_next_entity+0x10d1/0x4220 [ 371.361569] [] ? binder_inc_ref_for_node+0xba0/0xba0 [ 371.361580] [] ? __save_stack_trace+0x7a/0xf0 [ 371.361590] [] ? depot_save_stack+0x13c/0x4a0 [ 371.361600] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 371.361609] [] ? __might_fault+0x114/0x1d0 [ 371.361619] [] binder_thread_write+0x593/0x2110 [ 371.361629] [] ? trace_hardirqs_on+0x10/0x10 [ 371.361640] [] ? mark_wake_futex+0x120/0x120 [ 371.361651] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 371.361662] [] ? binder_transaction+0x5840/0x5840 [ 371.361673] [] ? __might_fault+0x114/0x1d0 [ 371.361685] [] binder_ioctl+0xecd/0x1720 [ 371.361696] [] ? binder_poll+0x240/0x240 [ 371.361703] [] ? __lock_acquire+0x5e5/0x4350 [ 371.361713] [] ? __might_sleep+0x95/0x1a0 [ 371.361722] [] ? binder_poll+0x240/0x240 [ 371.361751] [] do_vfs_ioctl+0xb87/0x11d0 [ 371.361764] [] ? selinux_file_ioctl+0x103/0x550 [ 371.361775] [] ? ioctl_preallocate+0x210/0x210 [ 371.361787] [] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 371.361796] [] ? __fget+0x208/0x370 [ 371.361805] [] ? __fget+0x22f/0x370 [ 371.361815] [] ? __fget+0x47/0x370 [ 371.361825] [] ? security_file_ioctl+0x8f/0xc0 [ 371.361833] [] SyS_ioctl+0x8f/0xc0 [ 371.361844] [] ? do_vfs_ioctl+0x11d0/0x11d0 [ 371.361853] [] do_syscall_64+0x1ad/0x570 [ 371.361862] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 371.362014] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 0a 10 ff 4d 39 e6 76 07 e8 05 0a 10 ff <0f> 0b e8 fe 09 10 ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 371.362028] RIP [] binder_alloc_do_buffer_copy+0xcb/0x500 [ 371.362032] RSP [ 371.362533] ---[ end trace 76ee2f6053cece9f ]--- [ 371.362539] Kernel panic - not syncing: Fatal exception [ 371.362929] Kernel Offset: disabled [ 371.794682] Rebooting in 86400 seconds..